<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="14106">
<package pkgid="76a01dbb3c81604293608e0c04d15ef97c96d1e52802f2c8233489b40b151f33" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.0.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1507636800">- drop 389-ds-reproducible.patch: applied upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1508328000">- update to 1.4.0.1
  - Ticket 49038 - remove legacy replication - change cleanup
    script precedence
  - Ticket 49392 - memavailable not available
  - Ticket 49235 - pbkdf2 by default
  - Ticket 49279 - remove dsktune
  - Ticket 49372 - filter optimisation improvements for common
    queries
  - Ticket 49320 - Activating already active role returns error 16
  - Ticket 49389 - unable to retrieve specific cosAttribute when
    subtree password policy is configured
  - Ticket 49092 - Add CI test for schema-reload
  - Ticket 49388 - repl-monitor - matches null string many times in
    regex
  - Ticket 49387 - pbkdf2 settings were too aggressive
  - Ticket 49385 - Fix coverity warnings
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 48973 - Indexing a ExactIA5Match attribute with a
    IgnoreIA5Match matching rule triggers a warning
  - Ticket 49378 - server init fails
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 49180 - add CI test
  - Ticket 49180 - errors log filled with attrlist_replace -
    attr_replace</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Use openSUSE rpm group classifications.
- Remove removal of .a files that do not exist to begin with
  (because of --disable-static).
- Remove double removal of .la files.
- Do not suppress errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1510315200">- update to 1.4.0.2
  - Ticket 48393 - fix copy and paste error
  - Ticket 49439 - cleanallruv is not logging information
  - Ticket 48393 - Improve replication config validation
  - Ticket lib389 3 - Python 3 support for ACL test suite
  - Ticket 103 - sysconfig not found
  - Ticket 49436 - double free in COS in some conditions
  - Ticket 48007 - CI test to test changelog trimming interval
  - Ticket 49424 - Resolve csiphash alignment issues
  - Ticket lib389 3 - Python 3 support for
    pwdPolicy_controls_test.py
  - Ticket 3 - python 3 support - filter test
  - Ticket 49434 - RPM build errors
  - Ticket 49432 - filter optimise crash
  - Ticket 49432 - Add complex fliter CI test
  - Ticket 48894 - harden valueset_array_to_sorted_quick valueset
    access
  - Ticket 49401 - Fix compiler incompatible-pointer-types warnings
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49409 - Update lib389 requirements
  - Ticket 49401 - improve valueset sorted performance on delete
  - Ticket 49374 - server fails to start because maxdisksize is
    recognized incorrectly
  - Ticket 49408 - Server allows to set any nsds5replicaid in the
    existing replica entry
  - Ticket 49407 - status-dirsrv shows ellipsed lines
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49386 - Memberof should be ignore MODRDN when the
    pre/post entry are identical
  - Ticket 48006 - Missing warning for invalid replica backoff
    configuration
  - Ticket 49064 - testcase hardening
  - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated
    consumer
  - Ticket lib389 3 - python 3 support
  - Ticket 49402 - Adding a database entry with the same database
    name that was deleted hangs server at shutdown
  - Ticket 48235 - remove memberof lock (cherry-pick error)
  - Ticket 49394 - build warning
  - Ticket 49381 - Refactor numerous suite docstrings - Part 2
  - Ticket 49394 - slapi_pblock_get may leave unchanged the
    provided variable
  - Ticket 49403 - tidy ns logging
  - Ticket 49381 - Refactor filter test suite docstrings
  - Ticket 48235 - Remove memberOf global lock
  - Ticket 103 - Make sysconfig where it is expected to exist
  - Ticket 49400 - Add clang support to rpm builds
  - Ticket 49381 - Refactor ACL test suite docstrings
  - Ticket 49363 - Merge lib389
  - Ticket 101 - BaseException.message has been deprecated in
    Python3
  - Ticket 102 - referral support
  - Ticket 99 - Fix typo in create_topology
  - Ticket #98 - Fix dbscan output
  - Ticket #77 - Fix changelogdb param issue
  - Ticket #77 - Refactor docstrings in rST format - part 1
  - Ticket 96 - Change binaries? names
  - Ticket 77 - Add sphinx documentation
  - Ticket 43 - Add support for Referential Integrity plugin
  - Ticket 45 - Add support for Rootdn Access Control plugin
  - Ticket 46 - dsconf support for dynamic schema reload
  - Ticket 74 - Advice users to set referint-update-delay to 0
  - Ticket 92 - display_attr() should return str not bytes in py3
  - Ticket 93 - Fix test cases in ctl_dbtasks_test.py
  - Ticket 88 - python install and remove for tests
  - Ticket 85 - Remove legacy replication attribute
  - Ticket 91 - Fix replication topology
  - Ticket 89 - Fix inconsistency with serverid
  - Ticket 79 - Fix replica.py and add tests
  - Ticket 86 - add build dir to gitignore
  - Ticket 83 - Add an util for generating instance parameters
  - Ticket 87 - Update accesslog regec for HR etimes
  - Ticket 49 - Add support for whoami plugin
  - Ticket 48 - Add support for USN plugin
  - Ticket 78 - Add exists() method to DSLdapObject
  - Ticket 31 - Allow complete removal of some memberOf attrs
  - Ticket31 - Add memberOf fix-up task
  - Ticket 67 - Add ensure_int function
  - Ticket 59 - lib389 support for index management.
  - Ticket 67 - get attr by type
  - Ticket 70 - Improve repl tools
  - Ticket 50 - typo in db2* in dsctl
  - Ticket 31 - Add status command and SkipNested support for
    MemberOf
  - Ticket 31 - Add functional tests for MemberOf plugin
  - Ticket 66 - expand healthcheck for Directory Server
  - Ticket 69 - add specfile requires
  - Ticket 31 - Initial MemberOf plugin support
  - Ticket 50 - Add db2* tasks to dsctl
  - Ticket 65 - Add m2c2 topology
  - Ticket 63 - part 2, agreement test
  - Ticket 63 - lib389 python 3 fix
  - Ticket 62 - dirsrv offline log
  - Ticket 60 - add dsrc to dsconf and dsidm
  - Ticket 32 - Add TLS external bind support for testing
  - Ticket 27 - Fix get function in tests
  - Ticket 28 - userAccount for older versions without nsmemberof
  - Ticket 27 - Improve dseldif API
  - Ticket 30 - Add initial support for account lock and unlock.
  - Ticket 29 - fix incorrect format in tools
  - Ticket 28 - Change default objectClasses for users and groups
  - Ticket 1 - Fix missing dn / rdn on config.
  - Ticket 27 - Add a module for working with dse.ldif file
  - Ticket 1 - cn=config comparison
  - Ticket 21 - Missing serverid in dirsrv_test due to incorrect
    allocation
  - Ticket 26 - improve lib389 sasl support
  - Ticket 24 - Join paths using os.path.join instead of string
    concatenation
  - Ticket 25 - Fix RUV repr function
  - Ticket 23 - Use DirSrv.exists() instead of manually checking
    for instance?s existence
  - Ticket 1 - cn=config comparison
  - Ticket 22 - Specify a basedn parameter for IDM modules
  - Ticket 19 - missing readme.md in python3
  - Ticket 20 - Use the DN_DM constant instead of hard coding its
    value
  - Ticket 19 - Missing file and improve make
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 16 - Reset InstScriptsEnabled argument during the init
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 13 - Add init function to create new domain entries
  - Ticket 15 - Improve instance configuration ability
  - Ticket 10 - Improve command line tool arguments
  - Ticket 9 - Convert readme to MD
  - Ticket 7 - Add pause and resume methods to topology fixtures
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 6 - Bump lib389 version 1.0.4
  - Ticket 5 - Fix container build on fedora
  - Ticket 4 - Cert detection breaks some tests
  - Ticket 49137 - Add sasl plain tests, lib389 support
  - Ticket 2 - pytest mark with version relies on root
  - Ticket 49126 - DIT management tool
  - Ticket 49101 - Python 2 generate example entries
  - Ticket 49103 - python 2 support for installer
  - Ticket 47747 - Add topology_i2 and topology_i3
  - Ticket 49087 - lib389 resolve jenkins issues
  - Ticket 48413 - Improvements to lib389 for rest
  - Ticket 49083 - Support prefix for discovery of the defaults.inf
    file.
  - Ticket 49055 - Fix debugging mode issue
  - Ticket 49060 - Increase number of masters, hubs and consumers
    in topology
  - Ticket 47747 - Add more topology fixtures
  - Ticket 47840 - Add InstScriptsEnabled argument
  - Ticket 47747 - Add topology fixtures module
  - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01
  - Ticket 49022 - Lib389, py3 installer cannot create entries in
    backend
  - Ticket 49024 - Fix paths to the dbdir parent
  - Ticket 49024 - Fix db_dir paths
  - Ticket 49024 - Fix paths in tools module
  - Ticket 48961 - Fix lib389 minor issues shown by 48961 test
  - Ticket 49010 - Lib389 fails to start with systemctl changes
  - Ticket 49007 - lib389 fixes for paths to use online values
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 48991 - Fix lib389 spec for python2 and python3
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48951 - dsadm dsconfig status and plugin
  - Ticket 47957 - Update the replication ?idle? status string
  - Ticket 48951 - dsadm and dsconf base files
  - Ticket 48952 - Restart command needs a sleep
  - Ticket 48949 - Fix ups for style and correctness
  - Ticket 48949 - added copying slapd-collations.conf
  - Ticket 48949 - change default file path generation - use
    os.path.join
  - Ticket 48949 - os.makedirs() exist_ok not python2 compatible,
    added try/except
  - Ticket 48949 - configparser fallback not python2 compatible
  - Ticket 48946 - openConnection should not fully popluate DirSrv
    object
  - Ticket 48832 - Add DirSrvTools.getLocalhost() function
  - Ticket 48382 - Fix serverCmd to get sbin dir properly
  - Bug 1347760 - Information disclosure via repeated use of LDAP
    ADD operation, etc.
  - Ticket 48937 - Cleanup valgrind wrapper script
  - Ticket 48923 - Fix additional issue with serverCmd
  - Ticket 48923 - serverCmd timeout not working as expected
  - Ticket 48917 - Attribute presence
  - Ticket 48911 - Plugin improvements for lib389
  - Ticket 48911 - Improve plugin support based on new mapped
    objects
  - Ticket 48910 - Fixes for backend tests and lib389 reliability.
  - Ticket 48860 - Add replication tools
  - Ticket 48888 - Correction to create of dsldapobject
  - Ticket 48886 - Fix NSS SSL library in lib389
  - Ticket 48885 - Fix spec file requires
  - Ticket 48884 - Bugfixes for mapped object and new connections
  - Ticket 48878 - better style for backend in backend_test.py
  - Ticket 48878 - pep8 fixes part 2
  - Ticket 48878 - pep8 fixes and fix rpm to build
  - Ticket 48853 - Prerelease installer
  - Ticket 48820 - Begin to test compatability with py.test3, and
    the new orm
  - Ticket 48434 - Fix for negative tz offsets
  - Ticket 48857 - Remove python-krbV from lib389
  - Ticket 48820 - Fix tests to ensure they work with the new
    object types
  - Ticket 48820 - Move Encryption and RSA to the new object types
  - Ticket 48820 - Proof of concept of orm style mapping of configs
    and objects
  - Ticket 48820 - Clitool rename
  - Ticket 48431 - lib389 integrate ldclt
  - Ticket 48434 - lib389 logging tools
  - Ticket 48796 - add function to remove logs
  - Ticket 48771 - lib389 - get ns-slapd version
  - Ticket 48830 - Convert lib389 to ip route tools
  - Ticket 48763 - backup should run regardless of existing
    backups.
  - Ticket 48434 - lib389 logging tools
  - Ticket 48798 - EL6 compat for lib389 tests for DH params
  - Ticket 48798 - lib389 add ability to create nss ca and
    certificate
  - Ticket 48433 - Aci linting tools
  - Ticket 48791 - format args in server tools
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48794 - lib389 build requires are on a single line
  - Ticket 48660 - Add function to convert binary values in an
    entry to base64
  - Ticket 48764 - Fix mit krb password to be random.
  - Ticket 48765 - Change default ports for standalone topology
  - Ticket 48750 - Clean up logging to improve command experience
  - Ticket 48751 - Improve lib389 ldapi support
  - Ticket 48399 - Add helper makefile to lib389 to build and
    install
  - Ticket 48661 - Agreement test suite fails at the test_changes
    case
  - Ticket 48407 - Add test coverage module for lib389 repo
  - Ticket 48357 - clitools should standarise their args
  - Ticket 48560 - Make verbose handling consistent
  - Ticket 48419 - getadminport() should not a be a static method
  - Ticket 48408 - RFE escaped default suffix for tests
  - Ticket 48401 - Revert typecheck
  - Ticket 48401 - lib389 Entry hasAttr returs dict instead of
    false
  - Ticket 48390 - RFE Improvements to lib389 monitor features for
    rest389
  - Ticket 48358 - Add new spec file
  - Ticket 48371 - weaker host check on localhost.localdomain
  - Ticket 58358 - Update spec file with pre-release versioning
  - Ticket 48358 - Make Fedora packaging changes to the spec file
  - Ticket 48358 - Prepare lib389 for Fedora Packaging
  - Ticket 48364 - Fix test failures
  - Ticket 48360 - Refactor the delete agreement function
  - Ticket 48361 - Expand 389ds monitoring capabilities
  - Ticket 48246 - Adding license/copyright to lib389 files
  - Ticket 48340 - Add basic monitor support to lib389
    https://fedorahosted.org/389/ticket/48340
  - Ticket 48353 - Add Replication REST support to lib389
  - Ticket 47840 - Fix regression
  - Ticket 48343 - lib389 krb5 realm management
    https://fedorahosted.org/389/ticket/48343
  - Ticket 47840 - fix lib389 to use sbin scripts
    https://fedorahosted.org/389/ticket/47840
  - Ticket 48335 - Add SASL support to lib389
  - Ticket 48329 - Fix case-senstive scyheam comparisions
  - Ticket 48303 - Fix lib389 broken tests
  - Ticket 48329 - add matching rule functions to schema module
  - Ticket 48324 - fix boolean capitalisation (one line)
    https://fedorahosted.org/389/ticket/48324
  - Ticket 48321 - Improve is_a_dn check to prevent mistakes with
    lib389 auth https://fedorahosted.org/389/ticket/48321
  - Ticket 48322 - Allow reindex function to reindex all attributes
  - Ticket 48319 - Fix ldap.LDAPError exception processing
  - Ticket 48318 - Do not delete a changelog while disabling a
    replication by suffix
  - Ticket 48308 - Add eq and ne to Entry to allow fast comparison
    https://fedorahosted.org/389/ticket/48308
  - Ticket 48303 - Fix lib389 broken tests - backend_test
  - Ticket 48309 - Fix lib389 lib imports
  - Ticket 48303 - Fix lib389 broken tests - agreement_test
  - Ticket 48303 - Fix lib389 broken tests - aci_parse_test
  - Ticket 48301 - add tox support
  - Ticket 48204 - update lib389 for python3
  - Ticket 48273 - Improve valgrind functions
  - Ticket 48271 - Fix for self.prefix being none when
    SER_DEPLOYED_DIR is none
    https://fedorahosted.org/389/ticket/48271
  - Ticket 48259 - Add aci parsing utilities to lib389
  - Ticket 48252 - (lib389) adding get_bin_dir and dbscan
  - Ticket 48247 - Change the default user to ?dirsrv?
  - Ticket 47848 - Add new function to create ldif files
  - Ticket 48239 - Fix for prefix allocation of un-initialised
    dirsrv objects
  - Ticket 48237 - Add lib389 helper to enable and disable logging
    services.
  - Ticket 48236 - Add get effective rights helper to lib389
  - Ticket 48238 - Add objectclass and attribute type query
    mechanisms
  - Ticket 48029 - Add missing replication related functions
  - Ticket 48028 - add valgrind wrapper for ns-slapd
  - Ticket 48028 - lib389 - add valgrind functions
  - Ticket 48022 - lib389 - Add all the server tasks
  - Ticket 48023 - create function to test replication between
    servers
  - Ticket 48020 - lib389 - need to reset args_instance with every
    DirSrv init
  - Ticket 48000 - Repl agmts need more time to stop
  - Ticket 48004 - Fix various issues
  - Ticket 48000 - replica agreement pause/resume should have a
    short sleep
  - Ticket 47990 - Add check for ?.removed? instances when doing an
    upgrade
  - Ticket 47990 - Add ?upgrade? function to lib389
  - Ticket 47691 - using lib389 with RPMs
  - Ticket 47848 - Add support for setuptools.
  - Ticket 47855 - Add function to clear tmp directory
  - Ticket 47851 - Need to retrieve tmp directory path
  - Ticket 47845 - add stripcsn option to tombstone fixup task
  - Ticket 47851 - Add function to retrieve dirsrvtests data
    directory
  - Ticket 47845 - Add backup/restore/fixup tombstone tasks to
    lib389
  - Ticket 47819 - Add the new precise tombstone purging config
    attribute
  - Ticket 47695 - Add plugins/tasks/Index
  - Ticket 47648 - lib389 - add schema classes, methods
  - Ticket 47671 - CI lib389: allow to open a DirSrv without having
    to create the instance
  - Ticket 47600 - Replica/Agreement/Changelog not conform to the
    design
  - Ticket 47652 - replica add fails: MT.list return a list not an
    entry
  - Ticket 47635 - MT/Backend/Suffix to be conform with the design
  - Ticket 47625 - CI lib389: DirSrv not conform to the design
  - Ticket 47595 - fail to detect/reinit already existing
    instance/backup
  - Ticket 47590 - CI tests: add/split functions around replication
  - Ticket 47584 - CI tests: add backup/restore of an instance
  - Ticket 47578 - CI tests: removal of ?sudo? and absolute path in
    lib389
  - Ticket 47568 - Rename DSAdmin class
  - Ticket 47566 - Initial import of DSadmin into 389-test repos</changelog>
  <changelog author="mrueckert@suse.de" date="1510315201">- lib389 is merged into this tarball now. move the subpackage here.</changelog>
  <changelog author="mrueckert@suse.de" date="1510401600">- we actually need pyldap</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- update to 1.4.0.3
  - Ticket 49457 - Fix spal_meminfo_get function prototype
  - Ticket 49455 - Add tests to monitor test suit.
  - Ticket 49448 - dynamic default pw scheme based on environment.
  - Ticket 49298 - fix complier warn
  - Ticket 49298 - Correct error codes with config restore.
  - Ticket 49454 - SSL Client Authentication breaks in FIPS mode
  - Ticket 49453 - passwd.py to use pwdhash defaults.
  - Ticket 49427 - whitespace in fedse.c
  - Ticket 49410 - opened connection can remain no longer poll,
    like hanging
  - Ticket 48118 - fix compiler warning for incorrect return type
  - Ticket 49451 - Add environment markers to lib389 dependencies
  - Ticket 49325 - Proof of concept rust tqueue in sds
  - Ticket 49443 - scope one searches in 1.3.7 give incorrect
    results
  - Ticket 48118 - At startup, changelog can be erronously rebuilt
    after a normal shutdown
  - Ticket 49412 - SIGSEV when setting invalid changelog config
    value
  - Ticket 49441 - Import crashes - oneline fix
  - Ticket 49377 - Incoming BER too large with TLS on plain port
  - Ticket 49441 - Import crashes with large indexed binary
    attributes
  - Ticket 49435 - Fix NS race condition on loaded test systems
  - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2
  - Ticket 17 - lib389 - dsremove support
  - Ticket 3 - lib389 - python 3 compat for paged results test
  - Ticket 3 - lib389 - Python 3 support for memberof plugin test
    suit
  - Ticket 3 - lib389 - config test
  - Ticket 3 - lib389 - python 3 support ds_logs tests
  - Ticket 3 - lib389 - python 3 support for betxn test</changelog>
  <changelog author="mrueckert@suse.de" date="1511179201">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
</package>
<package pkgid="59bcfcefd767987dd6740f228f515e5baebd515a707820e3935498b24c831685" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.0.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1507636800">- drop 389-ds-reproducible.patch: applied upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1508328000">- update to 1.4.0.1
  - Ticket 49038 - remove legacy replication - change cleanup
    script precedence
  - Ticket 49392 - memavailable not available
  - Ticket 49235 - pbkdf2 by default
  - Ticket 49279 - remove dsktune
  - Ticket 49372 - filter optimisation improvements for common
    queries
  - Ticket 49320 - Activating already active role returns error 16
  - Ticket 49389 - unable to retrieve specific cosAttribute when
    subtree password policy is configured
  - Ticket 49092 - Add CI test for schema-reload
  - Ticket 49388 - repl-monitor - matches null string many times in
    regex
  - Ticket 49387 - pbkdf2 settings were too aggressive
  - Ticket 49385 - Fix coverity warnings
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 48973 - Indexing a ExactIA5Match attribute with a
    IgnoreIA5Match matching rule triggers a warning
  - Ticket 49378 - server init fails
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 49180 - add CI test
  - Ticket 49180 - errors log filled with attrlist_replace -
    attr_replace</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Use openSUSE rpm group classifications.
- Remove removal of .a files that do not exist to begin with
  (because of --disable-static).
- Remove double removal of .la files.
- Do not suppress errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1510315200">- update to 1.4.0.2
  - Ticket 48393 - fix copy and paste error
  - Ticket 49439 - cleanallruv is not logging information
  - Ticket 48393 - Improve replication config validation
  - Ticket lib389 3 - Python 3 support for ACL test suite
  - Ticket 103 - sysconfig not found
  - Ticket 49436 - double free in COS in some conditions
  - Ticket 48007 - CI test to test changelog trimming interval
  - Ticket 49424 - Resolve csiphash alignment issues
  - Ticket lib389 3 - Python 3 support for
    pwdPolicy_controls_test.py
  - Ticket 3 - python 3 support - filter test
  - Ticket 49434 - RPM build errors
  - Ticket 49432 - filter optimise crash
  - Ticket 49432 - Add complex fliter CI test
  - Ticket 48894 - harden valueset_array_to_sorted_quick valueset
    access
  - Ticket 49401 - Fix compiler incompatible-pointer-types warnings
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49409 - Update lib389 requirements
  - Ticket 49401 - improve valueset sorted performance on delete
  - Ticket 49374 - server fails to start because maxdisksize is
    recognized incorrectly
  - Ticket 49408 - Server allows to set any nsds5replicaid in the
    existing replica entry
  - Ticket 49407 - status-dirsrv shows ellipsed lines
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49386 - Memberof should be ignore MODRDN when the
    pre/post entry are identical
  - Ticket 48006 - Missing warning for invalid replica backoff
    configuration
  - Ticket 49064 - testcase hardening
  - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated
    consumer
  - Ticket lib389 3 - python 3 support
  - Ticket 49402 - Adding a database entry with the same database
    name that was deleted hangs server at shutdown
  - Ticket 48235 - remove memberof lock (cherry-pick error)
  - Ticket 49394 - build warning
  - Ticket 49381 - Refactor numerous suite docstrings - Part 2
  - Ticket 49394 - slapi_pblock_get may leave unchanged the
    provided variable
  - Ticket 49403 - tidy ns logging
  - Ticket 49381 - Refactor filter test suite docstrings
  - Ticket 48235 - Remove memberOf global lock
  - Ticket 103 - Make sysconfig where it is expected to exist
  - Ticket 49400 - Add clang support to rpm builds
  - Ticket 49381 - Refactor ACL test suite docstrings
  - Ticket 49363 - Merge lib389
  - Ticket 101 - BaseException.message has been deprecated in
    Python3
  - Ticket 102 - referral support
  - Ticket 99 - Fix typo in create_topology
  - Ticket #98 - Fix dbscan output
  - Ticket #77 - Fix changelogdb param issue
  - Ticket #77 - Refactor docstrings in rST format - part 1
  - Ticket 96 - Change binaries? names
  - Ticket 77 - Add sphinx documentation
  - Ticket 43 - Add support for Referential Integrity plugin
  - Ticket 45 - Add support for Rootdn Access Control plugin
  - Ticket 46 - dsconf support for dynamic schema reload
  - Ticket 74 - Advice users to set referint-update-delay to 0
  - Ticket 92 - display_attr() should return str not bytes in py3
  - Ticket 93 - Fix test cases in ctl_dbtasks_test.py
  - Ticket 88 - python install and remove for tests
  - Ticket 85 - Remove legacy replication attribute
  - Ticket 91 - Fix replication topology
  - Ticket 89 - Fix inconsistency with serverid
  - Ticket 79 - Fix replica.py and add tests
  - Ticket 86 - add build dir to gitignore
  - Ticket 83 - Add an util for generating instance parameters
  - Ticket 87 - Update accesslog regec for HR etimes
  - Ticket 49 - Add support for whoami plugin
  - Ticket 48 - Add support for USN plugin
  - Ticket 78 - Add exists() method to DSLdapObject
  - Ticket 31 - Allow complete removal of some memberOf attrs
  - Ticket31 - Add memberOf fix-up task
  - Ticket 67 - Add ensure_int function
  - Ticket 59 - lib389 support for index management.
  - Ticket 67 - get attr by type
  - Ticket 70 - Improve repl tools
  - Ticket 50 - typo in db2* in dsctl
  - Ticket 31 - Add status command and SkipNested support for
    MemberOf
  - Ticket 31 - Add functional tests for MemberOf plugin
  - Ticket 66 - expand healthcheck for Directory Server
  - Ticket 69 - add specfile requires
  - Ticket 31 - Initial MemberOf plugin support
  - Ticket 50 - Add db2* tasks to dsctl
  - Ticket 65 - Add m2c2 topology
  - Ticket 63 - part 2, agreement test
  - Ticket 63 - lib389 python 3 fix
  - Ticket 62 - dirsrv offline log
  - Ticket 60 - add dsrc to dsconf and dsidm
  - Ticket 32 - Add TLS external bind support for testing
  - Ticket 27 - Fix get function in tests
  - Ticket 28 - userAccount for older versions without nsmemberof
  - Ticket 27 - Improve dseldif API
  - Ticket 30 - Add initial support for account lock and unlock.
  - Ticket 29 - fix incorrect format in tools
  - Ticket 28 - Change default objectClasses for users and groups
  - Ticket 1 - Fix missing dn / rdn on config.
  - Ticket 27 - Add a module for working with dse.ldif file
  - Ticket 1 - cn=config comparison
  - Ticket 21 - Missing serverid in dirsrv_test due to incorrect
    allocation
  - Ticket 26 - improve lib389 sasl support
  - Ticket 24 - Join paths using os.path.join instead of string
    concatenation
  - Ticket 25 - Fix RUV repr function
  - Ticket 23 - Use DirSrv.exists() instead of manually checking
    for instance?s existence
  - Ticket 1 - cn=config comparison
  - Ticket 22 - Specify a basedn parameter for IDM modules
  - Ticket 19 - missing readme.md in python3
  - Ticket 20 - Use the DN_DM constant instead of hard coding its
    value
  - Ticket 19 - Missing file and improve make
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 16 - Reset InstScriptsEnabled argument during the init
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 13 - Add init function to create new domain entries
  - Ticket 15 - Improve instance configuration ability
  - Ticket 10 - Improve command line tool arguments
  - Ticket 9 - Convert readme to MD
  - Ticket 7 - Add pause and resume methods to topology fixtures
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 6 - Bump lib389 version 1.0.4
  - Ticket 5 - Fix container build on fedora
  - Ticket 4 - Cert detection breaks some tests
  - Ticket 49137 - Add sasl plain tests, lib389 support
  - Ticket 2 - pytest mark with version relies on root
  - Ticket 49126 - DIT management tool
  - Ticket 49101 - Python 2 generate example entries
  - Ticket 49103 - python 2 support for installer
  - Ticket 47747 - Add topology_i2 and topology_i3
  - Ticket 49087 - lib389 resolve jenkins issues
  - Ticket 48413 - Improvements to lib389 for rest
  - Ticket 49083 - Support prefix for discovery of the defaults.inf
    file.
  - Ticket 49055 - Fix debugging mode issue
  - Ticket 49060 - Increase number of masters, hubs and consumers
    in topology
  - Ticket 47747 - Add more topology fixtures
  - Ticket 47840 - Add InstScriptsEnabled argument
  - Ticket 47747 - Add topology fixtures module
  - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01
  - Ticket 49022 - Lib389, py3 installer cannot create entries in
    backend
  - Ticket 49024 - Fix paths to the dbdir parent
  - Ticket 49024 - Fix db_dir paths
  - Ticket 49024 - Fix paths in tools module
  - Ticket 48961 - Fix lib389 minor issues shown by 48961 test
  - Ticket 49010 - Lib389 fails to start with systemctl changes
  - Ticket 49007 - lib389 fixes for paths to use online values
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 48991 - Fix lib389 spec for python2 and python3
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48951 - dsadm dsconfig status and plugin
  - Ticket 47957 - Update the replication ?idle? status string
  - Ticket 48951 - dsadm and dsconf base files
  - Ticket 48952 - Restart command needs a sleep
  - Ticket 48949 - Fix ups for style and correctness
  - Ticket 48949 - added copying slapd-collations.conf
  - Ticket 48949 - change default file path generation - use
    os.path.join
  - Ticket 48949 - os.makedirs() exist_ok not python2 compatible,
    added try/except
  - Ticket 48949 - configparser fallback not python2 compatible
  - Ticket 48946 - openConnection should not fully popluate DirSrv
    object
  - Ticket 48832 - Add DirSrvTools.getLocalhost() function
  - Ticket 48382 - Fix serverCmd to get sbin dir properly
  - Bug 1347760 - Information disclosure via repeated use of LDAP
    ADD operation, etc.
  - Ticket 48937 - Cleanup valgrind wrapper script
  - Ticket 48923 - Fix additional issue with serverCmd
  - Ticket 48923 - serverCmd timeout not working as expected
  - Ticket 48917 - Attribute presence
  - Ticket 48911 - Plugin improvements for lib389
  - Ticket 48911 - Improve plugin support based on new mapped
    objects
  - Ticket 48910 - Fixes for backend tests and lib389 reliability.
  - Ticket 48860 - Add replication tools
  - Ticket 48888 - Correction to create of dsldapobject
  - Ticket 48886 - Fix NSS SSL library in lib389
  - Ticket 48885 - Fix spec file requires
  - Ticket 48884 - Bugfixes for mapped object and new connections
  - Ticket 48878 - better style for backend in backend_test.py
  - Ticket 48878 - pep8 fixes part 2
  - Ticket 48878 - pep8 fixes and fix rpm to build
  - Ticket 48853 - Prerelease installer
  - Ticket 48820 - Begin to test compatability with py.test3, and
    the new orm
  - Ticket 48434 - Fix for negative tz offsets
  - Ticket 48857 - Remove python-krbV from lib389
  - Ticket 48820 - Fix tests to ensure they work with the new
    object types
  - Ticket 48820 - Move Encryption and RSA to the new object types
  - Ticket 48820 - Proof of concept of orm style mapping of configs
    and objects
  - Ticket 48820 - Clitool rename
  - Ticket 48431 - lib389 integrate ldclt
  - Ticket 48434 - lib389 logging tools
  - Ticket 48796 - add function to remove logs
  - Ticket 48771 - lib389 - get ns-slapd version
  - Ticket 48830 - Convert lib389 to ip route tools
  - Ticket 48763 - backup should run regardless of existing
    backups.
  - Ticket 48434 - lib389 logging tools
  - Ticket 48798 - EL6 compat for lib389 tests for DH params
  - Ticket 48798 - lib389 add ability to create nss ca and
    certificate
  - Ticket 48433 - Aci linting tools
  - Ticket 48791 - format args in server tools
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48794 - lib389 build requires are on a single line
  - Ticket 48660 - Add function to convert binary values in an
    entry to base64
  - Ticket 48764 - Fix mit krb password to be random.
  - Ticket 48765 - Change default ports for standalone topology
  - Ticket 48750 - Clean up logging to improve command experience
  - Ticket 48751 - Improve lib389 ldapi support
  - Ticket 48399 - Add helper makefile to lib389 to build and
    install
  - Ticket 48661 - Agreement test suite fails at the test_changes
    case
  - Ticket 48407 - Add test coverage module for lib389 repo
  - Ticket 48357 - clitools should standarise their args
  - Ticket 48560 - Make verbose handling consistent
  - Ticket 48419 - getadminport() should not a be a static method
  - Ticket 48408 - RFE escaped default suffix for tests
  - Ticket 48401 - Revert typecheck
  - Ticket 48401 - lib389 Entry hasAttr returs dict instead of
    false
  - Ticket 48390 - RFE Improvements to lib389 monitor features for
    rest389
  - Ticket 48358 - Add new spec file
  - Ticket 48371 - weaker host check on localhost.localdomain
  - Ticket 58358 - Update spec file with pre-release versioning
  - Ticket 48358 - Make Fedora packaging changes to the spec file
  - Ticket 48358 - Prepare lib389 for Fedora Packaging
  - Ticket 48364 - Fix test failures
  - Ticket 48360 - Refactor the delete agreement function
  - Ticket 48361 - Expand 389ds monitoring capabilities
  - Ticket 48246 - Adding license/copyright to lib389 files
  - Ticket 48340 - Add basic monitor support to lib389
    https://fedorahosted.org/389/ticket/48340
  - Ticket 48353 - Add Replication REST support to lib389
  - Ticket 47840 - Fix regression
  - Ticket 48343 - lib389 krb5 realm management
    https://fedorahosted.org/389/ticket/48343
  - Ticket 47840 - fix lib389 to use sbin scripts
    https://fedorahosted.org/389/ticket/47840
  - Ticket 48335 - Add SASL support to lib389
  - Ticket 48329 - Fix case-senstive scyheam comparisions
  - Ticket 48303 - Fix lib389 broken tests
  - Ticket 48329 - add matching rule functions to schema module
  - Ticket 48324 - fix boolean capitalisation (one line)
    https://fedorahosted.org/389/ticket/48324
  - Ticket 48321 - Improve is_a_dn check to prevent mistakes with
    lib389 auth https://fedorahosted.org/389/ticket/48321
  - Ticket 48322 - Allow reindex function to reindex all attributes
  - Ticket 48319 - Fix ldap.LDAPError exception processing
  - Ticket 48318 - Do not delete a changelog while disabling a
    replication by suffix
  - Ticket 48308 - Add eq and ne to Entry to allow fast comparison
    https://fedorahosted.org/389/ticket/48308
  - Ticket 48303 - Fix lib389 broken tests - backend_test
  - Ticket 48309 - Fix lib389 lib imports
  - Ticket 48303 - Fix lib389 broken tests - agreement_test
  - Ticket 48303 - Fix lib389 broken tests - aci_parse_test
  - Ticket 48301 - add tox support
  - Ticket 48204 - update lib389 for python3
  - Ticket 48273 - Improve valgrind functions
  - Ticket 48271 - Fix for self.prefix being none when
    SER_DEPLOYED_DIR is none
    https://fedorahosted.org/389/ticket/48271
  - Ticket 48259 - Add aci parsing utilities to lib389
  - Ticket 48252 - (lib389) adding get_bin_dir and dbscan
  - Ticket 48247 - Change the default user to ?dirsrv?
  - Ticket 47848 - Add new function to create ldif files
  - Ticket 48239 - Fix for prefix allocation of un-initialised
    dirsrv objects
  - Ticket 48237 - Add lib389 helper to enable and disable logging
    services.
  - Ticket 48236 - Add get effective rights helper to lib389
  - Ticket 48238 - Add objectclass and attribute type query
    mechanisms
  - Ticket 48029 - Add missing replication related functions
  - Ticket 48028 - add valgrind wrapper for ns-slapd
  - Ticket 48028 - lib389 - add valgrind functions
  - Ticket 48022 - lib389 - Add all the server tasks
  - Ticket 48023 - create function to test replication between
    servers
  - Ticket 48020 - lib389 - need to reset args_instance with every
    DirSrv init
  - Ticket 48000 - Repl agmts need more time to stop
  - Ticket 48004 - Fix various issues
  - Ticket 48000 - replica agreement pause/resume should have a
    short sleep
  - Ticket 47990 - Add check for ?.removed? instances when doing an
    upgrade
  - Ticket 47990 - Add ?upgrade? function to lib389
  - Ticket 47691 - using lib389 with RPMs
  - Ticket 47848 - Add support for setuptools.
  - Ticket 47855 - Add function to clear tmp directory
  - Ticket 47851 - Need to retrieve tmp directory path
  - Ticket 47845 - add stripcsn option to tombstone fixup task
  - Ticket 47851 - Add function to retrieve dirsrvtests data
    directory
  - Ticket 47845 - Add backup/restore/fixup tombstone tasks to
    lib389
  - Ticket 47819 - Add the new precise tombstone purging config
    attribute
  - Ticket 47695 - Add plugins/tasks/Index
  - Ticket 47648 - lib389 - add schema classes, methods
  - Ticket 47671 - CI lib389: allow to open a DirSrv without having
    to create the instance
  - Ticket 47600 - Replica/Agreement/Changelog not conform to the
    design
  - Ticket 47652 - replica add fails: MT.list return a list not an
    entry
  - Ticket 47635 - MT/Backend/Suffix to be conform with the design
  - Ticket 47625 - CI lib389: DirSrv not conform to the design
  - Ticket 47595 - fail to detect/reinit already existing
    instance/backup
  - Ticket 47590 - CI tests: add/split functions around replication
  - Ticket 47584 - CI tests: add backup/restore of an instance
  - Ticket 47578 - CI tests: removal of ?sudo? and absolute path in
    lib389
  - Ticket 47568 - Rename DSAdmin class
  - Ticket 47566 - Initial import of DSadmin into 389-test repos</changelog>
  <changelog author="mrueckert@suse.de" date="1510315201">- lib389 is merged into this tarball now. move the subpackage here.</changelog>
  <changelog author="mrueckert@suse.de" date="1510401600">- we actually need pyldap</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- update to 1.4.0.3
  - Ticket 49457 - Fix spal_meminfo_get function prototype
  - Ticket 49455 - Add tests to monitor test suit.
  - Ticket 49448 - dynamic default pw scheme based on environment.
  - Ticket 49298 - fix complier warn
  - Ticket 49298 - Correct error codes with config restore.
  - Ticket 49454 - SSL Client Authentication breaks in FIPS mode
  - Ticket 49453 - passwd.py to use pwdhash defaults.
  - Ticket 49427 - whitespace in fedse.c
  - Ticket 49410 - opened connection can remain no longer poll,
    like hanging
  - Ticket 48118 - fix compiler warning for incorrect return type
  - Ticket 49451 - Add environment markers to lib389 dependencies
  - Ticket 49325 - Proof of concept rust tqueue in sds
  - Ticket 49443 - scope one searches in 1.3.7 give incorrect
    results
  - Ticket 48118 - At startup, changelog can be erronously rebuilt
    after a normal shutdown
  - Ticket 49412 - SIGSEV when setting invalid changelog config
    value
  - Ticket 49441 - Import crashes - oneline fix
  - Ticket 49377 - Incoming BER too large with TLS on plain port
  - Ticket 49441 - Import crashes with large indexed binary
    attributes
  - Ticket 49435 - Fix NS race condition on loaded test systems
  - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2
  - Ticket 17 - lib389 - dsremove support
  - Ticket 3 - lib389 - python 3 compat for paged results test
  - Ticket 3 - lib389 - Python 3 support for memberof plugin test
    suit
  - Ticket 3 - lib389 - config test
  - Ticket 3 - lib389 - python 3 support ds_logs tests
  - Ticket 3 - lib389 - python 3 support for betxn test</changelog>
  <changelog author="mrueckert@suse.de" date="1511179201">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
</package>
<package pkgid="5c9d241ee76a0f7fbab239e9a964553183d6369a97478af325edbf2f9d0d368d" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1507636800">- drop 389-ds-reproducible.patch: applied upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1508328000">- update to 1.4.0.1
  - Ticket 49038 - remove legacy replication - change cleanup
    script precedence
  - Ticket 49392 - memavailable not available
  - Ticket 49235 - pbkdf2 by default
  - Ticket 49279 - remove dsktune
  - Ticket 49372 - filter optimisation improvements for common
    queries
  - Ticket 49320 - Activating already active role returns error 16
  - Ticket 49389 - unable to retrieve specific cosAttribute when
    subtree password policy is configured
  - Ticket 49092 - Add CI test for schema-reload
  - Ticket 49388 - repl-monitor - matches null string many times in
    regex
  - Ticket 49387 - pbkdf2 settings were too aggressive
  - Ticket 49385 - Fix coverity warnings
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 48973 - Indexing a ExactIA5Match attribute with a
    IgnoreIA5Match matching rule triggers a warning
  - Ticket 49378 - server init fails
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 49180 - add CI test
  - Ticket 49180 - errors log filled with attrlist_replace -
    attr_replace</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Use openSUSE rpm group classifications.
- Remove removal of .a files that do not exist to begin with
  (because of --disable-static).
- Remove double removal of .la files.
- Do not suppress errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1510315200">- update to 1.4.0.2
  - Ticket 48393 - fix copy and paste error
  - Ticket 49439 - cleanallruv is not logging information
  - Ticket 48393 - Improve replication config validation
  - Ticket lib389 3 - Python 3 support for ACL test suite
  - Ticket 103 - sysconfig not found
  - Ticket 49436 - double free in COS in some conditions
  - Ticket 48007 - CI test to test changelog trimming interval
  - Ticket 49424 - Resolve csiphash alignment issues
  - Ticket lib389 3 - Python 3 support for
    pwdPolicy_controls_test.py
  - Ticket 3 - python 3 support - filter test
  - Ticket 49434 - RPM build errors
  - Ticket 49432 - filter optimise crash
  - Ticket 49432 - Add complex fliter CI test
  - Ticket 48894 - harden valueset_array_to_sorted_quick valueset
    access
  - Ticket 49401 - Fix compiler incompatible-pointer-types warnings
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49409 - Update lib389 requirements
  - Ticket 49401 - improve valueset sorted performance on delete
  - Ticket 49374 - server fails to start because maxdisksize is
    recognized incorrectly
  - Ticket 49408 - Server allows to set any nsds5replicaid in the
    existing replica entry
  - Ticket 49407 - status-dirsrv shows ellipsed lines
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49386 - Memberof should be ignore MODRDN when the
    pre/post entry are identical
  - Ticket 48006 - Missing warning for invalid replica backoff
    configuration
  - Ticket 49064 - testcase hardening
  - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated
    consumer
  - Ticket lib389 3 - python 3 support
  - Ticket 49402 - Adding a database entry with the same database
    name that was deleted hangs server at shutdown
  - Ticket 48235 - remove memberof lock (cherry-pick error)
  - Ticket 49394 - build warning
  - Ticket 49381 - Refactor numerous suite docstrings - Part 2
  - Ticket 49394 - slapi_pblock_get may leave unchanged the
    provided variable
  - Ticket 49403 - tidy ns logging
  - Ticket 49381 - Refactor filter test suite docstrings
  - Ticket 48235 - Remove memberOf global lock
  - Ticket 103 - Make sysconfig where it is expected to exist
  - Ticket 49400 - Add clang support to rpm builds
  - Ticket 49381 - Refactor ACL test suite docstrings
  - Ticket 49363 - Merge lib389
  - Ticket 101 - BaseException.message has been deprecated in
    Python3
  - Ticket 102 - referral support
  - Ticket 99 - Fix typo in create_topology
  - Ticket #98 - Fix dbscan output
  - Ticket #77 - Fix changelogdb param issue
  - Ticket #77 - Refactor docstrings in rST format - part 1
  - Ticket 96 - Change binaries? names
  - Ticket 77 - Add sphinx documentation
  - Ticket 43 - Add support for Referential Integrity plugin
  - Ticket 45 - Add support for Rootdn Access Control plugin
  - Ticket 46 - dsconf support for dynamic schema reload
  - Ticket 74 - Advice users to set referint-update-delay to 0
  - Ticket 92 - display_attr() should return str not bytes in py3
  - Ticket 93 - Fix test cases in ctl_dbtasks_test.py
  - Ticket 88 - python install and remove for tests
  - Ticket 85 - Remove legacy replication attribute
  - Ticket 91 - Fix replication topology
  - Ticket 89 - Fix inconsistency with serverid
  - Ticket 79 - Fix replica.py and add tests
  - Ticket 86 - add build dir to gitignore
  - Ticket 83 - Add an util for generating instance parameters
  - Ticket 87 - Update accesslog regec for HR etimes
  - Ticket 49 - Add support for whoami plugin
  - Ticket 48 - Add support for USN plugin
  - Ticket 78 - Add exists() method to DSLdapObject
  - Ticket 31 - Allow complete removal of some memberOf attrs
  - Ticket31 - Add memberOf fix-up task
  - Ticket 67 - Add ensure_int function
  - Ticket 59 - lib389 support for index management.
  - Ticket 67 - get attr by type
  - Ticket 70 - Improve repl tools
  - Ticket 50 - typo in db2* in dsctl
  - Ticket 31 - Add status command and SkipNested support for
    MemberOf
  - Ticket 31 - Add functional tests for MemberOf plugin
  - Ticket 66 - expand healthcheck for Directory Server
  - Ticket 69 - add specfile requires
  - Ticket 31 - Initial MemberOf plugin support
  - Ticket 50 - Add db2* tasks to dsctl
  - Ticket 65 - Add m2c2 topology
  - Ticket 63 - part 2, agreement test
  - Ticket 63 - lib389 python 3 fix
  - Ticket 62 - dirsrv offline log
  - Ticket 60 - add dsrc to dsconf and dsidm
  - Ticket 32 - Add TLS external bind support for testing
  - Ticket 27 - Fix get function in tests
  - Ticket 28 - userAccount for older versions without nsmemberof
  - Ticket 27 - Improve dseldif API
  - Ticket 30 - Add initial support for account lock and unlock.
  - Ticket 29 - fix incorrect format in tools
  - Ticket 28 - Change default objectClasses for users and groups
  - Ticket 1 - Fix missing dn / rdn on config.
  - Ticket 27 - Add a module for working with dse.ldif file
  - Ticket 1 - cn=config comparison
  - Ticket 21 - Missing serverid in dirsrv_test due to incorrect
    allocation
  - Ticket 26 - improve lib389 sasl support
  - Ticket 24 - Join paths using os.path.join instead of string
    concatenation
  - Ticket 25 - Fix RUV repr function
  - Ticket 23 - Use DirSrv.exists() instead of manually checking
    for instance?s existence
  - Ticket 1 - cn=config comparison
  - Ticket 22 - Specify a basedn parameter for IDM modules
  - Ticket 19 - missing readme.md in python3
  - Ticket 20 - Use the DN_DM constant instead of hard coding its
    value
  - Ticket 19 - Missing file and improve make
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 16 - Reset InstScriptsEnabled argument during the init
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 13 - Add init function to create new domain entries
  - Ticket 15 - Improve instance configuration ability
  - Ticket 10 - Improve command line tool arguments
  - Ticket 9 - Convert readme to MD
  - Ticket 7 - Add pause and resume methods to topology fixtures
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 6 - Bump lib389 version 1.0.4
  - Ticket 5 - Fix container build on fedora
  - Ticket 4 - Cert detection breaks some tests
  - Ticket 49137 - Add sasl plain tests, lib389 support
  - Ticket 2 - pytest mark with version relies on root
  - Ticket 49126 - DIT management tool
  - Ticket 49101 - Python 2 generate example entries
  - Ticket 49103 - python 2 support for installer
  - Ticket 47747 - Add topology_i2 and topology_i3
  - Ticket 49087 - lib389 resolve jenkins issues
  - Ticket 48413 - Improvements to lib389 for rest
  - Ticket 49083 - Support prefix for discovery of the defaults.inf
    file.
  - Ticket 49055 - Fix debugging mode issue
  - Ticket 49060 - Increase number of masters, hubs and consumers
    in topology
  - Ticket 47747 - Add more topology fixtures
  - Ticket 47840 - Add InstScriptsEnabled argument
  - Ticket 47747 - Add topology fixtures module
  - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01
  - Ticket 49022 - Lib389, py3 installer cannot create entries in
    backend
  - Ticket 49024 - Fix paths to the dbdir parent
  - Ticket 49024 - Fix db_dir paths
  - Ticket 49024 - Fix paths in tools module
  - Ticket 48961 - Fix lib389 minor issues shown by 48961 test
  - Ticket 49010 - Lib389 fails to start with systemctl changes
  - Ticket 49007 - lib389 fixes for paths to use online values
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 48991 - Fix lib389 spec for python2 and python3
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48951 - dsadm dsconfig status and plugin
  - Ticket 47957 - Update the replication ?idle? status string
  - Ticket 48951 - dsadm and dsconf base files
  - Ticket 48952 - Restart command needs a sleep
  - Ticket 48949 - Fix ups for style and correctness
  - Ticket 48949 - added copying slapd-collations.conf
  - Ticket 48949 - change default file path generation - use
    os.path.join
  - Ticket 48949 - os.makedirs() exist_ok not python2 compatible,
    added try/except
  - Ticket 48949 - configparser fallback not python2 compatible
  - Ticket 48946 - openConnection should not fully popluate DirSrv
    object
  - Ticket 48832 - Add DirSrvTools.getLocalhost() function
  - Ticket 48382 - Fix serverCmd to get sbin dir properly
  - Bug 1347760 - Information disclosure via repeated use of LDAP
    ADD operation, etc.
  - Ticket 48937 - Cleanup valgrind wrapper script
  - Ticket 48923 - Fix additional issue with serverCmd
  - Ticket 48923 - serverCmd timeout not working as expected
  - Ticket 48917 - Attribute presence
  - Ticket 48911 - Plugin improvements for lib389
  - Ticket 48911 - Improve plugin support based on new mapped
    objects
  - Ticket 48910 - Fixes for backend tests and lib389 reliability.
  - Ticket 48860 - Add replication tools
  - Ticket 48888 - Correction to create of dsldapobject
  - Ticket 48886 - Fix NSS SSL library in lib389
  - Ticket 48885 - Fix spec file requires
  - Ticket 48884 - Bugfixes for mapped object and new connections
  - Ticket 48878 - better style for backend in backend_test.py
  - Ticket 48878 - pep8 fixes part 2
  - Ticket 48878 - pep8 fixes and fix rpm to build
  - Ticket 48853 - Prerelease installer
  - Ticket 48820 - Begin to test compatability with py.test3, and
    the new orm
  - Ticket 48434 - Fix for negative tz offsets
  - Ticket 48857 - Remove python-krbV from lib389
  - Ticket 48820 - Fix tests to ensure they work with the new
    object types
  - Ticket 48820 - Move Encryption and RSA to the new object types
  - Ticket 48820 - Proof of concept of orm style mapping of configs
    and objects
  - Ticket 48820 - Clitool rename
  - Ticket 48431 - lib389 integrate ldclt
  - Ticket 48434 - lib389 logging tools
  - Ticket 48796 - add function to remove logs
  - Ticket 48771 - lib389 - get ns-slapd version
  - Ticket 48830 - Convert lib389 to ip route tools
  - Ticket 48763 - backup should run regardless of existing
    backups.
  - Ticket 48434 - lib389 logging tools
  - Ticket 48798 - EL6 compat for lib389 tests for DH params
  - Ticket 48798 - lib389 add ability to create nss ca and
    certificate
  - Ticket 48433 - Aci linting tools
  - Ticket 48791 - format args in server tools
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48794 - lib389 build requires are on a single line
  - Ticket 48660 - Add function to convert binary values in an
    entry to base64
  - Ticket 48764 - Fix mit krb password to be random.
  - Ticket 48765 - Change default ports for standalone topology
  - Ticket 48750 - Clean up logging to improve command experience
  - Ticket 48751 - Improve lib389 ldapi support
  - Ticket 48399 - Add helper makefile to lib389 to build and
    install
  - Ticket 48661 - Agreement test suite fails at the test_changes
    case
  - Ticket 48407 - Add test coverage module for lib389 repo
  - Ticket 48357 - clitools should standarise their args
  - Ticket 48560 - Make verbose handling consistent
  - Ticket 48419 - getadminport() should not a be a static method
  - Ticket 48408 - RFE escaped default suffix for tests
  - Ticket 48401 - Revert typecheck
  - Ticket 48401 - lib389 Entry hasAttr returs dict instead of
    false
  - Ticket 48390 - RFE Improvements to lib389 monitor features for
    rest389
  - Ticket 48358 - Add new spec file
  - Ticket 48371 - weaker host check on localhost.localdomain
  - Ticket 58358 - Update spec file with pre-release versioning
  - Ticket 48358 - Make Fedora packaging changes to the spec file
  - Ticket 48358 - Prepare lib389 for Fedora Packaging
  - Ticket 48364 - Fix test failures
  - Ticket 48360 - Refactor the delete agreement function
  - Ticket 48361 - Expand 389ds monitoring capabilities
  - Ticket 48246 - Adding license/copyright to lib389 files
  - Ticket 48340 - Add basic monitor support to lib389
    https://fedorahosted.org/389/ticket/48340
  - Ticket 48353 - Add Replication REST support to lib389
  - Ticket 47840 - Fix regression
  - Ticket 48343 - lib389 krb5 realm management
    https://fedorahosted.org/389/ticket/48343
  - Ticket 47840 - fix lib389 to use sbin scripts
    https://fedorahosted.org/389/ticket/47840
  - Ticket 48335 - Add SASL support to lib389
  - Ticket 48329 - Fix case-senstive scyheam comparisions
  - Ticket 48303 - Fix lib389 broken tests
  - Ticket 48329 - add matching rule functions to schema module
  - Ticket 48324 - fix boolean capitalisation (one line)
    https://fedorahosted.org/389/ticket/48324
  - Ticket 48321 - Improve is_a_dn check to prevent mistakes with
    lib389 auth https://fedorahosted.org/389/ticket/48321
  - Ticket 48322 - Allow reindex function to reindex all attributes
  - Ticket 48319 - Fix ldap.LDAPError exception processing
  - Ticket 48318 - Do not delete a changelog while disabling a
    replication by suffix
  - Ticket 48308 - Add eq and ne to Entry to allow fast comparison
    https://fedorahosted.org/389/ticket/48308
  - Ticket 48303 - Fix lib389 broken tests - backend_test
  - Ticket 48309 - Fix lib389 lib imports
  - Ticket 48303 - Fix lib389 broken tests - agreement_test
  - Ticket 48303 - Fix lib389 broken tests - aci_parse_test
  - Ticket 48301 - add tox support
  - Ticket 48204 - update lib389 for python3
  - Ticket 48273 - Improve valgrind functions
  - Ticket 48271 - Fix for self.prefix being none when
    SER_DEPLOYED_DIR is none
    https://fedorahosted.org/389/ticket/48271
  - Ticket 48259 - Add aci parsing utilities to lib389
  - Ticket 48252 - (lib389) adding get_bin_dir and dbscan
  - Ticket 48247 - Change the default user to ?dirsrv?
  - Ticket 47848 - Add new function to create ldif files
  - Ticket 48239 - Fix for prefix allocation of un-initialised
    dirsrv objects
  - Ticket 48237 - Add lib389 helper to enable and disable logging
    services.
  - Ticket 48236 - Add get effective rights helper to lib389
  - Ticket 48238 - Add objectclass and attribute type query
    mechanisms
  - Ticket 48029 - Add missing replication related functions
  - Ticket 48028 - add valgrind wrapper for ns-slapd
  - Ticket 48028 - lib389 - add valgrind functions
  - Ticket 48022 - lib389 - Add all the server tasks
  - Ticket 48023 - create function to test replication between
    servers
  - Ticket 48020 - lib389 - need to reset args_instance with every
    DirSrv init
  - Ticket 48000 - Repl agmts need more time to stop
  - Ticket 48004 - Fix various issues
  - Ticket 48000 - replica agreement pause/resume should have a
    short sleep
  - Ticket 47990 - Add check for ?.removed? instances when doing an
    upgrade
  - Ticket 47990 - Add ?upgrade? function to lib389
  - Ticket 47691 - using lib389 with RPMs
  - Ticket 47848 - Add support for setuptools.
  - Ticket 47855 - Add function to clear tmp directory
  - Ticket 47851 - Need to retrieve tmp directory path
  - Ticket 47845 - add stripcsn option to tombstone fixup task
  - Ticket 47851 - Add function to retrieve dirsrvtests data
    directory
  - Ticket 47845 - Add backup/restore/fixup tombstone tasks to
    lib389
  - Ticket 47819 - Add the new precise tombstone purging config
    attribute
  - Ticket 47695 - Add plugins/tasks/Index
  - Ticket 47648 - lib389 - add schema classes, methods
  - Ticket 47671 - CI lib389: allow to open a DirSrv without having
    to create the instance
  - Ticket 47600 - Replica/Agreement/Changelog not conform to the
    design
  - Ticket 47652 - replica add fails: MT.list return a list not an
    entry
  - Ticket 47635 - MT/Backend/Suffix to be conform with the design
  - Ticket 47625 - CI lib389: DirSrv not conform to the design
  - Ticket 47595 - fail to detect/reinit already existing
    instance/backup
  - Ticket 47590 - CI tests: add/split functions around replication
  - Ticket 47584 - CI tests: add backup/restore of an instance
  - Ticket 47578 - CI tests: removal of ?sudo? and absolute path in
    lib389
  - Ticket 47568 - Rename DSAdmin class
  - Ticket 47566 - Initial import of DSadmin into 389-test repos</changelog>
  <changelog author="mrueckert@suse.de" date="1510315201">- lib389 is merged into this tarball now. move the subpackage here.</changelog>
  <changelog author="mrueckert@suse.de" date="1510401600">- we actually need pyldap</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- update to 1.4.0.3
  - Ticket 49457 - Fix spal_meminfo_get function prototype
  - Ticket 49455 - Add tests to monitor test suit.
  - Ticket 49448 - dynamic default pw scheme based on environment.
  - Ticket 49298 - fix complier warn
  - Ticket 49298 - Correct error codes with config restore.
  - Ticket 49454 - SSL Client Authentication breaks in FIPS mode
  - Ticket 49453 - passwd.py to use pwdhash defaults.
  - Ticket 49427 - whitespace in fedse.c
  - Ticket 49410 - opened connection can remain no longer poll,
    like hanging
  - Ticket 48118 - fix compiler warning for incorrect return type
  - Ticket 49451 - Add environment markers to lib389 dependencies
  - Ticket 49325 - Proof of concept rust tqueue in sds
  - Ticket 49443 - scope one searches in 1.3.7 give incorrect
    results
  - Ticket 48118 - At startup, changelog can be erronously rebuilt
    after a normal shutdown
  - Ticket 49412 - SIGSEV when setting invalid changelog config
    value
  - Ticket 49441 - Import crashes - oneline fix
  - Ticket 49377 - Incoming BER too large with TLS on plain port
  - Ticket 49441 - Import crashes with large indexed binary
    attributes
  - Ticket 49435 - Fix NS race condition on loaded test systems
  - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2
  - Ticket 17 - lib389 - dsremove support
  - Ticket 3 - lib389 - python 3 compat for paged results test
  - Ticket 3 - lib389 - Python 3 support for memberof plugin test
    suit
  - Ticket 3 - lib389 - config test
  - Ticket 3 - lib389 - python 3 support ds_logs tests
  - Ticket 3 - lib389 - python 3 support for betxn test</changelog>
  <changelog author="mrueckert@suse.de" date="1511179201">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
</package>
<package pkgid="c73ebb6ccf4de140ba45b8980683c6aa023e39581f2f27108ff72914c855d5e9" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.0.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1507636800">- drop 389-ds-reproducible.patch: applied upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1508328000">- update to 1.4.0.1
  - Ticket 49038 - remove legacy replication - change cleanup
    script precedence
  - Ticket 49392 - memavailable not available
  - Ticket 49235 - pbkdf2 by default
  - Ticket 49279 - remove dsktune
  - Ticket 49372 - filter optimisation improvements for common
    queries
  - Ticket 49320 - Activating already active role returns error 16
  - Ticket 49389 - unable to retrieve specific cosAttribute when
    subtree password policy is configured
  - Ticket 49092 - Add CI test for schema-reload
  - Ticket 49388 - repl-monitor - matches null string many times in
    regex
  - Ticket 49387 - pbkdf2 settings were too aggressive
  - Ticket 49385 - Fix coverity warnings
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 48973 - Indexing a ExactIA5Match attribute with a
    IgnoreIA5Match matching rule triggers a warning
  - Ticket 49378 - server init fails
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 49180 - add CI test
  - Ticket 49180 - errors log filled with attrlist_replace -
    attr_replace</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Use openSUSE rpm group classifications.
- Remove removal of .a files that do not exist to begin with
  (because of --disable-static).
- Remove double removal of .la files.
- Do not suppress errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1510315200">- update to 1.4.0.2
  - Ticket 48393 - fix copy and paste error
  - Ticket 49439 - cleanallruv is not logging information
  - Ticket 48393 - Improve replication config validation
  - Ticket lib389 3 - Python 3 support for ACL test suite
  - Ticket 103 - sysconfig not found
  - Ticket 49436 - double free in COS in some conditions
  - Ticket 48007 - CI test to test changelog trimming interval
  - Ticket 49424 - Resolve csiphash alignment issues
  - Ticket lib389 3 - Python 3 support for
    pwdPolicy_controls_test.py
  - Ticket 3 - python 3 support - filter test
  - Ticket 49434 - RPM build errors
  - Ticket 49432 - filter optimise crash
  - Ticket 49432 - Add complex fliter CI test
  - Ticket 48894 - harden valueset_array_to_sorted_quick valueset
    access
  - Ticket 49401 - Fix compiler incompatible-pointer-types warnings
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49409 - Update lib389 requirements
  - Ticket 49401 - improve valueset sorted performance on delete
  - Ticket 49374 - server fails to start because maxdisksize is
    recognized incorrectly
  - Ticket 49408 - Server allows to set any nsds5replicaid in the
    existing replica entry
  - Ticket 49407 - status-dirsrv shows ellipsed lines
  - Ticket 48681 - Use of uninitialized value in string ne at
    /usr/bin/logconv.pl
  - Ticket 49386 - Memberof should be ignore MODRDN when the
    pre/post entry are identical
  - Ticket 48006 - Missing warning for invalid replica backoff
    configuration
  - Ticket 49064 - testcase hardening
  - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated
    consumer
  - Ticket lib389 3 - python 3 support
  - Ticket 49402 - Adding a database entry with the same database
    name that was deleted hangs server at shutdown
  - Ticket 48235 - remove memberof lock (cherry-pick error)
  - Ticket 49394 - build warning
  - Ticket 49381 - Refactor numerous suite docstrings - Part 2
  - Ticket 49394 - slapi_pblock_get may leave unchanged the
    provided variable
  - Ticket 49403 - tidy ns logging
  - Ticket 49381 - Refactor filter test suite docstrings
  - Ticket 48235 - Remove memberOf global lock
  - Ticket 103 - Make sysconfig where it is expected to exist
  - Ticket 49400 - Add clang support to rpm builds
  - Ticket 49381 - Refactor ACL test suite docstrings
  - Ticket 49363 - Merge lib389
  - Ticket 101 - BaseException.message has been deprecated in
    Python3
  - Ticket 102 - referral support
  - Ticket 99 - Fix typo in create_topology
  - Ticket #98 - Fix dbscan output
  - Ticket #77 - Fix changelogdb param issue
  - Ticket #77 - Refactor docstrings in rST format - part 1
  - Ticket 96 - Change binaries? names
  - Ticket 77 - Add sphinx documentation
  - Ticket 43 - Add support for Referential Integrity plugin
  - Ticket 45 - Add support for Rootdn Access Control plugin
  - Ticket 46 - dsconf support for dynamic schema reload
  - Ticket 74 - Advice users to set referint-update-delay to 0
  - Ticket 92 - display_attr() should return str not bytes in py3
  - Ticket 93 - Fix test cases in ctl_dbtasks_test.py
  - Ticket 88 - python install and remove for tests
  - Ticket 85 - Remove legacy replication attribute
  - Ticket 91 - Fix replication topology
  - Ticket 89 - Fix inconsistency with serverid
  - Ticket 79 - Fix replica.py and add tests
  - Ticket 86 - add build dir to gitignore
  - Ticket 83 - Add an util for generating instance parameters
  - Ticket 87 - Update accesslog regec for HR etimes
  - Ticket 49 - Add support for whoami plugin
  - Ticket 48 - Add support for USN plugin
  - Ticket 78 - Add exists() method to DSLdapObject
  - Ticket 31 - Allow complete removal of some memberOf attrs
  - Ticket31 - Add memberOf fix-up task
  - Ticket 67 - Add ensure_int function
  - Ticket 59 - lib389 support for index management.
  - Ticket 67 - get attr by type
  - Ticket 70 - Improve repl tools
  - Ticket 50 - typo in db2* in dsctl
  - Ticket 31 - Add status command and SkipNested support for
    MemberOf
  - Ticket 31 - Add functional tests for MemberOf plugin
  - Ticket 66 - expand healthcheck for Directory Server
  - Ticket 69 - add specfile requires
  - Ticket 31 - Initial MemberOf plugin support
  - Ticket 50 - Add db2* tasks to dsctl
  - Ticket 65 - Add m2c2 topology
  - Ticket 63 - part 2, agreement test
  - Ticket 63 - lib389 python 3 fix
  - Ticket 62 - dirsrv offline log
  - Ticket 60 - add dsrc to dsconf and dsidm
  - Ticket 32 - Add TLS external bind support for testing
  - Ticket 27 - Fix get function in tests
  - Ticket 28 - userAccount for older versions without nsmemberof
  - Ticket 27 - Improve dseldif API
  - Ticket 30 - Add initial support for account lock and unlock.
  - Ticket 29 - fix incorrect format in tools
  - Ticket 28 - Change default objectClasses for users and groups
  - Ticket 1 - Fix missing dn / rdn on config.
  - Ticket 27 - Add a module for working with dse.ldif file
  - Ticket 1 - cn=config comparison
  - Ticket 21 - Missing serverid in dirsrv_test due to incorrect
    allocation
  - Ticket 26 - improve lib389 sasl support
  - Ticket 24 - Join paths using os.path.join instead of string
    concatenation
  - Ticket 25 - Fix RUV repr function
  - Ticket 23 - Use DirSrv.exists() instead of manually checking
    for instance?s existence
  - Ticket 1 - cn=config comparison
  - Ticket 22 - Specify a basedn parameter for IDM modules
  - Ticket 19 - missing readme.md in python3
  - Ticket 20 - Use the DN_DM constant instead of hard coding its
    value
  - Ticket 19 - Missing file and improve make
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 16 - Reset InstScriptsEnabled argument during the init
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 13 - Add init function to create new domain entries
  - Ticket 15 - Improve instance configuration ability
  - Ticket 10 - Improve command line tool arguments
  - Ticket 9 - Convert readme to MD
  - Ticket 7 - Add pause and resume methods to topology fixtures
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 6 - Bump lib389 version 1.0.4
  - Ticket 5 - Fix container build on fedora
  - Ticket 4 - Cert detection breaks some tests
  - Ticket 49137 - Add sasl plain tests, lib389 support
  - Ticket 2 - pytest mark with version relies on root
  - Ticket 49126 - DIT management tool
  - Ticket 49101 - Python 2 generate example entries
  - Ticket 49103 - python 2 support for installer
  - Ticket 47747 - Add topology_i2 and topology_i3
  - Ticket 49087 - lib389 resolve jenkins issues
  - Ticket 48413 - Improvements to lib389 for rest
  - Ticket 49083 - Support prefix for discovery of the defaults.inf
    file.
  - Ticket 49055 - Fix debugging mode issue
  - Ticket 49060 - Increase number of masters, hubs and consumers
    in topology
  - Ticket 47747 - Add more topology fixtures
  - Ticket 47840 - Add InstScriptsEnabled argument
  - Ticket 47747 - Add topology fixtures module
  - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01
  - Ticket 49022 - Lib389, py3 installer cannot create entries in
    backend
  - Ticket 49024 - Fix paths to the dbdir parent
  - Ticket 49024 - Fix db_dir paths
  - Ticket 49024 - Fix paths in tools module
  - Ticket 48961 - Fix lib389 minor issues shown by 48961 test
  - Ticket 49010 - Lib389 fails to start with systemctl changes
  - Ticket 49007 - lib389 fixes for paths to use online values
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 48991 - Fix lib389 spec for python2 and python3
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48951 - dsadm dsconfig status and plugin
  - Ticket 47957 - Update the replication ?idle? status string
  - Ticket 48951 - dsadm and dsconf base files
  - Ticket 48952 - Restart command needs a sleep
  - Ticket 48949 - Fix ups for style and correctness
  - Ticket 48949 - added copying slapd-collations.conf
  - Ticket 48949 - change default file path generation - use
    os.path.join
  - Ticket 48949 - os.makedirs() exist_ok not python2 compatible,
    added try/except
  - Ticket 48949 - configparser fallback not python2 compatible
  - Ticket 48946 - openConnection should not fully popluate DirSrv
    object
  - Ticket 48832 - Add DirSrvTools.getLocalhost() function
  - Ticket 48382 - Fix serverCmd to get sbin dir properly
  - Bug 1347760 - Information disclosure via repeated use of LDAP
    ADD operation, etc.
  - Ticket 48937 - Cleanup valgrind wrapper script
  - Ticket 48923 - Fix additional issue with serverCmd
  - Ticket 48923 - serverCmd timeout not working as expected
  - Ticket 48917 - Attribute presence
  - Ticket 48911 - Plugin improvements for lib389
  - Ticket 48911 - Improve plugin support based on new mapped
    objects
  - Ticket 48910 - Fixes for backend tests and lib389 reliability.
  - Ticket 48860 - Add replication tools
  - Ticket 48888 - Correction to create of dsldapobject
  - Ticket 48886 - Fix NSS SSL library in lib389
  - Ticket 48885 - Fix spec file requires
  - Ticket 48884 - Bugfixes for mapped object and new connections
  - Ticket 48878 - better style for backend in backend_test.py
  - Ticket 48878 - pep8 fixes part 2
  - Ticket 48878 - pep8 fixes and fix rpm to build
  - Ticket 48853 - Prerelease installer
  - Ticket 48820 - Begin to test compatability with py.test3, and
    the new orm
  - Ticket 48434 - Fix for negative tz offsets
  - Ticket 48857 - Remove python-krbV from lib389
  - Ticket 48820 - Fix tests to ensure they work with the new
    object types
  - Ticket 48820 - Move Encryption and RSA to the new object types
  - Ticket 48820 - Proof of concept of orm style mapping of configs
    and objects
  - Ticket 48820 - Clitool rename
  - Ticket 48431 - lib389 integrate ldclt
  - Ticket 48434 - lib389 logging tools
  - Ticket 48796 - add function to remove logs
  - Ticket 48771 - lib389 - get ns-slapd version
  - Ticket 48830 - Convert lib389 to ip route tools
  - Ticket 48763 - backup should run regardless of existing
    backups.
  - Ticket 48434 - lib389 logging tools
  - Ticket 48798 - EL6 compat for lib389 tests for DH params
  - Ticket 48798 - lib389 add ability to create nss ca and
    certificate
  - Ticket 48433 - Aci linting tools
  - Ticket 48791 - format args in server tools
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48794 - lib389 build requires are on a single line
  - Ticket 48660 - Add function to convert binary values in an
    entry to base64
  - Ticket 48764 - Fix mit krb password to be random.
  - Ticket 48765 - Change default ports for standalone topology
  - Ticket 48750 - Clean up logging to improve command experience
  - Ticket 48751 - Improve lib389 ldapi support
  - Ticket 48399 - Add helper makefile to lib389 to build and
    install
  - Ticket 48661 - Agreement test suite fails at the test_changes
    case
  - Ticket 48407 - Add test coverage module for lib389 repo
  - Ticket 48357 - clitools should standarise their args
  - Ticket 48560 - Make verbose handling consistent
  - Ticket 48419 - getadminport() should not a be a static method
  - Ticket 48408 - RFE escaped default suffix for tests
  - Ticket 48401 - Revert typecheck
  - Ticket 48401 - lib389 Entry hasAttr returs dict instead of
    false
  - Ticket 48390 - RFE Improvements to lib389 monitor features for
    rest389
  - Ticket 48358 - Add new spec file
  - Ticket 48371 - weaker host check on localhost.localdomain
  - Ticket 58358 - Update spec file with pre-release versioning
  - Ticket 48358 - Make Fedora packaging changes to the spec file
  - Ticket 48358 - Prepare lib389 for Fedora Packaging
  - Ticket 48364 - Fix test failures
  - Ticket 48360 - Refactor the delete agreement function
  - Ticket 48361 - Expand 389ds monitoring capabilities
  - Ticket 48246 - Adding license/copyright to lib389 files
  - Ticket 48340 - Add basic monitor support to lib389
    https://fedorahosted.org/389/ticket/48340
  - Ticket 48353 - Add Replication REST support to lib389
  - Ticket 47840 - Fix regression
  - Ticket 48343 - lib389 krb5 realm management
    https://fedorahosted.org/389/ticket/48343
  - Ticket 47840 - fix lib389 to use sbin scripts
    https://fedorahosted.org/389/ticket/47840
  - Ticket 48335 - Add SASL support to lib389
  - Ticket 48329 - Fix case-senstive scyheam comparisions
  - Ticket 48303 - Fix lib389 broken tests
  - Ticket 48329 - add matching rule functions to schema module
  - Ticket 48324 - fix boolean capitalisation (one line)
    https://fedorahosted.org/389/ticket/48324
  - Ticket 48321 - Improve is_a_dn check to prevent mistakes with
    lib389 auth https://fedorahosted.org/389/ticket/48321
  - Ticket 48322 - Allow reindex function to reindex all attributes
  - Ticket 48319 - Fix ldap.LDAPError exception processing
  - Ticket 48318 - Do not delete a changelog while disabling a
    replication by suffix
  - Ticket 48308 - Add eq and ne to Entry to allow fast comparison
    https://fedorahosted.org/389/ticket/48308
  - Ticket 48303 - Fix lib389 broken tests - backend_test
  - Ticket 48309 - Fix lib389 lib imports
  - Ticket 48303 - Fix lib389 broken tests - agreement_test
  - Ticket 48303 - Fix lib389 broken tests - aci_parse_test
  - Ticket 48301 - add tox support
  - Ticket 48204 - update lib389 for python3
  - Ticket 48273 - Improve valgrind functions
  - Ticket 48271 - Fix for self.prefix being none when
    SER_DEPLOYED_DIR is none
    https://fedorahosted.org/389/ticket/48271
  - Ticket 48259 - Add aci parsing utilities to lib389
  - Ticket 48252 - (lib389) adding get_bin_dir and dbscan
  - Ticket 48247 - Change the default user to ?dirsrv?
  - Ticket 47848 - Add new function to create ldif files
  - Ticket 48239 - Fix for prefix allocation of un-initialised
    dirsrv objects
  - Ticket 48237 - Add lib389 helper to enable and disable logging
    services.
  - Ticket 48236 - Add get effective rights helper to lib389
  - Ticket 48238 - Add objectclass and attribute type query
    mechanisms
  - Ticket 48029 - Add missing replication related functions
  - Ticket 48028 - add valgrind wrapper for ns-slapd
  - Ticket 48028 - lib389 - add valgrind functions
  - Ticket 48022 - lib389 - Add all the server tasks
  - Ticket 48023 - create function to test replication between
    servers
  - Ticket 48020 - lib389 - need to reset args_instance with every
    DirSrv init
  - Ticket 48000 - Repl agmts need more time to stop
  - Ticket 48004 - Fix various issues
  - Ticket 48000 - replica agreement pause/resume should have a
    short sleep
  - Ticket 47990 - Add check for ?.removed? instances when doing an
    upgrade
  - Ticket 47990 - Add ?upgrade? function to lib389
  - Ticket 47691 - using lib389 with RPMs
  - Ticket 47848 - Add support for setuptools.
  - Ticket 47855 - Add function to clear tmp directory
  - Ticket 47851 - Need to retrieve tmp directory path
  - Ticket 47845 - add stripcsn option to tombstone fixup task
  - Ticket 47851 - Add function to retrieve dirsrvtests data
    directory
  - Ticket 47845 - Add backup/restore/fixup tombstone tasks to
    lib389
  - Ticket 47819 - Add the new precise tombstone purging config
    attribute
  - Ticket 47695 - Add plugins/tasks/Index
  - Ticket 47648 - lib389 - add schema classes, methods
  - Ticket 47671 - CI lib389: allow to open a DirSrv without having
    to create the instance
  - Ticket 47600 - Replica/Agreement/Changelog not conform to the
    design
  - Ticket 47652 - replica add fails: MT.list return a list not an
    entry
  - Ticket 47635 - MT/Backend/Suffix to be conform with the design
  - Ticket 47625 - CI lib389: DirSrv not conform to the design
  - Ticket 47595 - fail to detect/reinit already existing
    instance/backup
  - Ticket 47590 - CI tests: add/split functions around replication
  - Ticket 47584 - CI tests: add backup/restore of an instance
  - Ticket 47578 - CI tests: removal of ?sudo? and absolute path in
    lib389
  - Ticket 47568 - Rename DSAdmin class
  - Ticket 47566 - Initial import of DSadmin into 389-test repos</changelog>
  <changelog author="mrueckert@suse.de" date="1510315201">- lib389 is merged into this tarball now. move the subpackage here.</changelog>
  <changelog author="mrueckert@suse.de" date="1510401600">- we actually need pyldap</changelog>
  <changelog author="mrueckert@suse.de" date="1511179200">- update to 1.4.0.3
  - Ticket 49457 - Fix spal_meminfo_get function prototype
  - Ticket 49455 - Add tests to monitor test suit.
  - Ticket 49448 - dynamic default pw scheme based on environment.
  - Ticket 49298 - fix complier warn
  - Ticket 49298 - Correct error codes with config restore.
  - Ticket 49454 - SSL Client Authentication breaks in FIPS mode
  - Ticket 49453 - passwd.py to use pwdhash defaults.
  - Ticket 49427 - whitespace in fedse.c
  - Ticket 49410 - opened connection can remain no longer poll,
    like hanging
  - Ticket 48118 - fix compiler warning for incorrect return type
  - Ticket 49451 - Add environment markers to lib389 dependencies
  - Ticket 49325 - Proof of concept rust tqueue in sds
  - Ticket 49443 - scope one searches in 1.3.7 give incorrect
    results
  - Ticket 48118 - At startup, changelog can be erronously rebuilt
    after a normal shutdown
  - Ticket 49412 - SIGSEV when setting invalid changelog config
    value
  - Ticket 49441 - Import crashes - oneline fix
  - Ticket 49377 - Incoming BER too large with TLS on plain port
  - Ticket 49441 - Import crashes with large indexed binary
    attributes
  - Ticket 49435 - Fix NS race condition on loaded test systems
  - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2
  - Ticket 17 - lib389 - dsremove support
  - Ticket 3 - lib389 - python 3 compat for paged results test
  - Ticket 3 - lib389 - Python 3 support for memberof plugin test
    suit
  - Ticket 3 - lib389 - config test
  - Ticket 3 - lib389 - python 3 support ds_logs tests
  - Ticket 3 - lib389 - python 3 support for betxn test</changelog>
  <changelog author="mrueckert@suse.de" date="1511179201">- added simplify-lib389-setup-py.patch
  seems the python3 setuptools on leap 42.3 do not like this fancy
  syntax. kill it and always use the python 3 way.</changelog>
  <changelog author="rbrown@suse.com" date="1512475200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mrueckert@suse.de" date="1515931200">- add tw.patch to fix potential buffer overflow</changelog>
  <changelog author="hguo@suse.com" date="1516881600">- Introduce patch 0003-fix-rm-non-existent-man-pages.patch to remove
  a faulty rm statement from makefile.</changelog>
  <changelog author="hguo@suse.com" date="1517227200">- Correct name to dependency package "python-pyldap".</changelog>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
</package>
<package pkgid="fb3e47142bb7ee69af1fb273572da22e76ef726b91068345749b53d33c7e73ea" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="d492eaa11e2113e2bc98f8321f6929b3e5da766f17d6caccee6370ee4755d925" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="2b01a52bca42cb09131f9f0cf74499803089f50cb26ebf5cca4c1df2ef79a7ad" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.18.1"/>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
</package>
<package pkgid="510de7a32f8b279c6a61db58c1bc54a47572583df378a2d228c288498fefd545" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.21.1"/>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
</package>
<package pkgid="9d4fe18fcd13d540a72278c0b4ea94d4c6e994ef90d3720901e53dc93276dd05" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.25.1"/>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
</package>
<package pkgid="34cda7581fcb91ec42228e3193b5782bce71e3c18919585e1391ef632d64fd42" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.25.1"/>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
</package>
<package pkgid="6930e799b6fc71bc3aee29b7c4433d58fc44edf3183f40a806dc076094850c94" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.28.1"/>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
</package>
<package pkgid="6232bc56c166f1d84cce35387bff6a7f004a330d948b9eddac266b29d3b1edd8" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.28.1"/>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
</package>
<package pkgid="094f878d249ab830bc68477c21909e983c96fff47d74af33104805cc6711ae44" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="5cf3cc1c4e41fb05c25cf87dbfe03c1b6daa2b7eb0d5bec18d587f43dbc43f48" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.31.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="4225b0cf76e67a05162bd159268ff1584f6137acee0c9233044096ac758d14ec" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.31.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="402563880f4302b0707fe9de956818d05b928ed3d8d3832621d41a40b86089e0" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.34.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="bcd722e28ff9aa856732ebd8bf96210e5e01086df788f7cc64766b8df4733a20" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.34.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="c1fdddbbab5d350d4a902bd888449f3286d37cfd6c7b1fb8b28d387b239104e4" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.37.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="69d75ac1e0bfd091fa3ecfb9c4fe0181574835b48f9fede45a681c70db754b1c" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.37.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="897b27cf37435da928de2b037c726f54eafba2f2c200da8b533bd24ce269892b" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="75ff2e5baa7a28205d961c6e942139248d8f8a335b81d04322b0810f6ab613da" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="9f61f9ebddedc2acd54d390dcdbbad7155af092c8069d9ebc9117026d8c9ad3c" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="a5c4539c489c25a3eeab73bf60a07c3055ba7dac08484b8d180baa60ecb9e02d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
</package>
<package pkgid="96f3fd3d483290cdbf81353accb535a1e44e403e8bf349066726799f2f96976d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.18.1"/>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
</package>
<package pkgid="dbe8983453ca7a408687690c201d6bc32f17fd0561fa967cd5ee78fe96821b0a" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.21.1"/>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
</package>
<package pkgid="4bb65d20cb96d33abb639b1fb18224fec57de040b5c7e8ebfbe692017e0fabc6" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.25.1"/>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
</package>
<package pkgid="13ad5b1f1afd7584f641b6c8e3c2a7dcfc1dc2d990d53eed0967ededad6e18d3" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.28.1"/>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
</package>
<package pkgid="dd8496b4b07abad62a0111d20a4aee067a9730e214462c42c54794418b7eba9f" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="c5302c66fc44f5a6ac643eb9064a6457e142ffefc630de389111d623a10dd5d3" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.31.1"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
</package>
<package pkgid="b4c6ffa5def38fbc71c753e45e99f92d2abe5617fabe8f1ddf3b02ca70662dfc" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.34.1"/>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
</package>
<package pkgid="9a52eba5825692413f48bff3a13042edd61d19059bf8b5860dd4da7de4d3eb3d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.37.1"/>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540209600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + GraphicsMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393600">- security update (dib.c):
  * CVE-2018-20189 [bsc#1119790]
    + GraphicsMagick-CVE-2018-20189.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1545393601">- security update (tga.c):
  * CVE-2018-20184 [bsc#1119822]
    + GraphicsMagick-CVE-2018-20184.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + GraphicsMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- security update
- added patches
  CVE-2019-11005 [bsc#1132058]
  + GraphicsMagick-CVE-2019-11005.patch
  CVE-2019-11006 [bsc#1132061]
  + GraphicsMagick-CVE-2019-11006.patch
  CVE-2019-11010 [bsc#1132055]
  + GraphicsMagick-CVE-2019-11010.patch
  CVE-2019-11007 [bsc#1132060]
  + GraphicsMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053]
  + GraphicsMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11009 [bsc#1132053], CVE-2019-11473 [bsc#1133203], CVE-2019-11474 [bsc#1133202]
  % GraphicsMagick-xwd.c-update.patch (refreshed)
- added patches
  CVE-2019-11506 [bsc#1133498]
  + GraphicsMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + GraphicsMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- added patches
  disable indirect reads [bsc#1138425]
  + GraphicsMagick-disable-indirect-reads.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16709 [bsc#1151782]
  + GraphicsMagick-CVE-2019-16709.patch</changelog>
</package>
<package pkgid="2bc1d071844068eb740e033f43b0497ec0354a1b6ea10fc343a5dfe803931743" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="90a695815b4b9d5708efc3607b75e7a472614d6aed3e25da9a08a1a3ebc83867" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="66bc8e403e8f0e029f5d50dbcd2b5b0b0bc240c27b3b03d0d90655bfcd0dd608" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="dffcf4be8a07c29370d83d4c7faadc6dada1e38ddc004be7cedde17930065e11" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="ae90692f8962aaa2c8f39f14fb0a150b30ad24425f756b0036e7c2a474376011" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="651c6ba4a0850ec3a79c8fdec8e07d7b0255674d3719a83769996c7b67b71aae" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="f9fcd8cb3796266e6a5b2dbc9d506a9fff79c3eb6f8f820aa7ee93e638a2226d" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="fb981dc69fe585b2b5463a841f369c10dc9fc688a729fb9f09544197c361dec5" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="3529fdaeb5cdcd2cc5f375d5824d60b7eca5f726b50b2fe5c47071b3240303cc" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="8b88e8ad311c0536ad988bfd400c818071a53dbd36ad392b4b876b1d9596572f" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="6de7fa554b94813eb7082efd66e769de0a5c602a507478ffcbe250c18bfdf7ca" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.26.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
</package>
<package pkgid="d6897e84da809f5368fd0077e490deefe943f573da1ccaa5b815548b4b03610f" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.26.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
</package>
<package pkgid="8f3d927b8c45b6e29ca29e8480881ce3cca76cf04d278e0ed80fd889eb3c1b37" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="9eb1eefe09f9f577e5a8d9d7b57fa8d5df66e84189d9dd585ec96ad4ec5dcd86" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="0afe5a4b04a9dde0f5cec56145682f93636f1b71c77d0d87662cc754389ba671" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="29db6b365c1a430fe884e9ebb96beaf261647b53d668f0d33106622182840eaf" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="99f9ef3abc2871b309e5a92a61c19304ee3e3379792fe47046ffa4e1de6b51b6" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="babc0403419cfe417e9a2d97320154d1f172e0ef9d8d445a3db05f1d9ba1980d" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="d1f91fa10a0e9b9fd7df6bea4878a7acf6fa43b8c2088f18462566c8faaec3a3" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="e2c71ff6a986b4921432195e86bb501860f355d96bdad8fc9ccf5c02442ca0ae" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="496b49aebe71a15a5e6a99c8d46c162c59cba521ac8ab049a919e7a24653a6cd" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="1d0c2989f342e895f0abde0a81a8d3049fa7262f23a31e0b9c26a30bb932df95" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="9603aabccb0551a1f7018f229ba4d637f32b71c10ee29dec618d348dedc2d5d2" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="2ceeaea6762b096162e1a3895e5debfc3d6c7308d6051ccc8ff59adc7180e645" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="c86a3891c6335c31bdb3fa25e571162f397645f178f1174b8a9c1f681e76d6f1" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="e8a131276003eb084acbd009ceecd5e910dd6ea4429ab2f01d1287c8db38b3e3" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="547c905a934975de08140328445ac418db72f67a4410bba8bf1b684accde2015" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="ccea71d556698972f64f82075dc6da922fce11e14f685b46fa9f91a1713cf891" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="23ab69adc8bcf3f7de607339781b35b117f8d73d43ef22ae749aa034f9a6dd28" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="90a960237b2de1f636d754b62c655788526ac0278c36be17168e83d5e9948136" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="613dedf0e9d090fcc4be8b4fccb166c63616c75ac9aa06284dc4494f15664029" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="cf1a5f65f4e22b241d553a4af58ab6b1a6724ef1e190a87cdfec60f456268ce3" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="6aa9e65692752d54d96c1dd2b73acb6bd93b92317aaae7aa42a9db55d8da4b80" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="0675833f7d81041fcbea98b7e96ea48ca5b0d8961a66bb5553e9fb00b7ad0f7c" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="894303925c45ab3fe7af9841bcb7ee3569e0db4faae5d9250e6272e64fa69023" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="e7421497e20caf47dc9dfcb9c62fb497bf8c37ff44e212a00f691fe10fab758e" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="0a082dd818b90408563f639a6c6437eb1247488c060a87e24a2a9816060421b7" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="6d577c0595a5110b8269cff0b4b752fc0db086d10108de7764eab9a784f14fde" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="c09349c1eee1e73f70efa829de20b951a6b7aea739a2899db70ed5d354b9b834" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.26.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
</package>
<package pkgid="f180ce3c3a3be9d08abf09f0726f64216230907faeeb8ca9b46c9952c15c4ee9" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="1f14d46d2eb0e0dc2ae646a55c443d0503c19de4cba4a30b33078c097ae71061" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="10ee5aa5cf1f3144d7124388aaa1bf42d7f7d042aa4e805d43002707a67357d5" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="c2aea54dfbeb847b2de5ecd81aca92bdb89c4c45539509216ef8a116907c81b2" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="9177fbda74ac15445eff631583bd991d4bf6b9ddb049413d79b88047ac1cb6ca" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="11f29f6a8c4729ae754a1e9e52955857eea17ff31682f873090d1a0b1c6da4e0" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="bd031b5b2defda7b035360f57ae607251e2cfad80a933b3af2d53e482a7bbf5b" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="b757be1f143d6b32cf8745fa97510381ef75a04afed4dd9605bb640c9920c7ca" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="eba60be8894e66d8962f8fa0d1389534bfc4c2006140dec6220e1573ba5b14cb" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="3e2761fe971f57f54f5e1f5a80d147a3241bc16d767b17689837d53dc7ba4522" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="1d77d24efae933e72008fc23bdd92337d994bdd9bea8042c2cc92961c9022b43" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="e50001f140ad668f6c1b242b2bb4bb288608a2f71c384c29284fb926b018e1fb" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.26.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
</package>
<package pkgid="91e0a52fc40d5d2a05bb408039d9971f48184c8de630acef56a5291a40f39b5e" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="2bf511257b8caf1d351000872113c5581f955a86dcf49bbd15d1ff19d3983496" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="ebb3cabf6fd4b23ab477b69cfe5acb9562a65734de2a23c0581bdb913631d9de" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="847de1078a7dab247051d827496f3362a81b75975fea360a5c069bf306810a91" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="2f81e91e2a402ec734651bda0dbf57f65a0e8ca299358016499dadefb2dd8c98" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="20d078c83882af68cdd6ae0169d44e6417aa7947d5330fc98c769611788fb715" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="618600d4dd27e64b36515906acdb47e6f5aeed93efc31a49484567d0253b5b53" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="50316461135cb38de4241dcdf3a21dee10f8e6632408f76858426ee01471dee2" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="d8cec2b3d70472d568a5f6a4d48b5cc1ffa77c3ba0c4321461e55d7f843e237e" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="8afc6da0a5c84750e6aaf4b8096d6272674b61b5f2714bd2db774bb6a9146ac9" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="fc24c141128f22928c2c9eee4840375b9311ee7f9015ea2c857ecb3f467799af" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="f4aa5ee0ed3b8094d1ae67da75adc959d8dc978c1595c6f8725560487ce8de28" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.26.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
</package>
<package pkgid="c06975a6e57c4df44c4cedde6066c17dc6d61aa18eb07bb8c3f0770f9bdc0865" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="888446c88850f5897a08a5d98afdd9df813c9cda09a879cb3adf3cacf11f4df7" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="b8d5dad8ab15f8d689b75e74d8a7f9de38a7f3dcbc1df21f3994095a5494021b" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="e316dcb104e3dad36f74d27b3a27ea3cdb59af1ae6b43c44b707bb545e2e2386" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="0adff7493fcf826699b3f69eb12013ecd05227817529331d9d7c243d240d66f9" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="916685d98ad1696e7c36fd128c9ff48cc8d21caed8a820866211c1c30cc9f545" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="c98bfe9b922010ab6c364b14fe9f6c5f5f6e4b0b4c4cec6168921407c8dab048" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="4463068df9f7def7adbddfbc574406bc57bd2daf04cd52303adeb03224b698a0" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="7eba9dc96a5631fa612bb4a3b71b34a9cdda54615249e3c6aa5f2d5b79ca4570" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.15.1"/>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
</package>
<package pkgid="20b0f5e6fdcf99581af9fb3426333e239cacf2674ef7be3c8bea38d5ec2b5a1a" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.18.1"/>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
</package>
<package pkgid="ec5207263af016aebb5f961546601d4b09841d97cb39ca77cce5c040d193a117" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.21.1"/>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
  <changelog author="pgajdos@suse.com" date="1535976000">- security update (xbm.c)
  * CVE-2018-16323 [bsc#1106855]
    + ImageMagick-CVE-2018-16323.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976001">- security update (core)
  * CVE-2018-16328 [bsc#1106857]
    + ImageMagick-CVE-2018-16328.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535976002">- security update (core)
  * CVE-2018-16329 [bsc#1106858]
    + ImageMagick-CVE-2018-16329.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1536148800">- security update (psd.c)
  * CVE-2018-16413 [bsc#1106989]
    + ImageMagick-CVE-2018-16413.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + ImageMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580802">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
</package>
<package pkgid="f9dcb29815fc2aa761005d8890142e88e2858827c80d86dea1093068bf41f774" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.26.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + ImageMagick-CVE-2018-16644.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (cals.c, dcm.c, pict.c, pwp.c):
  * CVE-2018-16643 [bsc#1107612]
    + ImageMagick-CVE-2018-16643.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (tiff.c):
  * CVE-2018-16641 [bsc#1107618]
    + ImageMagick-CVE-2018-16641.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667202">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
</package>
<package pkgid="137217dc01ca1075b33dc1856b2077bf6d2b9ab26290e153a4ab294c94dfafe8" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.29.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667200">- security update (png.c):
  * CVE-2018-16640 [bsc#1107619]
    + ImageMagick-CVE-2018-16640.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536667201">- security update (cut.c):
  * CVE-2018-16642 [bsc#1107616]
    + ImageMagick-CVE-2018-16642.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538568000">- allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading
  only by default security policy [bsc#1105592c#32]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
</package>
<package pkgid="c55af7843a3f73d2cd52a96b112c68a3fc9dd38d00526e4ed8a24bf4e325e0d5" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="4174d5fd3045c6731c5e8f207b287b21f9a29d1a620acc3cbb1ff5bd1546f03e" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.32.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539086400">- fix -morphology EdgeIn output [bsc#1106254]
  + ImageMagick-morphology-EdgeIn.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539172800">- security update (pdb.c):
  * CVE-2018-17966 [bsc#1110746]
    + ImageMagick-CVE-2018-17966.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
</package>
<package pkgid="dd78ec40062ef806ee8e7c63adc9707376c7c3988375c163744a40e0a07497b6" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.35.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539259200">- security update (pcx.c)
  * memory leak in WritePCXImage() [bsc#1111072]
    + ImageMagick-WritePCXImage-page_table-memory-leak.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
</package>
<package pkgid="d12c61851c765825dc8abd37175555b465bf5233f042676a0584b698eb7be65e" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.38.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539345600">- security update (bmp.c)
  * CVE-2018-18024 [bsc#1111069]
  * ImageMagick-CVE-2018-18024.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1539691200">- fix memory corruption for MVG paths [bsc#1109976c#31]
  + ImageMagick-memory-corruption-in-MVG-paths.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1540987200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541073600">- security update (msl.c):
  * CVE-2018-18544 [bsc#1113064]
    + ImageMagick-CVE-2018-18544.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update (bmp.c):
  * CVE-2018-20467 [bsc#1120381]
    + ImageMagick-CVE-2018-20467.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547467200">- clamp after edge [bsc#1106415]
  + ImageMagick-clamp-after-edge.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
</package>
<package pkgid="6bc09b2187cbc3e4e33e0420fe4f67945738c64d9ee3e1c901d3c18fd28ca7d4" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="6afe993580907bb5de741e5a3e5ef748008cb6073fbd5cd8b0379be456711ad4" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="0559340b7b085acac62a35d3e1f06a49c1e213b5626e5aee6753d5612629ce81" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp150.3.10.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
</package>
<package pkgid="b2b532d28a0869d9e06bdd7c3924fb4b5358cc6855715c95534cc521924a371f" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp150.3.3.1"/>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
</package>
<package pkgid="447639068b48c07cadfca8845c0786705492271c774a07c99dd948eb6b7633fc" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="lp150.3.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
</package>
<package pkgid="910760dc3f2606772c76f08ba36121e0030e6e8b664baf7b8a8947bf8017edc1" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp150.3.10.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
</package>
<package pkgid="38061f898f8f3a32cd38a608a2cb73ca850826b246bd9db7bafadfd68ced119f" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp150.3.3.1"/>
  <changelog author="coolo@novell.com" date="1286539200">- add baselibs.conf to build 32bit libs for DirectFB-32bit to use</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
</package>
<package pkgid="716f80ecb981df8f48b7475ba5a441a1d1c4cfbe8ebe441da138e542799c0b1c" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp150.3.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 0.9.8 latest.
  * Changes too long to list here, see NEWS
- Use system lzo library</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="gber@opensuse.org" date="1345291200">- enable support for gnutls</changelog>
  <changelog author="idonmez@suse.com" date="1346068800">- Devel package needs a dependency on gnutls-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1348660800">- Update to 0.9.9 version:
  - Overall changes:
  * Added noVNC HTML5 VNC viewer (http://kanaka.github.com/noVNC/) connect possibility
    to our http server. Pure JavaScript, no Java plugin required anymore! (But a
    recent browser...)
  * Added a GTK+ VNC viewer example.
  - LibVNCServer/LibVNCClient:
  * Added support to build for Google Android.
  * Complete IPv6 support in both LibVNCServer and LibVNCClient.
  - LibVNCServer:
  * Split two event-loop related functions out of the rfbProcessEvents() mechanism.
    This is required to be able to do proper event loop integration with Qt. Idea was
    taken from Vino's libvncserver fork.
  * Added TightPNG (http://wiki.qemu.org/VNC_Tight_PNG) encoding support. Like the
    original Tight encoding, this still uses JPEG, but ZLIB encoded rects are encoded
    with PNG here.
  * Added suport for serving VNC sessions through WebSockets
    (http://en.wikipedia.org/wiki/WebSocket), a web technology providing for multiplexing
    bi-directional, full-duplex communications channels over a single TCP connection.
  * Support connections from the Mac OS X built-in VNC client to LibVNCServer
    instances running with no password.
  * Replaced the Tight encoder with a TurboVNC one which is tremendously faster in most
    cases, especially with high-color video or 3D workloads.
    (http://www.virtualgl.org/pmwiki/uploads/About/tighttoturbo.pdf)
  - LibVNCClient:
  * Added support to only listen for reverse connections on a specific IP address.
  * Support for using OpenSSL instead of GnuTLS. This could come in handy on embedded
    devices where only this TLS implementation is available.
  * Added support to connect to UltraVNC Single Click servers.
- remove upstreamed LibVNCServer-LINUX.diff
- remove upstreamed LibVNCServer-0.9.8_git201104301110-overflow.patch
- remove upstreamed LibVNCServer-system-lzo.patch
- rename and refresh dont-build-x11vnc to LibVNCServer-0.9.9-no_x11vnc.patch
- add, but not enable LibVNCServer-0.9.9-system_minilzo.patch
- add libvncserver-0.9.1-multilib.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- delete not used LibVNCServer-0.9.9-system_minilzo.patch
- document patches
- rename redef-keysym to redef-keysym.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- libvncserver-byteswap.patch : USe OS byteswapping macros
  which are optimized for the target arch.
- BuildRequire libpng-Devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
</package>
<package pkgid="49e7981c57f6a2f232375efc3469327dede1c6f50f7c1be21926647bc5140757" name="Mesa" arch="src">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="1ff75e7fbabef22a812935132527d8cd27a39131385143a7108f70ad121b8bc0" name="Mesa" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="8d08a88fda44aba4fa1a71e483f5a84cae86f46a6b7340d5b778c6632b604c6e" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="918c34ebaf7547a5ef8770b81bbcc3c9c9cdbefa7fa6fac31ad370017c0f3bfa" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="7de63a175de6f8a8cb691c95ef31673f16b1a2ab5dee667149501fedf4451d19" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="2c536a5503f74c90aae486c68038d65f2b4180766e62c7e36033d6a2e54d1211" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="136ea090ed50f799edc3847cb960ba0e0a0e52d11a651175bb7bccb5a8f128cb" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="7198a6f17467662106365f61627da6df296d87fca81c48f519a0743b9651eed4" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="933a487bcb2af6ffd917e5279cfcd30a54711580e77a88b895ab51b69e2bf410" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="2b63293d85b369406501c463e93c5492837fd0954aa1b40f466e8076828f977e" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="13db16e138479ff99e638b9b6c6f65d8ca1e6241b3e15db8d2bff1052b88ba07" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="da128d84bfe3737f6a3ae44c4f4be3ad7465c64f04212b31f458fdd6d7cb5e4c" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="bf48df68ff56ce5f0c9841dbc96917619d3a281f914efbe4bc0d8823643bb47a" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="79a5d8ea669881e6aadf08e25b6c15e32f42bda0893acec8fcaea397f4a15207" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e60adb0bd7c909cd3145262e1e968612a425c42894708e4170e442ac1df2d7c8" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="60ebe4bdf93050deb2d79c49e58b5059e886e2a1bd629bb04e742b8eddc82440" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="0f36ea9a29a2e8274d747c784321f5976207b9777aac48aa3aede79ec7742f34" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="1cffbcc58b1fba149c00420abe8342851ad5d2b44f89b0fec924de9fdadc94bf" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="671b0c69fbd8cad3c40fe979c49145fd0fdc048e01fac293b3961427d059ce70" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="56da59b97e2ad1598ca2358cc843b924ba68c047a1afd06dc4fab6751d93f893" name="Mesa-libGLESv1_CM1" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="756008d088606085b41ff3e55e7db754326d30af7a3484e9504b6d31bd8c3742" name="Mesa-libGLESv2-2" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="29cb3708d2015c99d9d14eb84abfffe896528d275a1dc39546fe02bfa91385a6" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="4a1e1b8fcbe6af72eddaf22d1380a293c53a9b97260accf0b4f504207572c035" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="93c5ceacc40a0975f6e2b0532265e94af0678255849cc5ee9f584549c76e111f" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="fbb3c4a6436d393591ec66eafc34e86a0712894242fc318e657a8677e81bb466" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="af64dd861ea8961697c9d8798f4a8e6522493e5db139359b20f5cd230bc08cc1" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="f81d912002eeb0ba8dae77be9dcecef3dcd28ae1957c49baf24af51fad711cd6" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="e6ee24d24c00d6910fffba121bdb77f59b833f67031102b2a07a338de725cbad" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="ac5928d9d5ff6b6d503a1a0d1bdbf706adb5a0fc456187899177fd7c726bb230" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="b9de7d83f4269e64dfe4350437e1d15045447b57f323b49cdd83d521a07a79a9" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="14923d81d155a062d965f40bb12afcdab5871c0b95914af1511abd7c98b55381" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="dcd5ccd8f80b7557736111b7d87e39c41b371dc4a23ef90bc2cd4c034bb219a1" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="2aee80d227c6e0ac4da4b03e2531d504b6a7485bac9f738a19924ffd4733b8ae" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="9d4b47df95862c9d8734a7f33410c3dfc2a0674b0a5386dbd417d3869ada3043" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="18.0.2" rel="lp150.18.3.1"/>
  <changelog author="sndirsch@suse.com" date="1519387200">- recreated u_mesa-python3-only.patch and renamed to
  u_r600-egd_tables.py-added-support-for-python-3.patch; also
  removed first hunk (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387201">- removed u_mesa-8.0.1-fix-16bpp.patch and
  u_mesa-8.0-llvmpipe-shmget.patch, which we no longer apply since
  about 5 years (boo#1082305)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387202">- redone u_add_llvm_codegen_dependencies.patch and renamed to
  u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387203">- removed no longer needed ncurses-devel BuildRequires (boo#1082315)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387204">- no longer run ldconfig for the follwing backend (ICD) drivers,
  since it's considered wrong: xvmc, vdpau, va, opencl, and vulkan;
  required adding a rpmlintrc file with appropriate rules
  (boo#1082316)</changelog>
  <changelog author="sndirsch@suse.com" date="1519732800">- merge content of new rpmlintrc into existing Mesa-rpmlintrc file</changelog>
  <changelog author="sndirsch@suse.com" date="1519732801">- removed u_configure.ac-Link-to-libLLVMCodegen-to-fix-cyclic-li.patch
  which is no longer needed due to changed LLVM build (boo#1082307)</changelog>
  <changelog author="sndirsch@suse.com" date="1519819200">- removed more unneeded buildrequires: libudev, openssl, bison,
  flex (boo#1082312)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905600">- added n_egd_tables_h.patch and disabled u_mesa-python3-only.patch
  * use pregenerated egd_tables.h (via python2) instead of trying
    to generate it during buildtime with python3 using an apparently
    broken patch (boo#1082303)</changelog>
  <changelog author="sndirsch@suse.com" date="1519905601">- replaced u_r600-egd_tables.py-added-support-for-python-3.patch
  with fixed u_r600-egd_tables.py-make-the-script-python-2-3-compat.patch
  and enabled it again; removed again n_egd_tables_h.patch (boo#1082303)</changelog>
  <changelog author="msrb@suse.com" date="1521115200">- u_st-dri-don-t-set-queryDmaBufFormats-queryDmaBufModif.patch
  * Fixes laggy mouse in Wayland. (fdo#104926)</changelog>
  <changelog author="sndirsch@suse.com" date="1521460800">- no longer try to use non-existing python3-mako as BuildRequires
  on Leap 42.3</changelog>
  <changelog author="sndirsch@suse.com" date="1521633600">- Update to 18.0.0-rc5
  * The fifth and final release candidate for Mesa 18.0.0. Modulo
    serious regressions, it is anticipated that it will become
    Mesa 18.0.0 this Friday (2018-03-23) around 16:00 GMT
- supersedes u_glsl-linker-error.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1522238400">- Update to 18.0.0 final
  * one-and-only change since 18.0.0-rc5: updated release notes
- Changes since 17.3
  * The top highlights include:
    + Cannonlake support on i965 and anv
    + GL 4.3/GLES 3.1 support  on r600/evergreen with hw fp64 support
    + Meson build system
  * ANV Extensions:
    + VK_EXT_external_memory_dma_buf
  * RADV Extensions:
    + VK_ANDROID_native_buffer
    + VK_KHR_external_fence
    + VK_KHR_external_fence_capabilities
    + VK_KHR_external_fence_fd
    + VK_KHR_get_surface_capabilities2
    + VK_EXT_discard_rectangles
    + VK_EXT_external_memory_dma_buf
    + VK_AMD_shader_info
  * EGL:
    + Support for RGBA/RGBX 1010102 formats
    + EGL_EXT_pixel_format_float
    + Final planned release to ship wayland-egl. Now provided by wayland.
  * GLX:
    + Darwin/Apple fixes
  * Mesa core
    + Support 1 binary format for GL_ARB_get_program_binary on i965
    + drirc workarounds:
    (*) Unreal 4 Editor
    (*) Observer
    (*) Steamroll
    (*) Refunct
  * drirc mesa_glthread whitelists:
    + Mount and Blade Warband
- i965:
  * Disk shader cache when MESA_GLSL_CACHE_DISABLE is set to "false"
  * GL_EXT_disjoint_timer_query on gen6+</changelog>
  <changelog author="schwab@suse.de" date="1522756800">- Enable nine on arm/aarch64</changelog>
  <changelog author="msrb@suse.com" date="1522929600">- Remove n_Disable-AMDGPU-GFX9-Vega-on-LLVM-lessthan-6.0.0.patch.
  * Not needed since we build Mesa against LLVM 6. (bnc#1082298)
- Remove u_Fix-crash-in-swrast-when-setting-a-texture-for-a-pix.patch.
  * It was disabled for long time and does not seem to be needed.
    (bnc#1082306)</changelog>
  <changelog author="sndirsch@suse.com" date="1524052800">- enabled opencl and that way also Mesa-gallium on 42.3 since we
  now build against llvm 6; this also fixes the requirements from
  Mesa-32bit to Mesa-gallium-32bit in baselibs.conf (reported by
  community)</changelog>
  <changelog author="sndirsch@suse.com" date="1524139200">- Update to 18.0.1
  * In this release we have:
  * On the build system to highlight Meson is get improved thorugh several patches
    that fix issues around it.
  * On the drivers part, RADV get several fixes: one for multisample regressions on
  Vega, another around GFX9 buffer views, and a couple of them more to related
  with avoiding emitting unneeded vertex state.
  * St/Nine get fixes around face register, lighting constants, math check for
    inversible matrix, implicit conversions and bad tracking of vertex textures.
  * Freedreno/a5xx get fixes around missaligned heigh for PIPE_BUFFER, and around
    page faults.
  * Several fixes are also enqueued for Intel driver: set right channel_sizes for
  MOV_INDIRECT sources, set right config registration for uploading to kernel,
  return the fourcc stored in __DRIimage when possible, fix negative sign in
  64-bit return values, fix null destination register in assembly instructions
  with 3 source operands, a fix for failed TCS/TES shader compilation
  * Queue also contains a couple of fixes around Gallium drivers, one to fix a typo
    in code that was causing wrong return value, and another one to fix an
    unitialized modifier for DRI2.
  * Mesa core gets a couple of patches to fix issues around overriding OpenGL/ES
    supported version through environment variables, and a patch to fix an issue
    with texture samples found in "The Witness" through Wine.
  * A couple of bugs around unrolling loops have also been fixed, these patches were
    applied for NIR and GLSL.
  * On top of above, NIR gets more fixes in a couple of lowering functions used:
    coalesce in lower_vec_to_movs if vec had a SSA destination, and interp_var_at
    intrinsic support in lower_indirect_derefs. It also gets a fix around
    vars_to_ssa function.
  * Finally, there are other fixes affecting Radeonsi, AC, EGL/Wayland and SPIR-V
    compiler.</changelog>
  <changelog author="sndirsch@suse.com" date="1525089600">- Update to 18.0.2
  * A couple of fixes for Meson that solves some problems regarding
    building tests and installation.
  * A couple of fixes in state tracker / DRI that was causing crashes
    in QtCreator and Firefox, among other problems.
  * A couple of fixes for GFX9, that solves a hang in the driver, and
    a problem with buffer views.
  * SVGA gets also a patch to fix incorrect advertizing of
    EGL_KHR_gl_colorspace extension.
  * Etnaviv gets a fix for swizzled texture formats.
  * Intel drivers get also several patches.
  * RADV gets a patch to solve a problem of lot of games complaining
    about not having enough memory.</changelog>
  <changelog author="msrb@suse.com" date="1540555200">- n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * Disallow rgb10 configs for chromium with radeonsi to prevent
    broken colors in video. (boo#1113211)</changelog>
</package>
<package pkgid="d758c7099c801fe794e9fb8001892105aa4875f9c726cce74ccba6e41635cff9" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="4034dab75845347ca40d7f7eb2896c87c83ac04215d572934ae46d49c3e2474c" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="278fbd0e083af8c407c75420fd8bbe02621cf1452a6e7e8192e8aec8a0216654" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="aa4bcb37cb8abd8087948ce7da51217b6596cbb62680e237c62ec1f8428bc88d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="4dd5aa325560f991fbb87e71e935c5c9ae1147d8a093b660bba2be770a9ccca7" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="1486a5fb258102051098af8921b813f419c0cec0530c7a608760d582b0daf66c" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="75d9c5aa3df5ac2e67c6d4ecaa5960addef092e3f950389ed293e8019d3879d4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="ce49ef35648ee3da054155e0da704efb1934f3739a00a8564cefdc6b0911c08b" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="6f6238fdf906eafab340493e74d1b4a16163a2b13c981d559e10272f0a0df418" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="lp150.3.30.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="74e5734c303049470e9501cb79bb318237c163f155eec57dd0127bd8e28bb957" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="lp150.3.36.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="516a3d1362f30387322da4a5160bfcd7bd9aaed2aaba20b827825c5332f254cd" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.39.2"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="be42508e55ac0382e7402dd7fb517f4d9098a738aa41443379c9797ce0d3abd9" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="36a12f2d83039db22482617983538b3a7d5c4fa8c5a9403e947cf2c099b06212" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="b33d6669137f311b6b9186bdb80b64b2a48f000bb5670919f06ab8bee34d5a20" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="b8d06615baab484814651360d414f286b5d7871980e39d08f602c916bdca1678" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="458a0df1f2e83116bca5f472cc523c2b83dd8b42f3b311f51549c50908992215" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="0da84bc60110a160dbffbe295d6b4e2b5948048eb904dbb41cb81a4b23effb42" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="38edfaa651916ba4ec931b43b4d5b3a5beecadb287e8cd0194e144c77104d0bb" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="9db369796a4ecb3627d025df70211946423eea40e2e43f77b2cd5b00266ba690" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="87d85eb5795749fe243e2cfabe8a8a95023508da613a3a76817dfeda213a6c1e" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="7e1477833c0d0c2ba9c62305464bc35e4b09114f0837732ba3dd7192a4181e3c" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="297eef93082b0b170a5a8a9fae820c63be2b2d654f8b04a274440d5fb7124d00" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="5a53a71eef14324a0a35b1158fa9ba4ff2768cab506d8e854125c15d05ced81d" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="ba01a66c42e5bf44a50564e88daf0db3af30de914fcd4b87318d01bd4a2eda8e" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="0f03f4cce51cf653b443a835e38100eb8e9f7bf7fbc30c1c62343030fbc79441" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="7cafca2917ab415ad4dfb3681ec890101589c233952ff67aa792660aa47a00e7" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="04f032c5fc701a87987e1ff1a72e4434fc209d7eae8dd713c36715d7c23802a2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="276b7778166c356a7c47830c5662125e8d69e73f205914de72baee07fad94cc0" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="53a463dfce8ffd1f3a6684bda2c3529f8f1649445f71100c8d09cb7983f7a681" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="61fdbd658735460ee78b8124de3cfb1eeab9d61211e2f542346d93b30d78c1c3" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="ccb2c7818c0fc6599076d9c59ab2bd90e384092ed90d0ea59fe37fc61bf6c12b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="48bb6fc1f13e523f1a478acc6c79f9378236264b42ab75b0f9db3639cee7ccbf" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="1e2794c7aa8a21a5b48294d2522a8c28b8930257a34fef87f834a7c9384eaee4" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="6bfa8ce2fa14df7946d6bb00b5aa5081f62e4d9c72e36ce69bf4ca284ac9f33b" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="lp150.3.30.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="63a5ba227e90a6624cc05981da979950e326714af445af27bb6a63e3b8f2ccd2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="lp150.3.36.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="f2f3b549796d0205eb7b10242fd70475cd2306ca38874d2e0ac8caa7841b292f" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.39.2"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="434d82b3a5861901b9d4e2a2491ba1bc87c6c89829ed4c3932176d64adf9f2e4" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="038898ba6da3f23c87cb6d6df181f5a41dd4efe847b79afbf62648af43fb91f9" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="e884b3f389928ebf07877311a4c3b29264d9ea73fb48f13a17113dd4afc61e44" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="42247d77c5cb0bd634cd5cc199c6146b68161bcc8bb5f1f39af8bc3e4cb96eff" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="3ec50e2d7cfefa3c63a87b22a3ac26da89dff5ff098247496ecf5d3b10a44484" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="104f7868d036eb445281e0ff57cf09fb28b1c98579068e25e2b76c8f8e57ab72" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="df06923aa29cc2cc92d42dd9a0c97de61acd05b14c6e528d32234f3668a6de34" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="93e67c7de19319a97c7b68bd91a3622030c0980fa0cc801410e04ecda60b3fd2" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="dcca995db6521aceb8423ef21b6145b2f7b456a2e0655ba8a5dc585c435a7590" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="a1c8f3d24eba46771ec1e7dee3e4f550732ee56b15ee16fec9f86149f0d9c208" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="6a7c7d6b2119076f246e19e62d700095a477463713a5dbfcbaaccc08fa3cd0b1" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="f800a2a969fe95f03fbe9eb8912fdb2932f2a48c35de63cd58aee6ea4654adff" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="90aea1f5c72e889a779b728ac727d6653628a7eacb0fe428a565ed505e7b1127" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="39d071763364e0f14130b08b9a5375b6f2a9dc479f1722c3a169a8f94e28e353" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="9e22fda49e39e37b9a7244edb9c7be5680c397131e5383113c14ab6fba6e23e0" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="9bbec77a8b25325eb946d16b41c385a772a0c2bce8ca25c36df2bb823fbe1a8e" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="lp150.3.30.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="ca1f5449b20dd9d8c471d66f7b3e86d9c490d4c0fbf9623ab85f42ba0717a657" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="lp150.3.36.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="53d94b1f004d70272a4243102457c0d366632e916ca67ec48d4f51ffac93ffbf" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.39.2"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="195459655c6a5468fdacb01c32af35cb74e78837cc5bab2de22a379919cacaea" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="167b50789e77f4b3207cc054f75e85aaa3058912fe66710ae741bfcab7c152db" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="00a80caf6e2d185bd3511f3b88cd0d2807726d81ec11e4303578173fcb4efc30" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="28ca3150512f813d5a8704e786a2c4081efc804fddf7f753bc24333bf9d33a77" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="f8ceedbfaccacf2aaa6e39fd9b21765f364f8530efa81d6b6df53a82076e0cb4" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="4c6ae12b285e76aeb4c54de6dadcb648a191013cb149f5ca7172c45e8a6eac5b" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="aeda025485b0874daa6fb07b6761d8ec8d5e3aae267df397d6a378f27052ff9a" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="d36b3fcf8008809bf13028e33e49dd90ef5f17f8cb4b99ff8fd584af2a94f88d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="3fbc8aae7bc4b2e74b3934f2723510d73cc5ee8fd9c2a3a9bdbd3ea1f2be4199" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="faa6c2bc957dc29537e9843a9c7522d430b5cadedc7754338bd77e8914eb1b92" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="d1592c5e493a8895d88795f1439d5c3c965a540c124ebc86b6af0db76334d640" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="1157090e720479018fe3ec9b3b772542e75110b9ad008cf8d5bc332fa4b01773" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="06ad398b342fc673edaa17e235af0876d17360c365bc787c81004f364ef96adb" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="648298045fa195d3d4a893c80e4189ae08ba68c5c151e96d9b3c2200eee68408" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="f9480eced4f92904eb17e6b8d9e8f63cda818fa37ab419335abb4a3a860f80a1" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="ef0a7f88a41ad650afef9a3b446beb321e5bc7f3dbc954c0903477f22bb2d201" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="lp150.3.30.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="a75f1d918ff825d51f8a6e00ed9fd181f6a26630ccc5c4b91ce073e88dd0ee39" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="lp150.3.36.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="1441fd2836b86b09e107d902a400fcec19cd2a182155defd458357576e4fab80" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.39.2"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="6ffd86ca6b267a14c4e40963f6f3f3636a3097161b6155b48e853153a3dc6239" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="b4477d831b847c53e37b5245874f91b882bad7b5ee723962f4ff43208a727796" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="ffe5d327b42296ed4e791b37cf1d3f056f75ce56291450573c92ac44af8e8a45" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="6fe08eb27cee86ec71b1e92edc1c916380e1fe6545fd917787bd09d7c7ab01e4" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="27c35e9bbca8d2ac4f38309d98a57f142117fbe6b8863cdc2ed65b4145e0df87" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="f4dc87a0c001d3e27ee621580ca08513d87289ede58fc5180f6a9ebee1a16c81" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="fb8b044791b5fac5215aa80e79ab0a6145ba1febe64c70e980d12990a58d5e2f" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="e0300f431d627896392cf201c59eabc883decfcf2fb750b07ef311856432116a" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="6d14f788affe303ec164709d94325111188dd006dd5d6e2209a5e7d6869cd27d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="247b37d0d9313d9862ba0179c287a28fbc9e0f3dd17d2947f81d9e0a152d8502" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="938a0c4b77cc891089211d0214a960da2d1282e59444cd2d72a916c5a442c7b1" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="d308941a6fa515f91f9b84f5d1a8a095c2ca0e7c1d2e87c91572eca15b29b2cf" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="175d9b0901a0ad84718c791e0154a30d87d2f76d194e3f04226a2da851c92f5d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="0a4f189b471bb0e80539398e98e275facb1b4fca69b8a8deafa38ac036438611" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="1900bad224bee94e91a49eac200392a43fb62b2f19e9ea110a48fdfa22d04f2d" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="61eeaf491e27beba903c2dccb4019f2c27a97593c8f8a5f56751c7e3d7228321" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="lp150.3.30.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="b791a6da68ac9226c28b3c5478692253ad6ea595454acc3f7a6b0ee3688d089e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="lp150.3.36.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="4d0406e70d061edb63439762cbe24106cd101f4caa00287c8ccd97b0b2518634" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.39.2"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="c49a70aead1f48f7eaefa65370676f60ded40349d9ac60ba779c41b4193a09a9" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="02159e0f56d2162532af3a601b4b6d6596dd58e5fa7513787470ba141cf82e05" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="c3561ec42f5db35a1a46f528f5ad2120c6b0435f395425f7da03a78094bfc801" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="acc9f8e53762740b43639fd7ba7a3eda084a32142dc8a3c9dc3c3fb50f6ecdec" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="d07984b3e90a85a2f763e41a849c8aadbbb598aa0b999597fdf5649799f4c32f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="9816fc97e86bbbee9eba8704c8d1ca40851fbd9a24fd7352554d8bcc21e2cfc6" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="fc44c5a81b8588f368c4b7bf0afdcff55b70db192c14089291adc75f78b52621" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="0ca93fbc360b4640263c6b4c0bf9f0dfe871fedef028ebf94890fee273a45473" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="8eed9a91d6cdef83dc3ae6bfcf4a597a17c1b62bb5418a1f583f50417cfc8e4e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="6c8c736ea8cbceb76d4d596d659457f15b9a99abb9b708bd790e199465662a52" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="76014a54f2f746cfcf7bf7103a7e689f7261e7312eb82fbcd6645f92353daf10" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="9566b677ab06b5c3f372c04a4fd59c793e28516d7c6fb235babbb8e98228dc00" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="4f62462327d27aa807b7ae447a9a2e49cabf43d4a414651c1fc07b825340b4c9" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.20.1"/>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
</package>
<package pkgid="acf5c195562578e80755e6d88c2cd36ec237fb9de2a79dfe0eb1b079c4dbdd20" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.2" rel="lp150.3.23.1"/>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
</package>
<package pkgid="415a38dda5015ee370e436f091e02628447eb173adb895811b9a1c36275d7e6e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.27.2"/>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="ffbb4c78f56539c83a37efb244bb0e1042272317cf1666216892d209b0efdb54" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.4.0" rel="lp150.3.30.1"/>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
</package>
<package pkgid="6de15ba65264db60a5ebdef2e289267e7249a569fedcf59102dcaf0c5f99034c" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.0" rel="lp150.3.36.1"/>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
</package>
<package pkgid="8f5e7baeff057ca27c1acff42cc14606aa5a4b83ec9402db43492539f252073e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.39.2"/>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
</package>
<package pkgid="30124c8eb78ed61c71ddea4229288d439ecba281326af35e419d08fcf20aaf06" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.45.1"/>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="d5e3eea0d02a4a9d7b0563dc301dc128493600ea6827c9c3f38f7ac75d6779c1" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.2" rel="lp150.3.48.1"/>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
</package>
<package pkgid="1c1b7f6c0c18ec9b3f54997c874b65e1f4394c2fe5cfc45192ad8fed6f2d713c" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.3" rel="lp150.3.51.2"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
</package>
<package pkgid="62b272a2d5370aa54a47c3ad4c99c86429a84915912c9ffa7b3ce9b645cda94b" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.54.5"/>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
</package>
<package pkgid="4214e777a14e026bb402e5a82d34d648c230ab6f36a562ea21053c9f17a6f9fd" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.59.1"/>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="37100f641b9f23350b98639485ad0d2a089167731166c72d4fcc49a1d4d30fc4" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.62.1"/>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
  <changelog author="olaf@aepfle.de" date="1538049600">- Avoid undefined behavior in IPC fd-passing code with
  mozilla-bmo1436242.patch (boo#1094767, bmo#1436242)</changelog>
  <changelog author="astieger@suse.com" date="1538481600">- Mozilla Firefox 60.2.2esr:
  MFSA 2018-24
  * CVE-2018-12386 (bsc#1110506, bmo#1493900)
    Type confusion in JavaScript allowed remote code execution
  * CVE-2018-12387 (bsc#1110507, bmo#1493903)
    Array.prototype.push stack pointer vulnerability may enable
    exploits in the sandboxed content process</changelog>
  <changelog author="astieger@suse.com" date="1540296000">- Mozilla Firefox 60.3.0esr:
  * Various stability and regression fixes
  MFSA 2018-27 bsc#1112852
  * CVE-2018-12392 bmo#1492823
    Crash with nested event loops
  * CVE-2018-12393 bmo#1495011
    Integer overflow during Unicode conversion while loading
    JavaScript
  * CVE-2018-12395 bmo#1467523
    WebExtension bypass of domain restrictions through header
    rewriting
  * CVE-2018-12396 bmo#1483602
    WebExtension content scripts can execute in disallowed
    contexts
  * CVE-2018-12397 bmo#1487478
    WebExtension local file access vulnerability
  * CVE-2018-12389 bmo#1498460, bmo#1499198
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 bmo#1487098 bmo#1487660 bmo#1490234 bmo#1496159
    bmo#1443748 bmo#1496340 bmo#1483905 bmo#1493347 bmo#1488803
    bmo#1498701 bmo#1498482 bmo#1442010 bmo#1495245 bmo#1483699
    bmo#1469486 bmo#1484905 bmo#1490561 bmo#1492524 bmo#1481844
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1544443200">- Mozilla Firefox 60.4.0esr:
  * Updated list of currency codes to include Unidad Previsional (UYW)
    (bmo#1499028)
  MFSA 2018-30 (bsc#1119105)
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
- requires NSS &gt;= 3.36.6</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1547035200">- Add patch to fix armv7 build (boo#1121255):
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548244800">- Mozilla Firefox 60.5.0esr
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS &gt;= 3.36.7
- rebased patches
- removed obsolete patch:
  mozilla-no-stdcxx-check.patch</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550059200">- Mozilla Firefox 60.5.1esr (bsc#1125330)
  MFSA 2019-05
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
- increased disk space requirement to 20G for build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1550836800">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1552996800">- Mozilla Firefox 60.6.0esr
  MFSA 2019-08 (bsc#1129821)
  * CVE-2019-9790 bmo#1525145
    Use-after-free when removing in-use DOM elements
  * CVE-2019-9791 bmo#1530958
    Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  * CVE-2019-9792 bmo#1532599
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * CVE-2019-9793 bmo#1528829
    Improper bounds checks when Spectre mitigations are disabled
  * CVE-2019-9794 bmo#1530103
    Command line arguments not discarded during execution
  * CVE-2019-9795 bmo#1514682
    Type-confusion in IonMonkey JIT compiler
  * CVE-2019-9796 bmo#1531277
    Use-after-free with SMIL animation controller
  * CVE-2018-18506 bmo#1503393
    Proxy Auto-Configuration file can define localhost access to be proxied
  * CVE-2019-9788 bmo#1518001 bmo#1521304 bmo#1521214 bmo#1506665 bmo#1516834
    bmo#1518774 bmo#1524755 bmo#1523362 bmo#1524214 bmo#1529203
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553256000">- Mozilla Firefox 60.6.1esr
  MFSA 2019-10 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557057600">- Mozilla Firefox 60.6.2esr (boo#1134126)
  * fix extension certificate chain
    https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1557144000">- Add patch to fix build using rust-1.33:
  * mozilla-bmo1519629.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1557316800">- Mozilla Firefox 60.6.3esr (boo#1134126)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set (bmo#1549249)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1558612800">- Mozilla Firefox 60.7.0esr (boo#1135824)
  MFSA 2019-14
  * CVE-2019-9815 (bmo#1546544)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581) (Windows only)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-9821 (bmo#1539125)
    Use-after-free in AssertWorkerThread
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196) (Windows only)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of hyperlinks
    to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1540166, bmo#1534593, bmo#1546327, bmo#1540136,
    bmo#1538736, bmo#1538042, bmo#1535612, bmo#1499719, bmo#1499108,
    bmo#1538619, bmo#1535194, bmo#1516325, bmo#1542324, bmo#1542097,
    bmo#1532465, bmo#1533554, bmo#1541580)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1560945600">- Mozilla Firefox 60.7.1esr
  MFSA 2019-18 (boo#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1561032000">- Mozilla Firefox 60.7.2esr
  MFSA 2019-19 (boo#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1562587200">- Mozilla Firefox 60.8.0esr
  * requires &gt;= NSS 3.36.8
  MFSA 2019-22 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious languagepack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having the
    same-origin
  * CVE-2019-11709 (bmo#1547266, bmo#1540759, bmo#1548822, bmo#1550498
    bmo#1515052, bmo#1539219, bmo#1547757, bmo#1550498, bmo#1533522)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8</changelog>
</package>
<package pkgid="fc9df83ecd96ec48ed72635a0061e220fd06a5ed7823281a801df9f84a13e2d2" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="68.1.0" rel="lp150.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1544788800">- Depend on branding package version &gt;= 60.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545307200">- Revert dependency for branding package back to &gt;= 60 due to dependency
  issues.</changelog>
  <changelog author="cgrobertson@suse.com" date="1547726400">- Fix for language pack build error (bsc#1120374)</changelog>
  <changelog author="cgrobertson@suse.com" date="1548849600">- Update to Firefox ESR 60.5
  MFSA 2019-02 (bsc#1122983)
  * CVE-2018-18501 (bmo#1460619, bmo#1502871, bmo#1512450,
    bmo#1513201, bmo#1516514, bmo#1516738, bmo#1517542)
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  * CVE-2018-18500 (bmo#1510114)
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 (bmo#1087565, bmo#1497749)
    Privilege escalation through IPC channel messages
- Removed obsolete patches:
    [mozilla-no-stdcxx-check.patch] Applied upstream
    [mozilla-s390-nojit.patch] Applied upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1550059200">- Update to Firefox ESR 60.5.1
  MFSA-2019-05 (bsc#1125330)
  * CVE-2018-18356 (bmo#1525817)
    A use-after-free vulnerability in the Skia library can occur when
    creating a path, leading to a potentially exploitable crash.
  * CVE-2019-5785 (bmo#1525433)
    An integer overflow vulnerability in the Skia library can occur
    after specific transform operations, leading to a potentially
    exploitable crash.
  * CVE-2018-18335 (bmo#1525815)
    A buffer overflow vulnerability in the Skia library can occur with
    Canvas 2D acceleration on macOS. This issue was addressed by
    disabling Canvas 2D acceleration in Firefox ESR.  Note: this does
    not affect other versions and platforms where Canvas 2D
    acceleration is already disabled by default.</changelog>
  <changelog author="cgrobertson@suse.com" date="1551182400">- Mozilla Firefox 60.5.2esr:
  * Fix a frequent crash when reading various Reuters news articles
    (bmo#1505844)</changelog>
  <changelog author="cgrobertson@suse.com" date="1552996800">- update to Firefox ESR 60.6 (bsc#1129821)
  * MFSA 2019-08/CVE-2018-18506
    (bmo#1503393)
    Proxy Auto-Configuration file can define localhost access to
    be proxied
  * MFSA 2019-08/CVE-2019-9801
    (bmo#1527717)
    Windows programs that are not 'URL Handlers' are exposed to
    web content
  * MFSA 2019-08/CVE-2019-9788
    (bmo#1506665, bmo#1516834, bmo#1518001, bmo#1518774,
    bmo#1521214, bmo#1521304, bmo#1523362, bmo#1524214,
    bmo#1524755, bmo#1529203)
    Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  * MFSA 2019-08/CVE-2019-9790
    (bmo#1525145)
    Use-after-free when removing in-use DOM elements
  * MFSA 2019-08/CVE-2019-9791
    (bmo#1530958)
    Type inference is incorrect for constructors entered through
    on-stack replacement with IonMonkey
  * MFSA 2019-08/CVE-2019-9792
    (bmo#1532599)
    IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  * MFSA 2019-08/CVE-2019-9793
    (bmo#1528829)
    Improper bounds checks when Spectre mitigations are disabled
  * MFSA 2019-08/CVE-2019-9794
    (bmo#1530103)
    Command line arguments not discarded during execution
  * MFSA 2019-08/CVE-2019-9795
    (bmo#1514682)
    Type-confusion in IonMonkey JIT compiler
  * MFSA 2019-08/CVE-2019-9796
    (bmo#1531277)
    Use-after-free with SMIL animation controller
- Fix for [bsc#1127987] MozillaFirefox-translations-common causing
    error on update</changelog>
  <changelog author="cgrobertson@suse.com" date="1553256000">- update to Firefox ESR 60.6.1 (bsc#1130262)
  * MFSA 2019-10/CVE-2019-9813
    (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations
  * MFSA 2019-10/CVE-2019-9810
    (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information</changelog>
  <changelog author="cgrobertson@suse.com" date="1553688000">- Fixed translations provides</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555588800">- Update BuildRequires rust &gt;= 1.30 from 1.24
  * Upstream Firefox ESR presumes rust version stable at release (1.24).
    SUSE currently uses improved packaging for rust &gt;= 1.30.
  * boo#1130694 rust 1.33.0 breaks Firefox and Thunderbird
    due to missing macro comment docs in Firefox rust sources
    bmo#1539901 ESR 60 build fails with Rust 1.33 due to missing documentation on macros in stylo
    bmo#1519629 Stylo fails with --enable-warnings-as-errors using Rust 1.33
  * Fix build using RUSTFLAGS="--cap-lints allow"
    Preferred alternative to patching and revendoring stylo rust crates
    Revisit with intent to remove in next Firefox ESR 68.0 2019-07-09</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1557144000">- update to 60.6.2 (bsc#1134126)
  * Repaired certificate chain to re-enable web extensions that
    had been disabled.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557403200">- update to 60.6.3 (bmo#1549249)
  * Further improvements to re-enable web extensions which had been
    disabled for users with a master password set.</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1557835200">- Enable Firefox to build with Rust &gt;= 1.30 with fix. See below.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Desktop:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558440000">- update to Firefox ESR 60.7 (bsc#1135824)
  * Font and date adjustments to accommodate the new Reiwa era
    in Japan
  * MFSA 2019-14/CVE-2019-9817
    (bmo#1540221)
    Stealing of cross-domain images using canvas
  * MFSA 2019-14/CVE-2019-9800
    (bmo#1499108, bmo#1499719, bmo#1516325, bmo#1532465,
    bmo#1533554, bmo#1534593, bmo#1535194, bmo#1535612,
    bmo#1538042, bmo#1538619, bmo#1538736, bmo#1540136,
    bmo#1540166, bmo#1541580, bmo#1542097, bmo#1542324,
    bmo#1546327)
    Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  * MFSA 2019-14/CVE-2019-9816
    (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * MFSA 2019-14/CVE-2019-9815
    (bmo#1546544, bmo#https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * MFSA 2019-14/CVE-2019-11698
    (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * MFSA 2019-14/CVE-2019-11692
    (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * MFSA 2019-14/CVE-2019-11693
    (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * MFSA 2019-14/CVE-2019-7317
    (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * MFSA 2019-14/CVE-2019-9820
    (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * MFSA 2019-14/CVE-2019-9818
    (bmo#1542581)
    Use-after-free in crash generation server
  * MFSA 2019-14/CVE-2019-11691
    (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * MFSA 2019-14/CVE-2019-9819
    (bmo#1532553)
    Compartment mismatch with fetch API
  * MFSA 2019-14/CVE-2019-11694
    (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560254400">- Fix broken language plugins (bsc#1137792)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945600">- Mozilla Firefox Firefox 60.7.1
  MFSA 2019-18 (bsc#1138614)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
- Added the new Mozilla's GPG key with subkey fingerprint
  097B 3130 77AE 62A0 2F84 DA4D F1A6 668F BB7D 572E, expiring on
  2021-05-29 to the mozilla.keyring file</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560945601">- Build Firefox with gcc instead of clang (bsc#1138688)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1568030400">- Mozilla Firefox ESR 68.1
  Resolves the following bigendian s390x issues:
  * [bsc#1109465] Latest Firefox update not released for s390x
  * [bsc#1117473] Firefox segmentation fault on s390vsl082
  * [bsc#1123482] openQA test fails in firefox - firefox doesn't start
  * [bsc#1124525] Firefox is core dumping on SLES15 s390x
  * [bsc#1133810] Firefox: Segmentation fault (core dumped)
  MFSA 2019-26 (bsc#1149323)
  * CVE-2019-11751 (bmo#1572838)
    Malicious code execution through command line parameters
  * CVE-2019-11746 (bmo#1564449)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11736 (bmo#1551913, bmo#1552206)
    File manipulation and privilege escalation in Mozilla
    Maintenance Service
  * CVE-2019-11753 (bmo#1574980)
    Privilege escalation with Mozilla Maintenance Service in
    custom Firefox installation location
  * CVE-2019-11752 (bmo#1501152)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-9812 (bmo#1538008, bmo#1538015)
    Sandbox escape through Firefox Sync
  * CVE-2019-11743 (bmo#1560495,
    bmo#https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11748 (bmo#1564588)
    Persistence of WebRTC permissions in a third party context
  * CVE-2019-11749 (bmo#1565374)
    Camera information available without prompting using
    getUserMedia
  * CVE-2019-11750 (bmo#1568397)
    Type confusion in Spidermonkey
  * CVE-2019-11738 (bmo#1452037)
    Content security policy bypass through hash-based sources in
    directives
  * CVE-2019-11747 (bmo#1564481)
    'Forget about this site' removes sites from pre-loaded HSTS
    list
  * CVE-2019-11735 (bmo#1561404, bmo#1561484, bmo#1561912,
    bmo#1565744, bmo#1568047, bmo#1568858, bmo#1570358)
    Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  * CVE-2019-11740 (bmo#1563133, bmo#1573160)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and
    Firefox ESR 60.9
- Mozilla Firefox ESR 68.0.2
  * Fixed: Fixed a bug causing some special characters to be cut
    off from the end of the search terms when searching from the
    URL bar (bmo#1560228)
  * Fixed: Allow fonts to be loaded via file:// URLs when opening
    a page locally (bmo#1565942)
  * Fixed: Printing emails from the Outlook web app no longer
    prints only the header and footer (bmo#1567105)
  * Fixed: Fixed a bug causing some images not to be displayed on
    reload, including on Google Maps (bmo#1565542)
  * Fixed: Fixed an error when starting external applications
    configured as URI handlers (bmo#1567614)
  * Fixed: Security fixes
- MFSA 2019-24 (bsc#1145665)
  * CVE-2019-11733 (bmo#1565780)
    Stored passwords in 'Saved Logins' can be copied without
    master password entry
- Mozilla Firefox ESR 68.0.1
  * macOS releases are now signed by the Apple notary service,
    allowing Firefox to properly run on macOS 10.15 Beta releases
  * Fixed missing Full Screen button when watching videos in full
    screen mode on HBO GO (bmo#1562837)
  * Fixed a bug causing incorrect messages to appear for some
    locales when sites try to request the use of the Storage
    Access API (bmo#1558503)
  * Users in Russian regions may have their default search engine
    changed (bmo#1565315)
  * Built-in search engines in some locales do not function
    correctly (bmo#1565779)
  * SupportMenu policy doesn't always work (bmo#1553290)
  * Allow the new ExtensionSettings policy to work with GPO on
    Windows (bmo#1553586)
  * Allow the privacy.file_unique_origin pref to be controlled by
    policy (bmo#1563759)
- Mozilla Firefox ESR 68.0
  * Dark mode in reader view
  * Improved extension security and discovery
  * Cryptomining and fingerprinting protections are added to strict
    content blocking settings in Privacy &amp; Security preferences
  * Camera and microphone access now require an HTTPS connection
  MFSA 2019-21 (bsc#1140868)
  * CVE-2019-9811 (bmo#1523741, bmo#1538007, bmo#1539598,
    bmo#1539759, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11718 (bmo#1408349)
    Activity Stream writes unsanitized content to innerHTML
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1507696, bmo#1510345, bmo#1533842,
    bmo#1535482, bmo#1535848, bmo#1537692, bmo#1540590,
    bmo#1544180, bmo#1547472, bmo#1547760, bmo#1548611,
    bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-bmo1436242.patch
  * mozilla-bmo256180.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- removed workaround-patch for build memory consumption on i586;
  other mitigations meanwhile introduced (mainly parallelity)
  will be sufficient
  * mozilla-reduce-files-per-UnifiedBindings.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to enable PGO for x86_64.
  * firefox-add-kde.js-in-order-to-survive-PGO-build.patch
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch</changelog>
</package>
<package pkgid="0f4e05d61b890500dfd110d690fc974c6f8e1753865b7af2f015dd9fc5c1f5d0" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="37d4b5f340e5eb338c7595a8cfaa0211e6c1d369eaab3c709587e12539bb0411" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="034fcceea9e5ad321c8134659714f5b093b209cb02f604550962d3b11bcd1408" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="f55b566d8a479a1cb33151f7f1505806e46e3329cbf5bc618b9840fe191b70be" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="9ff7375914749bec820238b19ae436b95c377a3d408aa6229b234aeb4a5bf770" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="10d4e9155c6a7413a3df55cf9362d5bbb54c64610aa61f19dd98a443e05a538f" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="5b6109e9e855d9932514da43ddf2283809ec93d4ea879f1ca5fd6415cd8cdcb7" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.30.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="7700c34218be553b8f0b509f82916c1e82df759f32bfe4b3a5ffc0a19bea3f7c" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.6.1" rel="lp150.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="f1b69fbd66f59b5177a195bb1099ad18a4af8869bf2939369198ae44114226d7" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="c1f801e03e7c8c7e373e5566aaaa40b11fd5485960ee36757f3da88dfceb274e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.0" rel="lp150.3.41.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="2258fe317a3defca1f5e283b214be18d5eb4afba6d4184e0b4c2a65dfe3d1a5d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.41.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="cd7e2e32d1a9622a76f242966d5f40313d67f4c786152f81a79d539a3fe4178e" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.7.2" rel="lp150.3.45.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="8cdc386b98628a3ee7661ae498c963b3a676852b1109f1a4e652b7256e6f3f81" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.45.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="451682f89430ddb5cb6ab40e4fad1b2c97844254d689e960473f5c92aa9d938d" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.8.0" rel="lp150.3.48.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="a469a872243c0dc2dccf24872c42a29e67347d6bbb3457d5ce5090885121f91d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.48.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="e9f3fab06c9a6b6ba51635546db354729d54b09facffd1a8bceec5b7b6a4ef8d" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="68.1.1" rel="lp150.3.51.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="166ddc98c9f2c2c0ea2a856338376921a1fe0ae24836e87343ea88804b76b571" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp150.3.51.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="36584570021723e6216430f620febf15e169cd6bfc9dff635fa166029fca1c32" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="c111892df13ff2aa20314117fc3539be0ce2c214688f4ff701fd8101353851f4" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="72d8793908c5ec22d082e0a441ba02aedb8ef5ba4525bcc38984a3cc668629f9" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="e8e70781876015b8de0fe67ef84021aaaf578cb034804c89baacdac1f16dc177" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="220dfa4105e086fb645fd82bcf3ac6b0aa013bdd4f0fac9c080721be1d94c92f" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="a7dc6fe9779d59cfc368020d45b54f9c7fad131468e7f370a48c93c1506ef375" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="a0875a71f5ca10092c7bde5bebae042a8082fb07f868b053c3b7f09280643fd5" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.30.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="67593b1275fc72c36ec3a86fc691967af71b431ca4448b8bd518fb19806ca54d" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="c293b44b6355349c3a76d83426bc7e28ed106bb07f6ae52e21f3fb475d9edcef" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.41.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="fe74dbe2e491f222bbdeab7af667ad4a1e8b5de88d2a75f58b94e622b8f50e21" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.45.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="4724f04ea10b2f64a540b03d3199e075f7249a0ad7307385e89e1ba912aedeb5" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.48.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="54345e1202dfb90d4708240913bcac0bb9ba5206e330bd15b0dfaec9a2a44416" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp150.3.51.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="2d91a5a9f6ea446a3a73e12a3b43ae9bb6ac9fcfa7af21c279a8d4709a722c14" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="11a4573c85a7354f2bf5a0cb8da03808d04d680be7d6f886618557165d3547a1" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="66f52212e4c1bcd6083e2aea092ce8b8d899838e654fcd74942517e99241c349" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="7d204f63bbe1ac8f83c87e7ea48f82d84b05f7e735727845e73e6a71c5ef1fb3" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="4222518057d2289f1828a9da28252d26e19c60b806277836cfb4fbb8fed64769" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="d93f89490dc68b6db53582f2ca0bfe2b4155767d079272034ba8597532a4a1f0" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="48d034dcad001dd3ddcf7f44baadfa14431d6edaaef26f318ad32985272b8143" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="841e3350abbe3e93f6e94a7588e2730bcf3d1b419c23986884edd471fbb37708" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="89b6c69ce1c902330f06163233cc51d4fddb47f501d8bd36f70bbe3c6a69916d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="a4b45d2c8ed3cad4659327e19a068ef3241fb34908373d1b708068c66a4c817d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.30.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="502495543a5c9712ef991931625b86d13b9167d5acc37d3901ce96e9a25223b0" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="92d256754ba921c78dc9462981299fd2add5b7ba3b510ed6abcdbab380b44844" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.41.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="613b023dd5a3dbc6f2b885529005739ea99c7fa4b217d210a16e8d876b4cd1a9" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.45.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="fa6c1300c62c03e176ce5fdebca4f2cf1a3b85d19cdc54a0c2893529dcffb042" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.48.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="3dab446718d2939fbae91c1808c2febd2940cde19be3916d0a0ddb684a0254da" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp150.3.51.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="a3db4e673ab0ae7c572ca448361854fb7a7388136abeb9d290c37ffac057ff85" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="1eaeb73546d575730cd247e5fc8085d60321b8d9cd7a1deade07e83e2226226a" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="78406b91f7dfc4294645f45e2f278c568ccc4e1bd1937d7e78eb3bcb9ffeece5" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="dc377fc49c509155132d29d1b1fd699b46fd6ff9e741196be9a1ecbc77451e98" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="b6696c1c904bed9cc66a5e921f8d836694d04c7565e0dbdbc9634251b80bca58" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.19.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
</package>
<package pkgid="96aa74288e03d523366453c39ff8f02b1866adf88b9f095cd63804966ec84744" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.3.0" rel="lp150.3.25.1"/>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
</package>
<package pkgid="4e081bed474019bc96b874ff93e9735739f968358726af9d3648f2183dbac1dc" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.5.1" rel="lp150.3.30.1"/>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
</package>
<package pkgid="b1cc709d5c5fd9d34a42b809355ee2299af14b0d95c8f9c2900505e9cb7c9ded" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.6.1" rel="lp150.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536667200">- Update file list since minidump-analyzer is only available when
  crashreporter is enabled</changelog>
  <changelog author="wr@rosenauer.org" date="1538481600">- update to Thunderbird 60.2.1:
  * Calendar: Default values for the first day of the week and
    working days are now derived from the selected datetime
    formatting locale
  * Calendar: Switch to a Photon-style icon set for all platforms
  * Fix multiple requests for master password when Google Mail or
    Calendar OAuth2 is enabled
  * Fix scrollbar of the address entry auto-complete popup
  * Fix security info dialog in compose window not showing
    certificate status
  * Fix links in the Add-on Manager's search results and theme
    browsing tabs that opened in external browser
  * Fix localization not showing the localized name for the
    "Drafts" and "Sent" folders for certain IMAP providers
  * Fix replying to a message with an empty subject which
    inserted Re: twice
  * Fix spellcheck marks disappeaing erroneously for words with
    an apostrophe
  * Calendar: First day of the week can now be set
  * Calendar: Several fixes related to cutting/deleting of events
    and email schedulin
  * Fix date display issues (bsc#1109379)
  * Fix start-up crash due to folder name with special characters
    (bsc#1107772)
- Security fixes for the Mozilla platform picked up from 60.1 and
  60.2 (Firefox ESR releases). In general, these flaws
  cannot be exploited through email in Thunderbird because
  scripting is disabled when reading mail, but are potentially
  risks in browser or browser-like contexts (MFSA 2018-25):
  * CVE-2018-12377 (bsc#1107343, bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bsc#1107343, bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521,bsc#1107343)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
  * CVE-2018-12385 (bsc#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (bsc#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords</changelog>
  <changelog author="meissner@suse.com" date="1539345600">- provide / obsolete MozillaThunderbird-devel as this is no longer
  shipped to allow migration scenarios</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
</package>
<package pkgid="8a8892ca532644c881265264017295f2c8d7f0673dc2736df937ff91e536e660" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.0" rel="lp150.3.41.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Add memory-constraints to avoid OOM errors</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468801">- Add patch to fix build on armv7:
  * mozilla-bmo1463035.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468802">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
</package>
<package pkgid="4616b25c33a3ddd56aab978550d76f15e74b3fe6bf275d94a0ec9a16d3db1f31" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.7.2" rel="lp150.3.45.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1540468800">- Update _constraints for armv6/7</changelog>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
</package>
<package pkgid="0b10cd751d2a9c579cea9b967da3b229d85ba18fc5d4f090b99381bf9019f2e0" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.8.0" rel="lp150.3.48.1"/>
  <changelog author="wr@rosenauer.org" date="1540900800">- update to Thunderbird 60.3.0
  * various theme fixes
  * Shift+PageUp/PageDown in Write window
  * Gloda attachment filtering
  * Mailing list address auto-complete enter/return handling
  * Thunderbird hung if HTML signature references non-existent image
  * Filters not working for headers that appear more than once
- Security fixes for the Mozilla platform picked up from 60.3
  (Firefox ESR release). In general, these flaws cannot be exploited
  through email in Thunderbird because scripting is disabled when
  reading mail, but are potentially risks in browser or browser-like
  contexts (MFSA 2018-28) (bsc#1112852)
  * CVE-2018-12391 (bmo#1478843) (Android only)
    HTTP Live Stream audio data is accessible cross-origin
  * CVE-2018-12392 (bmo#1492823)
    Crash with nested event loops
  * CVE-2018-12393 (bmo#1495011)
    Integer overflow during Unicode conversion while loading JavaScript
  * CVE-2018-12389 (bmo#1498460, bmo#1499198)
    Memory safety bugs fixed in Firefox ESR 60.3
  * CVE-2018-12390 (bmo#1487098, bmo#1487660, bmo#1490234, bmo#1496159,
    bmo#1443748, bmo#1496340, bmo#1483905, bmo#1493347, bmo#1488803,
    bmo#1498701, bmo#1498482, bmo#1442010, bmo#1495245, bmo#1483699,
    bmo#1469486, bmo#1484905, bmo#1490561, bmo#1492524, bmo#1481844)
    Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3</changelog>
  <changelog author="astieger@suse.com" date="1542283200">- Mozilla Thunderbird 60.3.1:
  * Double-clicking on a word in the Write window sometimes
    launched the Advanced Property Editor or Link Properties dialog
  * Fixe Cookie removal
  * "Download rest of message" was not working if global inbox was
    used
  * Fix Encoding problems for users (especially in Poland) when a
    file was sent via a folder using "Sent to &gt; Mail recipient"
    due to a problem in the Thunderbird MAPI interface
  * According to RFC 4616 and RFC 5721, passwords containing
    non-ASCII characters are encoded using UTF-8 which can lead to
    problems with non-compliant providers, for example
    office365.com. The SMTP LOGIN and POP3 USER/PASS
    authentication methods are now using a Latin-1 encoding again
    to work around this issue
  * Fix shutdown crash/hang after entering an empty IMAP password</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543492800">- Mozilla Thunderbird 60.3.2
  * Encoding problems when exporting address books or messages using
    the system charset. Messages are now always exported using the
    UTF-8 encoding
  * If the "Date" header of a message was invalid, Jan 1970 or Dec 1969
    was displayed. Now using date from "Received" header instead.
  * Body search/filtering didn't reliably ignore content of tags
  * Inappropriate warning "Thunderbird prevented the site
    (addons.thunderbird.net) from asking you to install software on
    your computer" when installing add-ons
  * Incorrect display of correspondents column since own email
    address was not always detected
  * Spurious &amp;#xA; (encoded newline) inserted into drafts and sent email</changelog>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
</package>
<package pkgid="e3b145bcdf66dad53e923c0b41b38b84717233906c77e88cacd9b973523aa572" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="68.1.1" rel="lp150.3.51.1"/>
  <changelog author="astieger@suse.com" date="1543838400">- Fix build on openSUSE Leap 15.x w.r.t. rust-std requirement</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1543924800">- Mozilla Thunderbird 60.3.3
  * Thunderbird 60 will migrate security databases (key3.db, cert8.db
    to key4.db, cert9.db). Thunderbird 60.3.2 and earlier contained a
    fault that potentially deleted saved passwords and private certificate
    keys for users using a master password. Version 60.3.3 will prevent
    the loss of data; affected users who have already upgraded to version
    60.3.2 or earlier can restore the deleted key3.db file from backup
    to complete the migration.
  * Address book search and auto-complete slowness introduced in
    Thunderbird 60.3.2
  * Plain text markup with * for bold, / for italics, _ for underline
    and | for code did not work when the enclosed text contained
    non-ASCII characters
  * While composing a message, a link not removed when link location
    was removed in the link properties panel</changelog>
  <changelog author="astieger@suse.com" date="1545393600">- Mozilla Thunderbird 60.4.0:
  * New WebExtensions FileLink API to facilitate add-ons
  * Fix decoding problems for messages with less common charsets
    (cp932, cp936)
  * New messages in the drafts folder (and other special or virtual
    folders) will no longer be included in the new messages
    notification
  MFSA 2018-31
  * CVE-2018-17466 bmo#1488295
    Buffer overflow and out-of-bounds read in ANGLE library with
    TextureStorage11
  * CVE-2018-18492 bmo#1499861
    Use-after-free with select element
  * CVE-2018-18493 bmo#1504452
    Buffer overflow in accelerated 2D canvas with Skia
  * CVE-2018-18494 bmo#1487964
    Same-origin policy violation using location attribute and
    performance.getEntries to steal cross-origin URLs
  * CVE-2018-18498 bmo#1500011
    Integer overflow when calculating buffer sizes for images
  * CVE-2018-12405 bmo#1494752 bmo#1503326 bmo#1505181 bmo#1500759
    bmo#1504365 bmo#1506640 bmo#1503082 bmo#1502013 bmo#1510471
    Memory safety bugs fixed in Firefox 64, 60.4, and Thunderbird 60.4
- requires NSS 3.36.6</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1548417600">- Mozilla Thunderbird 60.5.0:
  * FileLink provider WeTransfer to upload large attachments
  * Thunderbird now allows the addition of OpenSearch search engines
    from a local XML file using a minimal user inferface: [+] button
    to select a file an add, [-] to remove.
  * More search engines: Google and DuckDuckGo available by default
    in some locales
  * During account creation, Thunderbird will now detect servers
    using the Microsoft Exchange protocol. It will offer the
    installation of a 3rd party add-on (Owl) which supports that
    protocol.
  * Thunderbird now compatible with other WebExtension-based
    FileLink add-ons like the Dropbox add-on
  MFSA 2019-03 (bsc#1122983)
  * CVE-2018-18500 bmo#1510114
    Use-after-free parsing HTML5 stream
  * CVE-2018-18505 bmo#1497749
    Privilege escalation through IPC channel messages
  * CVE-2016-5824 bmo#1275400
    DoS (use-after-free) via a crafted ics file
  * CVE-2018-18501 bmo#1512450 bmo#1517542 bmo#1513201 bmo#1460619
    bmo#1502871 bmo#1516738 bmo#1516514
    Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
- requires NSS 3.36.7
- removed obsolete patch
  mozilla-no-stdcxx-check.patch
- rebased patches</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1550145600">- Mozilla Thunderbird 60.5.1
  * CalDav access to some servers not working
  MFSA 2019-06 (bsc#1125330)
  * CVE-2018-18356 bmo#1525817
    Use-after-free in Skia
  * CVE-2019-5785 bmo#1525433
    Integer overflow in Skia
  * CVE-2018-18335 bmo#1525815
    Buffer overflow in Skia with accelerated Canvas 2D
  * CVE-2018-18509 bmo#1507218
    S/MIME signature spoofing</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551009600">- Mozilla Thunderbird 60.5.2
  * UTF-8 support for MAPISendMail
  * Problem with S/MIME certificate verification when receiving email
    from Outlook (issue introduced in version 60.5.1)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1551960000">- Mozilla Thunderbird 60.5.3
  * fixed a regression on the Windows platform:
    Problem when using "Send to &gt; Mail recipient" on Windows</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553083200">- Mozilla Thunderbird 60.6.0
  * Calendar: Can't create repeating event with end date when using
    certain time zones, for example Europe/Minsk
  * some minor bugfixes
  * using 60.6.0esr Mozilla platform (bsc#1129821)</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1553515200">- Mozilla Thunderbird 60.6.1
  MFSA 2019-12 (bsc#1130262)
  * CVE-2019-9810 (bmo#1537924)
    IonMonkey MArraySlice has incorrect alias information
  * CVE-2019-9813 (bmo#1538006)
    Ionmonkey type confusion with __proto__ mutations</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008000">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558008001">- Merge changes from MozillaFirefox
  * Merge spec-file update "Enable Firefox to build with
    Rust &gt;= 1.30 with fix" (revision 28)
  * Merge create-tar.sh to now download tar-balls for thunderbird
    directly as is done with Firefox</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558094400">- Sync with Devel:Mozilla:*:next</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558353600">- Reactivate s390x
  * Merged big endian patches from MozillaFirefox to make
    Thunderbird compile under s390x again (see below)
  * Added ac_option --with-system-icu (same as Firefox, but in
    this case only for big endian machines as not to break
    existing archs)
- Added patches:
    [mozilla-bmo1005535.patch]
    [mozilla-bigendian_bit_flags_alias.patch]
    [mozilla-s390-bigendian.patch]
    [mozilla-s390-context.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1558699200">- Mozilla Firefox Thunderbird 60.7
  MFSA 2019-15
  * CVE-2019-9815 (bmo#1546544, https://mdsattacks.com/)
    Disable hyperthreading on content JavaScript threads on macOS
  * CVE-2019-9816 (bmo#1536768)
    Type confusion with object groups and UnboxedObjects
  * CVE-2019-9817 (bmo#1540221)
    Stealing of cross-domain images using canvas
  * CVE-2019-9818 (bmo#1542581)
    Use-after-free in crash generation server
  * CVE-2019-9819 (bmo#1532553)
    Compartment mismatch with fetch API
  * CVE-2019-9820 (bmo#1536405)
    Use-after-free of ChromeEventHandler by DocShell
  * CVE-2019-11691 (bmo#1542465)
    Use-after-free in XMLHttpRequest
  * CVE-2019-11692 (bmo#1544670)
    Use-after-free removing listeners in the event listener
    manager
  * CVE-2019-11693 (bmo#1532525)
    Buffer overflow in WebGL bufferdata on Linux
  * CVE-2019-7317 (bmo#1542829)
    Use-after-free in png_image_free of libpng library
  * CVE-2019-9797 (bmo#1528909)
    Cross-origin theft of images with createImageBitmap
  * CVE-2018-18511 (bmo#1526218)
    Cross-origin theft of images with ImageBitmapRenderingContext
  * CVE-2019-11694 (bmo#1534196)
    Uninitialized memory memory leakage in Windows sandbox
  * CVE-2019-11698 (bmo#1543191)
    Theft of user history data through drag and drop of
    hyperlinks to and from bookmarks
  * CVE-2019-5798 (bmo#1535518)
    Out-of-bounds read in Skia
  * CVE-2019-9800 (bmo#1499108, bmo#1499719, bmo#1516325,
    bmo#1532465, bmo#1533554, bmo#1534593, bmo#1535194,
    bmo#1535612, bmo#1538042, bmo#1538619, bmo#1538736,
    bmo#1540136, bmo#1540166, bmo#1541580, bmo#1542097,
    bmo#1542324, bmo#1546327)
    Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and
    Thunderbird 60.7
- Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560427200">- Fix security vulnerabilities in Thunderbird 60.7 (bsc#1137595)
  * CVE-2019-11706 (bmo#1555646)
  * CVE-2019-11705 (bmo#1553808)
  * CVE-2019-11704 (bmo#1553814)
  * CVE-2019-11703 (bmo#1553820)
- Added patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
</package>
<package pkgid="fd29f2ecc03dc58e4473edcd063611753d461a2868e8b1a476c168ca1d829a34" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.10.6" rel="lp150.4.12.1"/>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1568635200">- Modify nfs script: Only mount/unmount when the file type is nfs
  (bsc#1074074).
  (Backport of Factory revision 335, also fixes boo#1146935)</changelog>
</package>
<package pkgid="2dced587eda946a7525ed49f5e64db62b53491b4820bc08cf2cc57d5784d29bd" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.12.1"/>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1568635200">- Modify nfs script: Only mount/unmount when the file type is nfs
  (bsc#1074074).
  (Backport of Factory revision 335, also fixes boo#1146935)</changelog>
</package>
<package pkgid="a637c6330d9cd5d5924510c7c99c35e65eabca7748560d66ddbc44e1ca22b178" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.10.6" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.4:
  + No longer install NetworkManager-wait-online.service in
    network-online.target.wants directory (rh#1455704).
  + Fix nmcli device connect wifi for APs that support both
    WPA-PSK and WPA-EAP (rh#1492064).
  + Fix crash unregistering object manager in libnm on restart of
    NetworkManager.
  + Improve handling externally managed slaves devices.
  + Don't reset MAC address of software devices to fake permanent
    address.
  + For dhclient use "timeout" option in configuration file,
    instead of the command line option which is only supported by
    downstream.
  + Perform the public-suffix check only for the hostname-derived
    domain.
  + Fix memory leak in connectivity check.
  + Better restore device managed state on rollback of checkpoint.
  + Skip addition of default-route if it already exists.
  + Bug fix detecting error condition when deleting route in
    platform.
- Drop NM-dhcp-improve-parsing-interface-statement.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355).</changelog>
</package>
<package pkgid="516a56c8ab39a18e149603e46bbc5b0d5be488e2c6b43783716a29990405b52f" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.4:
  + No longer install NetworkManager-wait-online.service in
    network-online.target.wants directory (rh#1455704).
  + Fix nmcli device connect wifi for APs that support both
    WPA-PSK and WPA-EAP (rh#1492064).
  + Fix crash unregistering object manager in libnm on restart of
    NetworkManager.
  + Improve handling externally managed slaves devices.
  + Don't reset MAC address of software devices to fake permanent
    address.
  + For dhclient use "timeout" option in configuration file,
    instead of the command line option which is only supported by
    downstream.
  + Perform the public-suffix check only for the hostname-derived
    domain.
  + Fix memory leak in connectivity check.
  + Better restore device managed state on rollback of checkpoint.
  + Skip addition of default-route if it already exists.
  + Bug fix detecting error condition when deleting route in
    platform.
- Drop NM-dhcp-improve-parsing-interface-statement.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355).</changelog>
</package>
<package pkgid="53d9b29227433a69b64c02fc8d8a0ca610ac8e4546105fc894398ad59552e7af" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.10.6" rel="lp150.4.6.1"/>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
</package>
<package pkgid="38cd05491fff606f5983c7dbbf3086d46b500ae2705c63a7de3893cf646c1797" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.6.1"/>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
</package>
<package pkgid="4c6c63680ecb6c4771c6118ac6906d2af914ad7c91c110a57755af909478c335" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.10.6" rel="lp150.4.9.1"/>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
</package>
<package pkgid="6e6dc54bdf09973525a98bff3e89bccd3feaa1d9e36fb3688a3f4cc29244beb1" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.9.1"/>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
</package>
<package pkgid="40a55e647d2cb2d076b354c188e9522632b37c659c3d731208813a34b6b95085" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.12.1"/>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1568635200">- Modify nfs script: Only mount/unmount when the file type is nfs
  (bsc#1074074).
  (Backport of Factory revision 335, also fixes boo#1146935)</changelog>
</package>
<package pkgid="b9cb969e494b7bd0a8ddf77982919f4fee663ca31d00e5fb1f4918fa254e2833" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.4:
  + No longer install NetworkManager-wait-online.service in
    network-online.target.wants directory (rh#1455704).
  + Fix nmcli device connect wifi for APs that support both
    WPA-PSK and WPA-EAP (rh#1492064).
  + Fix crash unregistering object manager in libnm on restart of
    NetworkManager.
  + Improve handling externally managed slaves devices.
  + Don't reset MAC address of software devices to fake permanent
    address.
  + For dhclient use "timeout" option in configuration file,
    instead of the command line option which is only supported by
    downstream.
  + Perform the public-suffix check only for the hostname-derived
    domain.
  + Fix memory leak in connectivity check.
  + Better restore device managed state on rollback of checkpoint.
  + Skip addition of default-route if it already exists.
  + Bug fix detecting error condition when deleting route in
    platform.
- Drop NM-dhcp-improve-parsing-interface-statement.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355).</changelog>
</package>
<package pkgid="42dcf1714b26e4565d3c4d24eea16c7d221163d3aa41d423dbb6cffaac73d212" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.6.1"/>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
</package>
<package pkgid="5c8be2aa5e8dacbe15cc9f38464e58ec4cbbb191510c55a9c416adfeb081cd0e" name="NetworkManager-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.9.1"/>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
</package>
<package pkgid="d475ec3275506210dca992beeb36dc6232ce15d8014363f4e34f520a4db97b2c" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.12.1"/>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1568635200">- Modify nfs script: Only mount/unmount when the file type is nfs
  (bsc#1074074).
  (Backport of Factory revision 335, also fixes boo#1146935)</changelog>
</package>
<package pkgid="567b2c7289c527b7279aa61668d44761a6d453dad66fb9e8954427eae0490a19" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.4:
  + No longer install NetworkManager-wait-online.service in
    network-online.target.wants directory (rh#1455704).
  + Fix nmcli device connect wifi for APs that support both
    WPA-PSK and WPA-EAP (rh#1492064).
  + Fix crash unregistering object manager in libnm on restart of
    NetworkManager.
  + Improve handling externally managed slaves devices.
  + Don't reset MAC address of software devices to fake permanent
    address.
  + For dhclient use "timeout" option in configuration file,
    instead of the command line option which is only supported by
    downstream.
  + Perform the public-suffix check only for the hostname-derived
    domain.
  + Fix memory leak in connectivity check.
  + Better restore device managed state on rollback of checkpoint.
  + Skip addition of default-route if it already exists.
  + Bug fix detecting error condition when deleting route in
    platform.
- Drop NM-dhcp-improve-parsing-interface-statement.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355).</changelog>
</package>
<package pkgid="a8fcdf9207883e0b87b85c33b9b91fd95c2895cc74902e6737216e7d36a5d047" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.6.1"/>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
</package>
<package pkgid="f156fa8ab9e0979b5149b55c538026972a89da36aed215ac7ada5ea8bf1e091e" name="NetworkManager-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.9.1"/>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
</package>
<package pkgid="d08e6a901f6513b373e57570e4f0c83d433450290825ca19182c755381b90600" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.12.1"/>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1568635200">- Modify nfs script: Only mount/unmount when the file type is nfs
  (bsc#1074074).
  (Backport of Factory revision 335, also fixes boo#1146935)</changelog>
</package>
<package pkgid="1b1b46bc15f6eb4c84469c646f7d324e6cb3167a3cec97ddac08a6e3da444658" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.4:
  + No longer install NetworkManager-wait-online.service in
    network-online.target.wants directory (rh#1455704).
  + Fix nmcli device connect wifi for APs that support both
    WPA-PSK and WPA-EAP (rh#1492064).
  + Fix crash unregistering object manager in libnm on restart of
    NetworkManager.
  + Improve handling externally managed slaves devices.
  + Don't reset MAC address of software devices to fake permanent
    address.
  + For dhclient use "timeout" option in configuration file,
    instead of the command line option which is only supported by
    downstream.
  + Perform the public-suffix check only for the hostname-derived
    domain.
  + Fix memory leak in connectivity check.
  + Better restore device managed state on rollback of checkpoint.
  + Skip addition of default-route if it already exists.
  + Bug fix detecting error condition when deleting route in
    platform.
- Drop NM-dhcp-improve-parsing-interface-statement.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355).</changelog>
</package>
<package pkgid="7b1dae189451bbc401f4793bc548ced0b93bef18085491de2229d4ddf29c7473" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.6.1"/>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
</package>
<package pkgid="0e0170393a64b069e4f2bbc2473a9345fc30eb786a181ca851e6acd3c0e6ddca" name="NetworkManager-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="lp150.4.9.1"/>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
</package>
<package pkgid="21d730bc286283fcf347b9e059e0ce38e13ea8af5d15c370e3dd480dd9bac7dd" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.12.1"/>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
  <changelog author="Ignaz Forster &lt;iforster@suse.com&gt;" date="1568635200">- Modify nfs script: Only mount/unmount when the file type is nfs
  (bsc#1074074).
  (Backport of Factory revision 335, also fixes boo#1146935)</changelog>
</package>
<package pkgid="760ada21511457881a831be6327a1c6c33c88bec5241a11ef98c7d3608189ebf" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.4:
  + No longer install NetworkManager-wait-online.service in
    network-online.target.wants directory (rh#1455704).
  + Fix nmcli device connect wifi for APs that support both
    WPA-PSK and WPA-EAP (rh#1492064).
  + Fix crash unregistering object manager in libnm on restart of
    NetworkManager.
  + Improve handling externally managed slaves devices.
  + Don't reset MAC address of software devices to fake permanent
    address.
  + For dhclient use "timeout" option in configuration file,
    instead of the command line option which is only supported by
    downstream.
  + Perform the public-suffix check only for the hostname-derived
    domain.
  + Fix memory leak in connectivity check.
  + Better restore device managed state on rollback of checkpoint.
  + Skip addition of default-route if it already exists.
  + Bug fix detecting error condition when deleting route in
    platform.
- Drop NM-dhcp-improve-parsing-interface-statement.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355).</changelog>
</package>
<package pkgid="ad189ab5a87131f13034ec736cc9cd9df56803fc61a3e94fde5bc246c96b130e" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.6.1"/>
  <changelog author="sckang@suse.com" date="1506340800">- Modify nm-dont-overwrite-resolv-conf.patch: make netconfig call
  an atomic action, don't kill it after 2000ms (bsc#960153).</changelog>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
</package>
<package pkgid="0f8768b7e6fac6a97c769780d450c44470111d86c05f658d9541f4b55447d14c" name="NetworkManager-lang" arch="noarch">
  <version epoch="0" ver="1.10.6" rel="lp150.4.9.1"/>
  <changelog author="yfjiang@suse.com" date="1512129600">- Switch to python3:
  + Replace BuildRequires python-gobject, python2-dbus-python with
    python3-gobject, python3-dbus-python.
  + Explictly set environment variable PYTHON as python3 in
    build time.</changelog>
  <changelog author="pavlix@pavlix.net" date="1512820800">- Remove reference to deprecated and dropped ifcfg-suse plugin from
  configuration.</changelog>
  <changelog author="mgorse@suse.com" date="1513684800">- Add nm-disconnect-proxy-signals.patch: disconnect proxy signals
  when closing; fixes possible crash when opening the user panel
  (bgo#787897).
- Add nm-vpn-remote-connection-disconnect-signals.patch:
  disconnect signal handlers when remote/vpn connections are
  disposed; fixes a gnome-control-center crash (bsc#1073472
  bgo#787893).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Update to version 1.8.6:
  + Fix a daemon crash on permission check (bgo#787897).
  + Fix a daemon crash on VPN state change (bgo#787893).
  + Fix a nmcli crash in interactive mode's describe command
    (bgo#788104).
  + Fix termination of the nmcli interactive mode (rh#1517401).
  + Properly handle route metric of zero in keyfiles.
  + Add support for DSA switch devices (rh#1371289).
  + Fix a memory leak of connection D-Bus objects (rh#1461643).
  + A double close that could potentially race with the D-Bus
    thread reusing the same file descriptor (rh#1451236).
  + Connectivity check fixes (bgo#785281) (bgo#784629).
  + Fix the metered properties handling in libnm.
  + Avoid dropping agent secrets unnecessarily (bgo#789383).
  + Fix the asynchronous initialization of a secret agent in libnm.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.
- Minor spec cleaning, tweak spec to silence a few rpm lint
  warnings.
- Replace addFilter("dbus-policy-missing-allow") with
  addFilter("dbus-policy-allow-without-destination"), filter out
  the current rpmlint warning.
- Add addFilter("suse-branding-unversioned-requires*") to
  rpmlintrc, we have this unversioned on purpose.
- Add
  addFilter("systemd-service-without-service_add_post NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_add_pre NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_postun NetworkManager-wait-online.service")
  addFilter("systemd-service-without-service_del_preun NetworkManager-wait-online.service")
  to rpmlintrc, filter out warnings we do not care about nor want
  as we do not want to enable this service by default.
- "Mark" %%{_sysconfdir}/dbus-1/system.d/org.freedesktop.NetworkManager.conf
  and %%config %{_sysconfdir}/dbus-1/system.d/nm-dispatcher.conf as
  config files in spec, silence rpmlint.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516881600">- Update to version 1.10.2:
  + Added support for 'onlink' IPv4 routes attribute.
  + Wait longer for the carrier to come up after a MTU change.
  + Implemented abstraction for team connections that exposes team
    configuration items as distinct properties.
  + Added basic support for tc queueing disciplines and filters.
  + Introduced an Update2() D-Bus method to update connection
    settings with more flexibility.
  + Many bug fixes and improvements.
- Changes from version 1.10.0:
  + NetworkManager includes now basic OpenVSwitch support, good
    enough to be capable of setting up simple OpenVSwitch
    configurations.
  + Added support for activating PPP connections on non-Ethernet
    interfaces.
  + It is now possible to authenticate to a Wi-Fi network using WPS
    (Wi-Fi Protected Setup).
  + Implemented support for Wi-Fi PMF (Protected Management Frames,
    802.11w), which can be configured via the wifi-sec.pmf
    property.
  + Now the maximum rate of wireless access points supporting
    802.11 is properly calculated and exposed on D-Bus.
  + Background scanning is now disabled for non-WPA-Enterprise
    Wi-Fi networks.
  + Added support for the Bluetooth NAP (Network Access Point)
    profile.
  + Added support for disabling connectivity checking via the D-Bus
    interface.
  + The internal DHCP client now understands the domain-search
    option.
  + Bridge connections support the group-forward-mask property.
  + NetworkManager can now configure multiple IPv6 default routes
    received through RA and each gets configured with the announced
    preference.
  + It is possible to specify the routing table for each static
    route.
  + Support specifying a explicit routing table for any
    non-static-route, including routes from DHCP, device-routes,
    IPv6 autoconf.
  + Device are left configured when a user sets them as unmanaged
    by NetworkManager.
  + New connection.auth-retry property to configure how often
    authentication is prompted before failing the configuration.
  + The platform code that handles synchronization with kernel
    status via netlink has been reworked and is more efficient.
  + Allowed the update of connections that have an associated
    ifcfg-rh routing rules file.
  + Non-UTF8 properties are now escaped when they are exported on
    D-Bus.
  + NetworkManager-wait-online.service now starts
    NetworkManager.service if needed.
  + The MAC address for bond connections can be changed in nmtui.
  + Fixed dependency problems when setting the MTU of VLAN and
    master devices.
  + The systemd-resolved DNS plugin properly handles the DNS
    priority setting.
  + Fixed setting a DHCP timeout greater than 60 seconds
    (dhclient).
  + Fixed some memory leaks.
  + Many other bug fixes and improvements.
- Rebase networkmanager-obs-net.patch and
  nm-dont-overwrite-resolv-conf.patch.
- Drop nm-disconnect-proxy-signals.patch and
  nm-vpn-remote-connection-disconnect-signals.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516968000">- Replace sysconfig with sysconfig-netconfig BuildRequires and
  Requires, this is what we in reality need.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 1.10.4:
  + Load jansson at runtime. This solves a clash with json-glib
    that caused a gnome-control-center crash, but also gets rid of
    a hard dependency.
  + Correct nmcli exit values after receiving a signal.
  + Fix libnm secret agent asynchronous initialization.
  + Add a default route for a modem even if it didn't sent a
    gateway.
  + Improve communication of DAD failures.
  + Remember device default metrics across daemon restarts.
  + Various bug fixes including possible crashes.
  + Updated translations.
  + Add NetworkManager-1.10.4-buildfixes.patch: Fix OVS compile
  errors (bgo#793183).</changelog>
  <changelog author="sckang@suse.com" date="1519732800">- Add nm-preserve-agent-owned-secrets-on-connection-update.patch:
  Backport upstream commit to preserve agent-owned secrets on
  connection update (bgo#793324, bsc#1082762).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520078400">- fix nfs dispatcher script (boo#1083831)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Add nm-fix-autoconnect.patch: Fix autoconnect with agent-owned
  secrets (bgo#794014, boo#1079672).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.10.6:
  + ovs: fix compilation issue of OVS plugin and various fixes.
  + team: add support for team runner "random".
  + core: cleanup activation of device (rh#1537160).
  + dhcp: retry indefinitely to renew the lease (rh#1503587).
  + core: fix blocking autoconnect for no-secrets (bgo#794014).
  + libnm: mark async results as cancelled (bgo#794088).
  + Various bug fixes including possible crashes.
  + Updated translations.
- Drop nm-preserve-agent-owned-secrets-on-connection-update.patch,
  NetworkManager-1.10.4-buildfixes.patch and
  nm-fix-autoconnect.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sckang@suse.com" date="1525435200">- Add NM-look-at-all-rp-filter-value.patch: look at 'all' rp_filter
  value too to determine actual value (bsc#1084336, bgo#794689).</changelog>
  <changelog author="sckang@suse.com" date="1548936000">- Add NM-add-wifi-scan-polkit-rule.patch: Adding a new polkit
  action "org.freedesktop.NetworkManager.wifi-scan" so that
  distributions can add specific rule to allow Wi-Fi scans
  (bsc#1122262, glfo#NetworkManager/NetworkManager!68).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1553169600">- Fix the connectivity value of devices which was set to LIMITED when
  the connectivity check fails. Now if the connectivity is being set
  to LIMITED but the device state is DISCONNECTED, then the value is
  coerced to NONE. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#138):
  * 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch
- Fix the global connectivity value which wasn't updated when a
  device was removed. Which is a problem if the device being removed
  is the one providing the connectivity. Add patch submitted to
  upstream (boo#1103678, glfdo#NetworkManager/NetworkManager#141):
  * 0001-Update-connectivity-value-on-device-removal.patch</changelog>
  <changelog author="sckang@suse.com" date="1553256000">- Modify NM-add-wifi-scan-polkit-rule.patch: Use polkit action
  "org.freedesktop.NetworkManager.wifi.scan" instead of
  "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream
  (bsc#1128560).</changelog>
  <changelog author="sckang@suse.com" date="1553688000">- Add NetworkManager-make-nm-wait-online-follow-nm-service.patch:
  make enablement of n-m-wait-online.service follow n-m.service
  (boo#1130355, gh#NetworkManager/NetworkManager#76).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1556280000">- Add NetworkManager-CVE-2018-1000135.patch: Fix CVE-2018-1000135
  (bsc#1086263, bgo#746422).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560254400">- Add nm-add-CAP_SYS_ADMIN-permission.patch: Add CAP_SYS_ADMIN
  which netconfig needs to call setdomainname (bsc#1129587).</changelog>
</package>
<package pkgid="3d5ac9a4f94bda524811e1ba8b5abd26260c926179a968c65cb1fa98cad766ab" name="NetworkManager-openvpn" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="211e3c4eb60eca59169cba52c00c0b70bffd589acf93a29d021dda34f6ab93ed" name="NetworkManager-openvpn" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="f7eb73f91d70f5c7b56c50bafb49d005ec13b631ea89a0a9ceca8500569467f4" name="NetworkManager-openvpn-gnome" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="69993be0d6117ee3b8a331a1b35d238767abdc7aab665244bc55dedacfecfa3d" name="NetworkManager-openvpn-lang" arch="noarch">
  <version epoch="0" ver="1.8.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 1.0.8:
  + Fix operations in IPv6-only configurations.
  + Add support for importing configurations with inline
    certificates.
  + Do not require password if user chose not to store it.
  + Cosmetic UI fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1460030400">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030401">- Update to version 1.1.90:
  + Ported to libnm, libnma and GDBus.
  + Support multiple concurrent OpenVPN connections.
  + Various import/export fixes.
  + Add support for --ping option to backend.
  + Updated translations.
- Add pkgconfig(libnm) and pkgconfig(libnma) BuildRequires: new
  dependencies.
- Drop nm-openvpn-desktop.patch: No longer needed.
- Remove NetworkManager-openvpn-openvpn-settings.png source file:
  as there is no desktop file left, there is also no need for an
  icon.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030402">- Update to version 1.1.91:
  + Add support for importing inline keys, secrets and PKCS12
    certificates.
  + Bugs fixed: bgo#760746, bgo#760904, bgo#760968, bgo#760987,
    bgo#761198, bgo#761285, bgo#761299, bgo#761907, bgo#762678.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030403">- Update to version 1.1.93 (1.2-rc1):
  + service,properties: add support for --ns-cert-type option.
- Changes from version 1.1.92:
  + Code refactoring.
  + Bugs fixed: bgo#763039, bgo#763122, bgo#763320, bgo#763742,
    bgo#764132.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460030404">- Update to version 1.2.0:
  + build: don't include the full path to a plugin by default.
  + service: drop off the bus when done.
  + import/export: don't limit reneg-sec to 65536 on import.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460030405">- Update to version 1.2.2:
  + Fixed validation of proxy port.
  + Use a proper name for the AppStream metadata.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.2.4:
  + Prefer building against stable libsecret API.
  + Split libnm-vpn-plugin-openvpn.so into a GTK-free core plugin
    usable by nmcli and a UI plugin for nm-applet and gnome
    components.
  + Support NM_VPN_LOG_LEVEL environment variable to control debug
    logging from NetworkManager.
  + Fix handling comp-lzo option.
  + Add support for tls-cipher option.
  + Add support for IPv6 DNS servers.
  + Fix handling quotes and comments when parsing ovpn files.
  + Hide internal ABI from properties libraries.
  + Preserve IP routing configuration on restart.
  + Various cleanups.
  + Updated translations.
- Replace pkgconfig(libsecret-unstable) BuildRequires with
  pkgconfig(libsecret-1), following upstream.
- Drop --disable-more-warnings configure parameter: no longer
  needed.
- Add NetworkManager-openvpn-dl-linking.patch: Fix build by linking
  libdl (bgo#769783).</changelog>
  <changelog author="zaitor@opensuse.org" date="1475582400">- Update to version 1.2.6:
  + Restore previous behavior for handling empty "comp-lzo"
    (bgo#769177).
  + Support verify-x509-name (bgo#770922).
  + Support max-routes (bgo#720097).
  + Fix invalid free when parsing remote option.
  + Various cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-dl-linking.patch: Fixed upstream.
  Following this: Drop libtool BuildRequires and stop passing
  autoreconf, we no longer carry any patches.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485172800">- Enable build for s390x: the entire dependency chain is in place.</changelog>
  <changelog author="dimstar@opensuse.org" date="1485259200">- Update to version 1.2.8:
  + Treat cipher and hmac options case insensitive in the
    properties GUI.
  + Support numeric argument to mssfix option.
  + Fixes to translatable strings and use Unicode.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496059200">- Update to version 1.2.10:
  + Add support for "tls-crypt" and "mtu-disc" options.
  + Add support for dynamic challenge-response protocol.
  + Allow choosing Adaptive or None LZO compression methods in the
    connection properties dialog.
  + Avoid passing the obsolete "tls-remote" option to OpenVPN
    versions that no longer support it and discourage its use in
    the properties dialog.
  + Updated the build system to use non-recursive make.
  + Many bug fixes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1503489600">- add add-support-for-IP-address-family-specifier-for-remote.patch:
  add support for IP address family specifier for remote protocol
  (fate#322475, bgo#731620).</changelog>
  <changelog author="sckang@suse.com" date="1504008000">- modify add-support-for-IP-address-family-specifier-for-remote.patch:
  modify this patch according to the commit pushed to upstream
  master branch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506081600">- Update to version 1.8.0:
  + Use gresources for ui files.
  + Use NMACertChooser for PKCS#11 support.
  + Support --ifconfig option not only for static key connections
    (bgo#774727).
  + Fix import for key-direction to make it independent of the
    order (bgo#778154).
  + Extend support for address family specifier for remote protocol
    (bgo#731620).
  + Updated translations.
- Drop
  add-support-for-IP-address-family-specifier-for-remote.patch:
  Fixed upstream.
- Drop obsolete post(un) handling of icon_theme_cache_post(un), no
  longer needed, there is no icon files anymore.
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506686400">- Add NetworkManager-openvpn-config.patch: fix unusable config
  imports (certificate config was wrongly written out, causing the
  VPN profile not be be functional).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 1.8.2:
  + Handle more then 255 routes (bgo#788137).
  + Fix GUI for editing connection with static key (bgo#788226).
  + Fix parsing gateway in helper script (bgo#788514).
  + Fix parsing 2FA challenge for "PASSWORD:Verification Failed"
    (bgo#751842).
  + Fix parsing remote hosts from configuration (bgo#792252).
  + Fix assertion failure while quitting service (bgo#792252).
  + Add support for connect-timeout (bgo#792252).
  + Automatically lower connect-timeout if there are multiple
    remotes to try at least 3 remotes (bgo#792252).
  + Add support for extra-certs (bgo#793746).
  + Various code cleanups.
  + Updated translations.
- Drop NetworkManager-openvpn-config.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="stefan.pledl@mesutronic.de" date="1556712000">- Enable missing whirlpool HMAC authentication (boo#1132946).
  + fix-for-missing-whirlpool-hmac-authentication.patch</changelog>
</package>
<package pkgid="45a94387157b046446c981d90b19daba054c19a0d9103c4eda95420d2c9b4f93" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="e04dae30632e583f50c90f016ef2163e2a71400ef007748d3bc680b6e9cbe60e" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="28a6a5b25216413a27896857f6f16e2e9491906f71b7b1e61a069355f825143d" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="f1b02c61c6f42e52081572f71b55edee44c993373464653592403d2298559f54" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="c2a09b0fb886d9f5213a1ed4fd066b65a7bad975e811c02d8a9a1edf1718ccc5" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="2c94d4798096eba9f8955e0c444f65fed6ed7ad2c7aac75aa336f8dfb637fd28" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="65fa660d89d189c967ef0e19904093e2fd13333e2a76e18f813e3118bc8bc71d" name="PackageKit-Qt" arch="src">
  <version epoch="0" ver="0.9.6" rel="lp150.3.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1358424000">- Initial package, version 0.8.7:
  + This is the first release of Packagekit-Qt which has been split
    out of the main PackageKit project. This project is decoupled
    from the main PackageKit project from  this point onwards and
    does not subscribe to the same API and ABI promises of
    PackageKit.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1358856000">- Add 0001-upstream-license-correction.patch: Update COPYING file
  to reflect LGPL-2.1. The GPL-3.0 COPYING file was just the
  default injected one by autotools, if none is explicitly given.
- Udpate License tag LGPL-2.1 (from LGPL-2.0, which was what the
  file headers indicated).</changelog>
  <changelog author="coolo@suse.com" date="1363003200">- add rename provides for old devel package</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1368187200">- Update to 0.8.8
  + New Features:
  - Adding Provides property to Daemon.
  - Adding some Meta information.
  - Adds the transactionFlags to the Transaction class.
  - Add TransactionFlags registration.
  - Implement connectNotify and disconnectNotify.
  + Bugfixes:
  - Add missing declare enums.
  - Fix searchGroups() be iterating over the flaged values.
  - Ignore Interface isValid() check.
  - Improve error handling and make it easier for QML use it.
  - Make sure we set an error if we fail to contact PackageKit.
  - Use the correct version of the LGPL library.
- Drop 0001-upstream-license-correction.patch: fixed upstream.
- Rename libpackagekit-qt2-5 subpackage to libpackagekit-qt2-6,
  following upstreams soname change.</changelog>
  <changelog author="alarrosa@suse.com" date="1379678400">- Add PackageKit-Qt-libdir-references.patch: Fix the installed
  packagekit-qt2-config.cmake file to have the correct link to the
  library by keeping CMAKE_INSTALL_LIBDIR as a relative path and
  the .pc file to have a valid path to $libdir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1410350400">- Update to version 0.9.2:
  + Notes:
  - Update to new PK API 0.9.
  - Applied a series of patches to port to Qt5.
  + New Features:
  - Add GetDetailsLocal, GetFilesLocal and RepoRemove.
  - Make use of DBus Properties changed to make less blocking
    calls.
  + Bugfixes:
  - Allow for Details to be empty constructed.
  - Cleaned include directive.
  - Finish the API changes to get rid of blocking calls.
  - Fix CMake var names for both Qt versions.
  - Fix libdir path.
  - Fix reply signature for Transaction methods.
  - Improve object handlying.
  - I think the API level should be hidden from libname.
  - Keep only one transaction flags, which is unlikely to change.
  - PackageKit doesn't has a changed signal anymore.
  - Properly delete private data on daemon as DaemonPrivate is
    not a QObject.
  - Properly handle new Details signal.
  - Properly init some Daemon values.
  - Queue signals so that all transaction properties are
    available when needed.
  - Remove debug info.
  - Update Roles enum, remove Provides enum, and fix some docs
    typos.
- Drop PackageKit-Qt-libdir-references.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411041600">- Add PackageKit-Qt-ff-7248b030c0.patch: Fast forward to git
  commit 7248b030c0, fixing build with PackageKit 1.0.0.
- Rename libpackagekit-qt2-6 subpackage to libpackagekitqt4-0,
  following upstreams soname bump.
- Adust Requires in -devel package accordingly.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1411041601">- Add
  0001-Use-GNUInstallDirs-to-determine-most-of-used-variabl.patch:
  Use GNUinstallDirs to determine relevant destination directories.
  Also removed unused vars.
- Pass only install prefix, the above patch takes care of the
  libdir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412337600">- Build PackageKit-Qt5 variant:
  + Add pre_checkin.sh to help keep Qt4 and Qt5 variants in sync.
  + Introduce QtVersion defines to distinguish between Qt4 and Qt5
    build.
  + Only BuildRequire libqt4-devel when built for Qt4.
  + In case of Qt5 builds, add:
  - -DUSE_QT5=ON parameter to cmake.
  - pkgconfig(Qt5Core), pkgconfig(Qt5DBus) and pkgconfig(Qt5Sql)
    BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1416398400">- Update to version 0.9.5:
  + New Features: Add operator== to bitfield.
  + Bugfixes:
  - Deprecate ::packageIcon methods.
  - Disable namespacing and classes names on the generated
    interfaces.
  - Don't assume the target is packagekitqt5.
  - Fix compilation due to not-set cmake variable.
  - Fix documentation.
  - Fix QPK include dir in cmake module.
  - Properly export cmake targets.
  - Remove daemon proxy conection to changed().
  - Remove RoleUpgradeSystem as it's not supported in 0.9.x
    anymore.
  - Remove the metatype registration for Transaction types.
  - Support RPATH by default.
  - Use GNUInstallDirs to determine most of used variables.
  - Use "PackageKit" as the include namespace rather than the
    library name.
- Drop PackageKit-Qt-ff-7248b030c0.patch and
  0001-Use-GNUInstallDirs-to-determine-most-of-used-variabl.patch:
  Fixed upstream/No longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.9.6:
  + Features:
  - Use Qt 5 by default.
  - Drop Qt4 support from PK-Qt.
  - Make use of QLoggingCategory packagekitqt.
  - Change default visibility to hidden.
  - Require at least Qt 5.6.
  + Bugfixes:
  - Fix compilation with strict QString() constructors on a host
    application.
  - Move enumTo/FromString code from header to cpp file.
  - No need to have random files marked as executable.
  - Reduce changes between QString &lt;-&gt; QByteArray.
  - Properly expose enums for introspection.
- Remove multi-spec handling: only PackageKit-Qt is now built. The
  former PackageKit-Qt5 assumes the identify of PK-Qt now.
  + Obsolete/Provide PackageKit-Qt5-devel by Pk-Qt-devel. There is
    no extra handling needed for the library subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551873600">- Add patch to use the NetworkManager dbus signal when PackageKit is
  not running and thus, can't emit  a propertiesUpdated signal when
  the network changes its state. This is part of the fix for
  boo#1103678.
  * 0001-Fix-PackageKit-not-emitting-network-state-changed-signal.patch</changelog>
</package>
<package pkgid="cf994eabd0f6d1d0fa11aaa3998c41452d55e1b9731fb6f4b14f77bbdd184c17" name="PackageKit-Qt-devel" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="lp150.3.3.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1358424000">- Initial package, version 0.8.7:
  + This is the first release of Packagekit-Qt which has been split
    out of the main PackageKit project. This project is decoupled
    from the main PackageKit project from  this point onwards and
    does not subscribe to the same API and ABI promises of
    PackageKit.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1358856000">- Add 0001-upstream-license-correction.patch: Update COPYING file
  to reflect LGPL-2.1. The GPL-3.0 COPYING file was just the
  default injected one by autotools, if none is explicitly given.
- Udpate License tag LGPL-2.1 (from LGPL-2.0, which was what the
  file headers indicated).</changelog>
  <changelog author="coolo@suse.com" date="1363003200">- add rename provides for old devel package</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1368187200">- Update to 0.8.8
  + New Features:
  - Adding Provides property to Daemon.
  - Adding some Meta information.
  - Adds the transactionFlags to the Transaction class.
  - Add TransactionFlags registration.
  - Implement connectNotify and disconnectNotify.
  + Bugfixes:
  - Add missing declare enums.
  - Fix searchGroups() be iterating over the flaged values.
  - Ignore Interface isValid() check.
  - Improve error handling and make it easier for QML use it.
  - Make sure we set an error if we fail to contact PackageKit.
  - Use the correct version of the LGPL library.
- Drop 0001-upstream-license-correction.patch: fixed upstream.
- Rename libpackagekit-qt2-5 subpackage to libpackagekit-qt2-6,
  following upstreams soname change.</changelog>
  <changelog author="alarrosa@suse.com" date="1379678400">- Add PackageKit-Qt-libdir-references.patch: Fix the installed
  packagekit-qt2-config.cmake file to have the correct link to the
  library by keeping CMAKE_INSTALL_LIBDIR as a relative path and
  the .pc file to have a valid path to $libdir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1410350400">- Update to version 0.9.2:
  + Notes:
  - Update to new PK API 0.9.
  - Applied a series of patches to port to Qt5.
  + New Features:
  - Add GetDetailsLocal, GetFilesLocal and RepoRemove.
  - Make use of DBus Properties changed to make less blocking
    calls.
  + Bugfixes:
  - Allow for Details to be empty constructed.
  - Cleaned include directive.
  - Finish the API changes to get rid of blocking calls.
  - Fix CMake var names for both Qt versions.
  - Fix libdir path.
  - Fix reply signature for Transaction methods.
  - Improve object handlying.
  - I think the API level should be hidden from libname.
  - Keep only one transaction flags, which is unlikely to change.
  - PackageKit doesn't has a changed signal anymore.
  - Properly delete private data on daemon as DaemonPrivate is
    not a QObject.
  - Properly handle new Details signal.
  - Properly init some Daemon values.
  - Queue signals so that all transaction properties are
    available when needed.
  - Remove debug info.
  - Update Roles enum, remove Provides enum, and fix some docs
    typos.
- Drop PackageKit-Qt-libdir-references.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1411041600">- Add PackageKit-Qt-ff-7248b030c0.patch: Fast forward to git
  commit 7248b030c0, fixing build with PackageKit 1.0.0.
- Rename libpackagekit-qt2-6 subpackage to libpackagekitqt4-0,
  following upstreams soname bump.
- Adust Requires in -devel package accordingly.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1411041601">- Add
  0001-Use-GNUInstallDirs-to-determine-most-of-used-variabl.patch:
  Use GNUinstallDirs to determine relevant destination directories.
  Also removed unused vars.
- Pass only install prefix, the above patch takes care of the
  libdir.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412337600">- Build PackageKit-Qt5 variant:
  + Add pre_checkin.sh to help keep Qt4 and Qt5 variants in sync.
  + Introduce QtVersion defines to distinguish between Qt4 and Qt5
    build.
  + Only BuildRequire libqt4-devel when built for Qt4.
  + In case of Qt5 builds, add:
  - -DUSE_QT5=ON parameter to cmake.
  - pkgconfig(Qt5Core), pkgconfig(Qt5DBus) and pkgconfig(Qt5Sql)
    BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1416398400">- Update to version 0.9.5:
  + New Features: Add operator== to bitfield.
  + Bugfixes:
  - Deprecate ::packageIcon methods.
  - Disable namespacing and classes names on the generated
    interfaces.
  - Don't assume the target is packagekitqt5.
  - Fix compilation due to not-set cmake variable.
  - Fix documentation.
  - Fix QPK include dir in cmake module.
  - Properly export cmake targets.
  - Remove daemon proxy conection to changed().
  - Remove RoleUpgradeSystem as it's not supported in 0.9.x
    anymore.
  - Remove the metatype registration for Transaction types.
  - Support RPATH by default.
  - Use GNUInstallDirs to determine most of used variables.
  - Use "PackageKit" as the include namespace rather than the
    library name.
- Drop PackageKit-Qt-ff-7248b030c0.patch and
  0001-Use-GNUInstallDirs-to-determine-most-of-used-variabl.patch:
  Fixed upstream/No longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.9.6:
  + Features:
  - Use Qt 5 by default.
  - Drop Qt4 support from PK-Qt.
  - Make use of QLoggingCategory packagekitqt.
  - Change default visibility to hidden.
  - Require at least Qt 5.6.
  + Bugfixes:
  - Fix compilation with strict QString() constructors on a host
    application.
  - Move enumTo/FromString code from header to cpp file.
  - No need to have random files marked as executable.
  - Reduce changes between QString &lt;-&gt; QByteArray.
  - Properly expose enums for introspection.
- Remove multi-spec handling: only PackageKit-Qt is now built. The
  former PackageKit-Qt5 assumes the identify of PK-Qt now.
  + Obsolete/Provide PackageKit-Qt5-devel by Pk-Qt-devel. There is
    no extra handling needed for the library subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551873600">- Add patch to use the NetworkManager dbus signal when PackageKit is
  not running and thus, can't emit  a propertiesUpdated signal when
  the network changes its state. This is part of the fix for
  boo#1103678.
  * 0001-Fix-PackageKit-not-emitting-network-state-changed-signal.patch</changelog>
</package>
<package pkgid="e89de72c35bf714d488abc6b94fb20d92db433a3ac5f65e65218127f05c70480" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="d4f151497aefa060461e4357a2158b1940d469d6e74f72ab26fd71b935cb22f7" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="d699636ff17f6676e9952dc76eef0e921393497dadfadf76b1f1f29a9cc3799f" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="eeec86322b16225f162a3cc09ea034ba4363c9218557a8a2716e22699a099abe" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="29156700d26f8b130af0e649d4961427cb0a8ce0c5385283222765ebed5eb55e" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="e610c59ee406169b439e4abdb42596f1fd702e9667ffa3d24748c3d9851b832e" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="f03328936c56d5743d4e79decf3b1128fbc0cdfd7c3cea354197afe9357d8982" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="cd261c931284a2d0b530548b06e5e2b2fd64ca342d8fa952e71c4a31a5dc7a70" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="27948c127df2a90c6b91b33744a94208e00e7b50df77d812614a9fa1bc7c8c82" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="71029e42349eb600bc411c012602b3cb108e535c157a7d8505d4aa4d35313656" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="ca0c3148b7c1363847482cd2697830bb5a1f978edc843b72d369b9cbb933a874" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="bbe8dd3c411938ea5403a252711ea27a8035cd67aaf1e6256006e23e491495bb" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="d28901b9ae4a38ad35211e6d32c936ad1f1e30b289e56d338ce6518b390c2a92" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="2fa9d7d664a01b82dd413a221506e0942c96b0ad9904ec25b624cacd4f8b5a09" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="c087689202b8af45ef4e4439b8a84f457004781de576ec9b2e8ebb4d7c916b46" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="c56473e7f11831fa925356b3a252220a9e9d8e5a4accf7bed2993ea6af6f30c3" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.11.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="6481d3cf37cf96bd6cf1abd6c8dbc726946c528ce554a72b27e7aa3e3bb8be07" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.3.3.1"/>
  <changelog author="sckang@suse.com" date="1496318400">- Add PackageKit-avoid-stack-smashing-on-i586.patch: Fix PackageKit
  stack smashing when running "pkcon get-updates" on 32-bit system
  (fdo#101267, bsc#1020028).</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- Update to version 1.1.6:
  + New Feature: Add new status "Running hooks".
  + Bugfixes:
  - Checks NULL strings inside pk_progress_bar_start.
  - Fix segfault when config file is not found.
  - Return success to avoid reboot in pk-offline-update.
  - Use g_printerr() for errors instead g_print().
  - Various tweaks to the offline-updates service file.
  + Backends: fixes for alpm, aptcc and dnf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Explicitly call autoreconf, as one of the patches touches the
  build system. As long as the version of automake available is the
  same as was used to bootstrap the tarball, there is no issue, but
  if the version changes, the call must be explicit.
- Add autoconf-archive BuildRequires in order to actually be able
  to successfully bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
</package>
<package pkgid="4b1679cfc756d6bb38694361183716de266418061573d39d5c03cc227e6678c8" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.1.10" rel="lp150.8.1"/>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 1.1.7:
  + Libraries: Add missing context pushes and pops.
  + Backends: zypp: Fix stack smashing on 32-bit system.
  + New Features: Add the ability to install updates on reboot in
    PackageKit-cron.
  + Bugfixes:
  - Don't search for NetworkManager or ConnMan anymore.
  - Effectively check for previous proxy entries.
  - Fix proxy environment variables.
  - Show a different progress message for system upgrades.
  + Updated translations.
- Drop PackageKit-avoid-stack-smashing-on-i586.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1505908800">- No longer BuildRequires libqt4-devel, this part is in a separate
  project since version 0.8.6.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Add PK-zypp-return-error-invalid-package-ids.patch: Return error
  if invalid package IDs are detected in zypp backend (bsc#981011).</changelog>
  <changelog author="sckang@suse.com" date="1509364800">- Modify PackageKit-zypp-backend-improve-refresh-cache.patch:
  Prevent PK from being killed by unhandled exceptions
  (boo#1064380).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509624000">- Drop py_requires from PackageKit: there are no python scripts in
  the main package.
- Drop python-devel BuildRequires: we do not package the python
  packagend anyway.
- Have post/postun script for PackageKit-gtk3-module post/postun
  only for suse_version &lt; 1330: newer versions have file triggers
  to trigger schema compilation.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add PackageKit-cron-without-sleep.patch: Do not sleep while
  running scripts called by cron. openSUSE's run-crons has
  sufficient logic to not have all machines start at the same time
  (boo#1071521).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 1.1.8:
  + Notes: The Slackware backend was renamed from "katja" to
    "slack".
  + Libraries:
  - Add getters for PkEulaRequired.
  - Add new pk_results_set_role() API.
  + New Features: Save transaction role to the offline update
    results file.
  + Bugfixes:
  - Various fixes to docs.
  - Bring introspection and vapigen m4 macros into the source.
  - command-not-found: Be more explicit when ignoring path
    components.
  - service: Use ConditionPathExists=!/run/ostree-booted.
  + Backends:
  - zypp: Return error if invalid package IDs are detected.
  - Various changes related to aptcc and slack.
- Drop PK-zypp-return-error-invalid-package-ids.patch: fixed
  upstream.
- Drop autoconf-archive and automake BuildRequires and no longer
  call autoreconf: no patch changes the build system.
- Replace --enable/disable-systemd-updates configure parameter with
  - -enable/disable-offline-update: the relevant systemd-updates
  parameters have not been valid since PackageKit 1.0.0.
- Drop --with-default-backend=zypp configure parameter: this has
  not been udnerstood since PackageKit 1.0. PK just used the one
  and only backend installed in the distro.</changelog>
  <changelog author="sckang@suse.com" date="1519300800">- Add PackageKit-zypp-backend-get-details-local.patch: Implement
  GetDetailsLocal method in zypp backend (bsc#1008287).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.1.9:
  + Fix missing PK_STATUS_ENUM_RUN_HOOK in pk-enum.c.
  + Fix Qt annotation on DBus signature.
  + client: Fix an invalid read when cancelling races with Finish.
  + engine: Fix a memory leak when handling GetTransactionList.
  + Fix getting user session ID with D-Bus "user bus" model.
  + Fix g_object_ref() type cast warnings with glib 2.56.
  + Rename "Software Sources" to "Software Repositories".
  + transaction: Don't leak polkit authority.
  + transaction: Fix a memory leak when authorizing actions.
  + transaction: Log transaction completed messages on debug, not
    info level.
  + Backends:
  - zypp: remove memory leak from zypp backend.
  - Various changes related to aptcc, dnf, slack and urpmi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove pkgconfig(npapi-sdk) BuildRequires:, it is no longer
  needed as browser plugin is not built since 1.1.0.</changelog>
  <changelog author="fcrozat@suse.com" date="1523275200">- Disable offline-update when building for SLE.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Update to version 1.1.10:
  + Notes: This release fixes CVE-2018-1106 which is a moderate
    security issue (boo#1086936).
  + Backends:
  - zypp:
    . Implement GetDetailsLocal in zypp backend.
    . Improve refresh-cache function in zypp backend.
  - Various changes related to aptcc and dnf.
- Drop PackageKit-zypp-backend-improve-refresh-cache.patch and
  PackageKit-zypp-backend-get-details-local.patch: Fixed upstream.
- Drop NetworkManager-devel BuildRequires: Not used since version
  1.1.7.</changelog>
  <changelog author="lnussel@suse.de" date="1525694400">- offline updates should be disabled in Leap too, just like SLE</changelog>
  <changelog author="xwang@suse.com" date="1535716800">- Add PackageKit-get-files-local.patch: Implement GetFilesLocal
  method in zypp backend (bsc#1097581).</changelog>
  <changelog author="sckang@suse.com" date="1545825600">- Add PackageKit-return-on-transactions-going-backwards.patch:
  transaction: Return directly when its state is going backwards
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825601">- Add PackageKit-remove-default-thread-check.patch: Remove the
  pk_is_thread_default() check in pk_backend_is_eula_valid() so
  that we can call it in zypp backend without any issue
  (gh#hughsie/PackageKit#301, bsc#1038425).</changelog>
  <changelog author="sckang@suse.com" date="1545825602">- Drop PackageKit-avoid-endless-loop-on-autoupdate.patch: With
  PackageKit-return-on-transactions-going-backwards.patch and
  PackageKit-remove-default-thread-check.patch, EULA promt works
  without any issue (bsc#1038425).</changelog>
</package>
<package pkgid="2b9367d719a62e5d2a0d23929d437b7a38cad1577cfec9dc2c81bfefa09bec48" name="Photini" arch="noarch">
  <version epoch="0" ver="2018.5.0" rel="lp150.2.3.1"/>
  <changelog author="aloisio@gmx.com" date="1487592000">- Initial package (version 2016.12.0)</changelog>
  <changelog author="aloisio@gmx.com" date="1487592001">- Minor change</changelog>
  <changelog author="adam.reichold@t-online.de" date="1493640000">- Bump to latest upstream version</changelog>
  <changelog author="aloisio@gmx.com" date="1493726400">- Update to version 2017.5
  * Migrate Bing map from v7 to v8 of Bing API.
  * Many other map improvements.
  * Time adjustment offset now includes time zone.</changelog>
  <changelog author="aloisio@gmx.com" date="1493726401">- Added multiple icon sizes</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Remove redundant filler words from description.</changelog>
  <changelog author="aloisio@gmx.com" date="1496404800">- Update to version 2017.6
  * Add location address metadata to map tabs.
  * Fix bug in Flickr uploader if user hasn't set a "buddy" icon.
  * Use OpenCage Data for OSM map search and address lookup.</changelog>
  <changelog author="aloisio@gmx.com" date="1502280000">- Update to version 2017.8
  * Use Exif/Xmp thumbnails instead of computing from image data.
  * Improved video file metadata reading.
  * Added context menu to choose one of them.
  * Added context menu to image selector.
  * Can regenerate thumbnail, including from video files.
- Disabled tests (none was actually being performed)</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to 2017.08.1
  * Added option to preserve file timestamps.
  * Added option to change copyright boilerplate text.
  * Added config file option to change application style.
  * Fix bug with importing files with spaces in their names.
  * Changed importer template marker from () to {}.</changelog>
  <changelog author="aloisio@gmx.com" date="1507032000">- Update to 2017.10.0
  * Use timezone metadata from some Canon cameras.
  * Make thumbnails 160x120 as specified by DCF.
  * Fix bug in localisation of uploader tabs.
  * Substantial rewrite of metadata handling.</changelog>
  <changelog author="aloisio@gmx.com" date="1512129600">- Update to 2017.12.0
  * Add 'rating' to descriptive tab.
  * Don't try to upload files over 1 GByte to Flickr.
  * Fix bug with thembnails of portrait format images.
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1518264000">- Update to 2018.2.0
  * All maps are faster and less buggy.</changelog>
  <changelog author="aloisio@gmx.com" date="1524657600">- Added Photini-PyQt5-libGL.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1524657601">- Added Photini-Bing-map.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1525176000">- Update to version 2018.5.0:
  * Improved calculation of "35mm equivalent" focal length.
  * Migrate spell check from PyEnchant to Gspell.
  * Use environment variable to set location of config file.
  * Copy more metadata to sidecar when it is created.
  * Fix problem with QtWebEngine and some PyQt versions.
  * Many other bug fixes and minor improvements.
- Dropped Photini-PyQt5-libGL.patch and Photini-Bing-map.patch
  (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1533643200">- Added missing runtime dependency (fixes boo#1103804)</changelog>
</package>
<package pkgid="f04e4a2f1d1eceb20bce18ab7f1d4fa85398accfaad9d1632f5d641b123a5a07" name="Regina-REXX" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="9f7173dbef2020758a6844daa52179245339e22d0bd738081a9aaf82418682b5" name="Regina-REXX-devel" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="43a76a0ed4779614b533d120f317bbb00e5ec3d3f17e971f6fb798775bd7f848" name="Regina-REXX-doc" arch="x86_64">
  <version epoch="0" ver="3.9.1" rel="lp150.2.3.1"/>
  <changelog author="mge@suse.de" date="1060084800">- update to 3.2</changelog>
  <changelog author="mge@suse.de" date="1076328000">- added SONAME (libregina.so) to library</changelog>
  <changelog author="mge@suse.de" date="1092312000">- update to 3.3</changelog>
  <changelog author="dmueller@suse.de" date="1130760000">- don't build as root</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="cthiel@suse.de" date="1219924800">- fix init script</changelog>
  <changelog author="mpost@suse.com" date="1461153600">- Upgraded to version 3.9.1
- Added Regina-REXX-regutil-3.9.1-doc.pdf
- Removed regina-rxstack-lsb.init.d and added a systemd unit file
  for rxstack.
- Converted all hardcoded paths to RPM macros.
- Removed obsolete regina-rpmlintrc file
- Removed the following obsolete patches:
  regina-3.3-configure.diff
  regina-3.3-Makefile.in.diff
- Removed deprecated Authors section
- Broke the documentation out into a separate package.
- Removed redundant changelog entries from the spec file.</changelog>
  <changelog author="mpluskal@suse.com" date="1462190400">- Rename package to Regina-REXX</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1521115200">- Modernise spec file with spec-cleaner
- Allow alternative rexx implementations to be installed in
  parallel (bsc#1083875)</changelog>
</package>
<package pkgid="36a86836c45f9a85f5960f7c23a21612b6ea16b8e2322bb65485ac456ada117f" name="SDL" arch="src">
  <version epoch="0" ver="1.2.15" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1347969600">- 12.3's Mesa doesn't bundle libGLU anymore</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- USe OS byteswapping macros that are optimized for all platforms
  directly by GCC.
  - DO not use dlopen to load libraries that otherwise can be linked
  at build-time, this is a _very_ bad idea, starting with the fact
  that rpm dependencies do not take account of dlopen and will
  break profiling/debugging etc..
- SDL-devel now has strict requires, so it will only pull what
  it really requires, as it no longer requires metapackages, it is
  very likely that some packages dont the chain will fail to build
  those must be fixed in the respective spec files (not here)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370692800">- sdl-lfs.patch: Ensure library is built with large file
  support/ 64bit off_t in 32bit systems</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Optional signature verification in local builds</changelog>
  <changelog author="jengelh@inai.de" date="1387281600">- Add libsdl-1.2.15-resizing.patch: resolve an issue whereby window
  frame corner resizing emitted no resize events to applications
  (bnc#855639)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401019200">-  Update SDL-lfs.patch, after a recent verification I found
  that something is not including SDL_config.h (config.h)
  therefore not using large file offsets.</changelog>
  <changelog author="dimstar@opensuse.org" date="1413115200">- Drop esound-devel BuildRequires: esd is really no longer the way
  to go.</changelog>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove gpg-offline leftovers</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old soundserver support (also arts, after esound).
  Remove --with-pic, building defaults to PIC anyway.
  Use pkgconfig names to slurp in packages.</changelog>
  <changelog author="jengelh@inai.de" date="1420545600">- Avoid bs_sched computation failure by expanding %power64</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
</package>
<package pkgid="510f1777c79acd471460c2f7d7322f69f10d42c96aeb4b81449338fdfb212967" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1487160000">- Add dbus-ime.diff and build with fcitx [boo#1025413]</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
</package>
<package pkgid="a24272d2ddd97df81c7b8990c0e2d6452ecd80ca3053a0833ba8a1673a1ffc67" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp150.2.6.1"/>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
</package>
<package pkgid="540c06a8db83678c188b9dcda94e5e07f8fcbdd6f0f546f72e92be13fac03a02" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp150.2.9.1"/>
  <changelog author="fcrozat@suse.com" date="1501588800">- Do not BuildRequires pkgconfig(fcitx) on SLE (not shipped anymore
  since SLE12 SP2).</changelog>
  <changelog author="spartanj@gmail.com" date="1506772800">- Update to new upstream release 2.0.6
  * Added Vulkan graphics support in SDL_vulkan.h.
  * Added SDL_ComposeCustomBlendMode() to create custom blend
    modes for 2D rendering.
  * Added support for many game controllers, including the
    Nintendo Switch Pro Controller.
  * Added support for inverted axes and separate axis directions
    in game controller mappings.
  * Added functions to return information about joysticks and
    open game controllers.
  * Added SDL_GameControllerNumMappings() and
    SDL_GameControllerMappingForIndex() to be able to enumerate
    the built-in game controller mappings.
  * Added SDL_LoadFile() and SDL_LoadFile_RW() to load a file
    into memory.
  * Added SDL_DuplicateSurface() to make a copy of a surface.
  * Added an experimental JACK audio driver.
  * Implemented non-power-of-two audio resampling.
  * Added the hint SDL_HINT_AUDIO_RESAMPLING_MODE to control the
    quality of resampling.
  * Added the hint SDL_HINT_RENDER_LOGICAL_SIZE_MODE to control
    the scaling policy for SDL_RenderSetLogicalSize().
  * Added the hints SDL_HINT_MOUSE_NORMAL_SPEED_SCALE and
    SDL_HINT_MOUSE_RELATIVE_SPEED_SCALE to scale the mouse speed
    when being read from raw mouse input.
  * Added the hint SDL_HINT_TOUCH_MOUSE_EVENTS to control whether
    SDL will synthesize mouse events from touch events.
  * Added an experimental KMS/DRM video driver for embedded
    development.
- Remove dbus-ime.diff (no longer needed)</changelog>
  <changelog author="guillaume@opensuse.org" date="1506945600">- Enable KMS/DRM video driver</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add dbus.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
</package>
<package pkgid="b086683595015ba30a94c6126d6956cfd9472276999e4ee6a21dada297e77ad9" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
</package>
<package pkgid="6067b79805863b6a40ebbaf27ad3b72fcc6c05f3d1a614d1e99e3d49d04b6f0f" name="SDL2_image" arch="src">
  <version epoch="0" ver="2.0.5" rel="lp150.9.1"/>
  <changelog author="prusnak@opensuse.org" date="1376395200">- created package (version 2.0.0) - based on SDL_image package</changelog>
  <changelog author="jengelh@inai.de" date="1376395201">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call</changelog>
  <changelog author="dvaleev@suse.com" date="1378987200">- Fix undefined s on BigEndian platforms (bigendian_undefined_s.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="mailaender@opensuse.org" date="1452427200">- Update to version 2.0.1
  * Fixed support for transparency in XPM files
  * Fixed memory leak in webp image loading
  * Fixed loading BMP files with large BITMAPINFOHEADER structures
  * Fixed building with libpng 1.4
- Removed bigendian_undefined_s.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518177600">- Update to new upstream release 2.0.2
  * Added simple SVG image support based on Nano SVG
  * Fixed security vulnerability in XCF image loader
    [boo#1062777, CVE-2017-2887]
  * Added optional support for loading images using Windows
    Imaging Component
  * Added libpng save support for much smaller 8-bit images
  * Added JPG save support: IMG_SaveJPG() and IMG_SaveJPG_RW()</changelog>
  <changelog author="jengelh@inai.de" date="1518523200">- Update BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.3
  * Fixed a number of security issues:
  * TALOS-2017-0488/CVE-2017-12122/boo#1084256:
    IMG_LoadLBM_RW code execution vulnerability
  * TALOS-2017-0489/CVE-2017-14440/boo#1084257:
    ILBM CMAP parsing code execution vulnerability
  * TALOS-2017-0490/CVE-2017-14441/boo#1084282:
    ICO pitch handling code execution vulnerability
  * TALOS-2017-0491/CVE-2017-14442/boo#1084304:
    Image palette population code execution vulnerability
  * TALOS-2017-0497/CVE-2017-14448/boo#1084303:
    load_xcf_tile_rle decompression code execution
  * TALOS-2017-0498/CVE-2017-14449/boo#1084297:
    do_layer_surface double free vulnerability
  * TALOS-2017-0499/CVE-2017-14450/boo#1084288:
    LWZ decompression buffer overflow vulnerability</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541592000">- Update to new upstream release 2.0.4
  * Fixed memory issues in the XCF loader:
  * CVE-2018-3839 boo#1089087 TALOS-2018-0521
  * CVE-2018-3977 boo#1114519 TALOS-2018-0645</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new upstream release 2.0.5
  * Fixed TALOS-2019-0820 CVE-2019-5051
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
- Not mentioned by upstream, but issues seemingly further fixed:
  * Fixed CVE-2019-12218 boo#1135789
  * Fixed CVE-2019-12217 boo#1135787
  * Fixed CVE-2019-12220 boo#1135806
  * Fixed CVE-2019-12221 boo#1135796
  * Fixed CVE-2019-12222 boo#1136101</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566561601">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="7f7b3644a01103f4177976354ead104d362e88d4e45ad990fe43b6e8eddb9ce9" name="SDL_image" arch="src">
  <version epoch="0" ver="1.2.12+hg695" rel="lp150.2.3.1"/>
  <changelog author="sndirsch@suse.de" date="1197806400">- fixed BuildRequires for SUSE &lt; 10.2</changelog>
  <changelog author="prusnak@suse.cz" date="1201262400">- fix buffer overflow in GIF code (gif-overflow.patch) [#355864]</changelog>
  <changelog author="prusnak@suse.cz" date="1201608000">- fix buffer overflow in LBM code (lbm-overflow.patch) [#355864]</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="crrodriguez@suse.de" date="1235736000">- remove static libraries and "la" files, useless without
  SDL static libraries too.
- fix -devel package dependencies.</changelog>
  <changelog author="prusnak@suse.cz" date="1242734400">- updated to 2.1.7
  * Fixed buffer overflow in BMP loading code
  * Fixed buffer overflow in GIF loading code
- removed obsoleted patches:
  * gif-overflow.patch (mainline)
  * lbm-overflow.patch (mainline)</changelog>
  <changelog author="prusnak@suse.cz" date="1242820800">- follow Shared Library Policy</changelog>
  <changelog author="prusnak@suse.cz" date="1243598400">- removed VisualC.zip, Watcom-OS2.zip, Xcode.tar.gz from upstream
  tarball [bnc#508084]</changelog>
  <changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
  <changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
  <changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.10
  * Fixed bug loading multiple images
  * Fixed checking for IMG_Init() return value in image loaders
  * Added support for uncompressed PCX files
  * Added IMG_Init()/IMG_Quit() to prevent constantly loading and unloading DLLs
  * Added support for ICO and CUR image files</changelog>
  <changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
  <changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_image-devel-32bit</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="pgajdos@suse.com" date="1346241600">- updated to 1.2.12:
  * Fixed regression in 1.2.11 loading 8-bit PNG images with libpng
  * Fixed loading 8-bit PNG images on Mac OS X
  * SDL_image is now under the zlib license
  * Added WEBP image support
  * Fixed compiling with libpng 1.4
  * Added Android.mk to build on the Android platform
  * Fixed loading HAM6 images with stencil mask
  * Fixed bug loading 15 and 16 bit BMP images</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1357214400">- Disable dynamic loading of common libraries, this
  is a bad idea to beging with.
- Cleanup buildRequires. metpackage xorg-x11-devel is not required</changelog>
  <changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list
- Enable WEBP support</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Improve package summary and description. Drop --with-pic which
  is enabled implicitly anyway, remove redundant Requires.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Update to new snapshot 1.2.12+hg695
  * Fixed TALOS-2019-0821 CVE-2019-5052
  * Fixed TALOS-2019-0841 CVE-2019-5057 boo#1143763
  * Fixed TALOS-2019-0842 CVE-2019-5058 boo#1143764
  * Fixed TALOS-2019-0843 CVE-2019-5059 boo#1143766
  * Fixed TALOS-2019-0844 CVE-2019-5060 boo#1143768
  * Fixed CVE-2019-7635
  * Fixed CVE-2019-13616 boo#1141844
- Drop CVE-2019-13616.patch (merged)</changelog>
</package>
<package pkgid="8941b00a3b8ed513c2e6678a128bfbc45b62de9f93a71becca90b8eab4ee2fda" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="lp150.2.3.1"/>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script.</changelog>
</package>
<package pkgid="cb4daecd65c530e5c7ba6c1c05e89be4aad1d8b3f90f69cd97c605b08da606ce" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="lp150.2.6.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="6f724e90cbfdacbea6a80f35256d6bd525dc6c64a8f30e98aa28ee3121f76bca" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.12" rel="lp150.2.9.1"/>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="1a3c92591829d4c585aa6cbd9b46c6cbdcfa786efa36cab4c29478358dcb87a2" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.17" rel="lp150.2.14.1"/>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
</package>
<package pkgid="0ee3584ef8cb84bf71b155d19f1e76c51aa1bdd05e4be22e8d63587b346661cb" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.17" rel="lp150.2.14.1"/>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
</package>
<package pkgid="c7fd2fd89eabbc73ef0a1a87c171261689e6cc689fc5082490ccb2bffce72eda" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.19" rel="lp150.2.17.1"/>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
</package>
<package pkgid="c089415ba2f2f4de91e33481f689df59534ac26c6aab36b4b7d9bfdeb7fdb9d5" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.19" rel="lp150.2.17.1"/>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
</package>
<package pkgid="8cb937ceba35d4fc9621678f726e8e8bfc39a1827e29ec3f1ee7472c2fe81a51" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.20" rel="lp150.2.20.1"/>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
</package>
<package pkgid="a519f5386e7ed19ab40873d5044a9fa1a70063a2b308a5773537c55ed3fb8c24" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.20" rel="lp150.2.20.1"/>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
</package>
<package pkgid="645f39c78030235f32d7331b3728615199c06e161db61cd14321ca113408a250" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.22" rel="lp150.2.23.1"/>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
</package>
<package pkgid="de1a873e93ed4b7f012640568e0d2af62b482b2d8ba8290b422deafe073fa921" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.22" rel="lp150.2.23.1"/>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
  <changelog author="tschmidt@suse.com" date="1529409600">- Fix .spec file for running SUSEConnect on Fedora28</changelog>
  <changelog author="tmuntaner@suse.com" date="1536148800">- Update to 0.3.12
  - Detect if system is in cloud provider (AWS/Google/Azure)
    (fate#320935)
  - Don't fail when trying to parse an empty body. Fixes bsc#1098220
  - Don't install release packages if they are already present</changelog>
  <changelog author="skotov@suse.com" date="1538136000">- Update to 0.3.13
  - Fix migration targets sorting (bsc#1104183)</changelog>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="Giovanni Filippetti &lt;giovanni.filippetti@suse.com&gt;" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="Ivan Kapelyukhin &lt;ikapelyukhin@suse.com&gt;" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="Thomas Schmidt &lt;tschmidt@suse.com&gt;" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
</package>
<package pkgid="8389c229725bffdea4ade83689d1222bc592e2ef329459392c0d2bb0d11fcbcc" name="VirtualGL" arch="src">
  <version epoch="0" ver="2.5.2" rel="lp150.4.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="42b4a8c82253a23a966245c2856f0fe7d74cf85bcc558250666b47ac2aef6492" name="VirtualGL" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.4.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="ec15b9696837070859262fe067fd645534aabf86d5cfa11c7d85c5adc34bf770" name="VirtualGL-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.4.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="d247f23190ae74a2c9e86ed442d16e927f63a31d2731332544b93d7d5dfa89f1" name="VirtualGL-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.4.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="1f392cec2cfb9202d4bbef3fc4e8635991a550de2fa323b0d6908cb1e2cb14c1" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.11.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="61824c2a877f4e07045013d9897e0dae91a2505e71d9569488eedbf3666fe215" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.11.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="8c5e688d9d6f3f6b93b73f6627b8f50c21d5c26a5cc06d505b335b032d2a944b" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="74be70b91d28f30443a45b55ae46e030c2af3ae2ba6eeef7a25f1ac8240e918f" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="8aa972b3aae7742829b0510db127b7255f9fd923f32da4c2c417e3dca6d38332" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.17.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="55c0610589523a40d803ac65c16a5480f9199a3ca3e1da65d0b27aeedb22f79c" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.17.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="091ce25b73303bf623f459b0c3a55ff70747e4daaa72bab2b4a1f2d1adedcd85" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="ff3175ccf7e311f402c3f250d9084684a36b020862938cf2343f78d830557a4e" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="e2dd5be07a67edc022c685fd55dfdc72681a8c23c101eb6c65409f81765448a8" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.8.1"/>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
</package>
<package pkgid="a70b8ea05ddd3c52f2e84ca1674a39b210d9deef11bdaa619a8d4b255af98581" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.8.1"/>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
</package>
<package pkgid="76a097098da5ab11fe47d247367d332cef8c75b7b61514ecd87d5abbb9c9ae2b" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.11.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="cf2ee474cb19d291563f9a5304965e55332137dacd950805bd1f75a5ba439b25" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="5608708f3f025f41dff6da7122fb249bb84309e7af9230d546c70906894b8505" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.17.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="893776005d743a7c3316febf15694d7330a6cb5ec2f7a30cac19fd42ff16863a" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="ec11af6ebc12b3273c9473809c9c53e35f00e82beb4a520670ef2f9346e3e63e" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.8.1"/>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
</package>
<package pkgid="a5418434445e547d334c9f98824588a0778b7a6b06ee2eed0075b18e853e27f9" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.11.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="43c067d89ef530f22074000aa2e9ba023ad9ddd48eba5115763c39f95c2f78be" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="80887e4a1f1677f20a2c1153ea1443f18e46dc917e97ce0d5449dd82f22bdf3a" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.17.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="a285951d83c839ba6794a51b91f30dc830712649eb3df882725d1e0db7f55bc8" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="788d6c24e6c9dd98b2065e6ee730976b4cfb4f696d71a7e8c6385bbcb889ec77" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.8.1"/>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
</package>
<package pkgid="e7ebd30d03450e91629df317921fe8e026f28202fff3cbc81faa2332cdca50d0" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.11.1"/>
  <changelog author="werner@suse.de" date="1511870400">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
</package>
<package pkgid="dc1ff4ca08a30659759ae6065e30b59733ece92293d2e913b93328d60d4d39cb" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
</package>
<package pkgid="cd35adbfb66e7d61972ffbdd88ac9072ad2a643a6929aee5705b07d3dedb1de9" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.17.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870400">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870401">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
</package>
<package pkgid="e862cbc2f2e4dfc2179ee67541b27fad29e6ab23083837ea969f4bf98fc911b2" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511784000">- Fix installation of fillup-templates.</changelog>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
</package>
<package pkgid="2d43a4473d1e131aaba496dbea71427649d6dbbe117ccb29ed41679f39345a52" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp150.8.1"/>
  <changelog author="lnussel@suse.de" date="1511870400">- Update to version 84.87+git20171128.17ae554:
  * Check for /proc/version before using it
  * Remove legacy code for /proc/iSeries
  * Move fillup-templates to /usr/share (boo#1069468)</changelog>
  <changelog author="werner@suse.de" date="1511870401">- lang.(c)sh: handle locale.conf if sysconfig does not provide
  default locale (bsc#1069971, FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870402">- Update to version 84.87+git20171128.a6752e8:
  * lang.(c)sh: handle locale.conf if sysconfig does not</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870403">- Update to version 84.87+git20171128.aa232d3:
  * Add wsl specific code to profile.d/wsl.csh
  * move wsl specific code from profile into profile.d/wsl.sh
  * Remove obsolete "make package"</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511870404">- Update to version 84.87+git20171128.945b960:
  * lang.(c)sh: catch if ROOT_USES_LANG becomes not set</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511956800">- Update to version 84.87+git20171129.a45b936:
  * Remove RC_* variables from language sysconf template
    (bsc#1069971 as well as FATE#319454)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512043200">- Update to version 84.87+git20171130.974ac5c:
  * Better parsing of sh variable settings in lang.csh</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 84.87+git20171201.65000be:
  * Revert changes on sysconfig language and make lang.(c)sh
    to use sysconfig language as fallback or better use
    locale.conf as default. See discussion in bsc#1069971
    and FATE#319454 as well</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Cleanup PreReq and move some parts to Requires(post), so that
  we can deinstall them if we no longer need them</changelog>
  <changelog author="kukuk@suse.de" date="1517313600">- Update to version 84.87+git20180130.36ea161:
  * Remove obsolete/outdated manual pages (route.conf.5,init.d.7,
    quick_halt.8)</changelog>
  <changelog author="kukuk@suse.de" date="1517313601">- Update to version 84.87+git20180130.ae1f262:
  * Really remove /usr/sbin/Check, obsolete since 8 years
  * Remove ChangeSymlinks, 90% are obsolete, the rest is dangerous
  * Remove 14 year old outdated documentation and dummy scripts for
    Java</changelog>
  <changelog author="kukuk@suse.de" date="1517745600">- Update to version 84.87+git20180204.875cba8:
  * Move sysconfig.backup into extra subpackage, where all the
    scripts using it are, too.
  * Create systemd timer for the cron.daily scripts for backup-rpmdb,
    backup-sysconfig and check-battery. Move scripts to
    /usr/lib/base-scripts.
  * Remove suse.de-cron-local. If somebody really still has a
    /root/cron.daily.local file, he can move it to /etc/cron.daily.
  * Don't modify data in root's home directory
  * Don't create userdel.local, this isn't in use since many years</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Add /var/adm/backup subdirectories to aaa_base-extras, they are
  only needed by this package.</changelog>
  <changelog author="kukuk@suse.de" date="1517832001">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
</package>
<package pkgid="8493de52d6f6df7d2e3db5c0357f4b6542c4a0cd510751b35fb6155317f6899d" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="90266d12b419e8175a718282438cf71dc1f8d43bcfbeb8dff18102a645a290cb" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="f3c29957e6b4ea46893ca045fd8e040340bc60ddfc819521dc23923d5ea75b6a" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
</package>
<package pkgid="0b41fa8084055311956222189dfcf8f94228c32bbe1b2c9d50bc22b65e72e236" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
</package>
<package pkgid="a49845f4ac0ecc2fe19df977371b451facb77011a58d939884779c7a7a5a2cc5" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="a4b6a5416300932c545a9aebd59cd8f6b24a2e624e276802b87c426bc2672d38" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
</package>
<package pkgid="ebd8b8a845fe5e5015438f829ea8ead914649b49e9104923df861cf33928ff51" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="0.6.45" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1412510400">- Pass --enable-user-heuristics to configure to ensure that legacy
  users are still shown in GDM facebrowser.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
</package>
<package pkgid="1dc1de7e03091a68004f77fd724af00ea18b30e16561edb8d92dab7415c29b4e" name="accountsservice-lang" arch="noarch">
  <version epoch="0" ver="0.6.45" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1413720000">- Update to version 0.6.39:
  + Fix ListCachedUsers race at startup.
  + Add new api for uncaching user.
  + Fix memory corruption bug.
  + Build goo changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422360000">- Update to version 0.6.40:
  + Support large UIDs better.
  + Don't require X11 display to fetch user with X11 session.
  + Ensure accountsservice doesn't start before NSS works.</changelog>
  <changelog author="dliang@suse.com" date="1433419200">- Add accountsservice-933083-load-root-setting.patch (bnc#933083)
  Load settings of an account which is not 'human' but can still be
  able to login to the system. (like 'root')</changelog>
  <changelog author="michael@stroeder.com" date="1452513600">- Updated Url.</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572
- Rebased accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="cxiong@suse.com" date="1464436800">- Add as-fate318433-prevent-same-account-multi-logins.patch
  (fate#318433):
  Prevent multiple simultaneous logins.</changelog>
  <changelog author="zaitor@opensuse.org" date="1465992000">- Update to version 0.6.42:
  + Wtmp fixes on solaris.
  + Allow a user to change his own data even if he's remote.
  + Add way to set password hint independent of password.
  + Conform to modern systemd library naming scheme.
  + Disable GVFS support in service, since it's not needed and has
    bad side effects.
- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires following upstream changes.</changelog>
  <changelog author="fbui@suse.com" date="1467806400">- Remove pkgconfig(libsystemd-daemon). Nowadays
  pkgconfig(libsystemd) is enough and replaces all libsystemd-*
  libs which are obsolete.</changelog>
  <changelog author="fezhang@suse.com" date="1472040000">- Enable as-fate318433-prevent-same-account-multi-logins.patch for
  Leap as requested by the Leap Release Manager (boo#994876).</changelog>
  <changelog author="fezhang@suse.com" date="1473595200">- Update accountsservice-sysconfig.patch:
  Flush the buffer before shut down the GIOChannel, otherwise we
  get a truncated setting file. The problem has caused the
  switching autologin in gnome-control-center breaking
  /etc/sysconfig/displaymanager (bsc#998107).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474718400">- Update to version 0.6.43:
  + Fix logout times in login-history.
  + Increase performance in large deployments.
  + Memory leak fix.
  + Exclude nologin users from user list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480507200">- Rebase accountsservice-933083-load-root-setting.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.6.45:
  + Wrap password expiration info in libaccountsservice api.
- Changes from version 0.6.44:
  + Export password expiration info from shadow file.
  + Fix user classification logic.
  + Don't lose track of users when /etc/passwd is reloaded.
- Drop accountsservice-933083-load-root-setting.patch:
  fixed upstream (177509 edac45).</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Remove redundant %clean section; use %_smp_mflags for build.</changelog>
  <changelog author="yfjiang@suse.com" date="1502366400">- Update specfile to build
  as-fate318433-prevent-same-account-multi-logins.patch on SLE15.</changelog>
  <changelog author="qzheng@suse.com" date="1513944000">- Add remove-no-longer-used-system-accounts.patch:
  Drop operator, nobody4 and noaccess from the blacklist
  (bsc#1063794, fdo#103879).</changelog>
  <changelog author="fezhang@suse.com" date="1528891200">- Add accountsservice-missing-users-on-gdm-login.patch: Don't abort
  loading users when an /etc/shadow entry found missing
  (boo#1090003 fdo#106904).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Add accountsservice-lib-treat-session-type-wayland-as-graphical-session.patch:
  When user session type is wayland, act_user_is_logged_in can
  return TRUE if the user is logged in (boo#1095918 fdo#106855).</changelog>
  <changelog author="qzheng@suse.com" date="1537876800">- Add CVE-2018-14036.patch to canonicalize the input path for the
  prefix comparison (CVE-2018-14036, bsc#1099699).</changelog>
  <changelog author="xwang@suse.com" date="1544443200">- Add accountsservice-read-root-user-cache.patch: Read root user
  cache file (bsc#1114292 glfo#accountsservice/accountsservice#65).</changelog>
</package>
<package pkgid="58f8894ff388e06410878116b12a4d340a1305665b65f98022363fda147e3a13" name="acl" arch="src">
  <version epoch="0" ver="2.2.52" rel="lp150.3.3.1"/>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322654401">- license update: GPL-2.0+;LGPL-2.1+
  SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake deps</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356523200">- Use OS byteswapping routines, application already Includes
  "endian.h" but then goes ahead defining ad-hoc equivalent
  functionality (0001-Use-OS-byteswapping-macros.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-sub-update.diff:
  update config.guess/sub to latest state for AArch64</changelog>
  <changelog author="coolo@suse.com" date="1363348800">- use source url</changelog>
  <changelog author="meissner@suse.com" date="1363694400">- add gpg checking</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Update to new upstream release 2.2.52
  * This release fixes a few build system issues that were found and
  merges in a tree walking bug fix.
- Remove acl-fiximplicit.patch (merged upstream),
  config-guess-sub-update.diff (no longer applies)
- Sync baselibs.conf with in-.spec obsoletes/provides.</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline calls from bootstrap package</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- add acl-2.2.52-tests.patch and enable tests, check section taken
  from Fedora package</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="jeffm@suse.com" date="1449057600">- Update to git snapshot dated 21 Sep 2015.
  - Added:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
- Signficant spec file restructuring due to 0013-modernize-build-system.patch
- removed builddefs.in.diff</changelog>
  <changelog author="kukuk@suse.de" date="1489406400">- Add BuildRequires for system user bin needed by test suite</changelog>
  <changelog author="fvogt@suse.com" date="1490788800">- Make it possible to disable tests (for Ring0)
- Add BuildRequires: system-user-daemon for the testsuite</changelog>
  <changelog author="hendrikw@arcor.de" date="1492430400">- reenable full Larg File Support for i586</changelog>
  <changelog author="jengelh@inai.de" date="1492948800">- Remove --with-pic that's just for static libraries.
- Replace %__-type macro indirections.
  Replace old $RPM_ by their macro equivalents for consistency.
  Make the macro style consistent across the file again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- test: Add helper library to fake passwd/group files
- quote: escape literal backslashes (bsc#953659).
- Added patch:
  * 0001-test-Add-helper-library-to-fake-passwd-group-files.patch
  * 0002-quote-escape-literal-backslashes.patch</changelog>
</package>
<package pkgid="8aedbaba6bfaf10859dc7951a57a6db198ff9704a2666bb5e5b01af310d32034" name="acl" arch="x86_64">
  <version epoch="0" ver="2.2.52" rel="lp150.3.3.1"/>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322654401">- license update: GPL-2.0+;LGPL-2.1+
  SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake deps</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356523200">- Use OS byteswapping routines, application already Includes
  "endian.h" but then goes ahead defining ad-hoc equivalent
  functionality (0001-Use-OS-byteswapping-macros.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1359806400">- Add config-guess-sub-update.diff:
  update config.guess/sub to latest state for AArch64</changelog>
  <changelog author="coolo@suse.com" date="1363348800">- use source url</changelog>
  <changelog author="meissner@suse.com" date="1363694400">- add gpg checking</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Update to new upstream release 2.2.52
  * This release fixes a few build system issues that were found and
  merges in a tree walking bug fix.
- Remove acl-fiximplicit.patch (merged upstream),
  config-guess-sub-update.diff (no longer applies)
- Sync baselibs.conf with in-.spec obsoletes/provides.</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline calls from bootstrap package</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- add acl-2.2.52-tests.patch and enable tests, check section taken
  from Fedora package</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="jeffm@suse.com" date="1449057600">- Update to git snapshot dated 21 Sep 2015.
  - Added:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
- Signficant spec file restructuring due to 0013-modernize-build-system.patch
- removed builddefs.in.diff</changelog>
  <changelog author="kukuk@suse.de" date="1489406400">- Add BuildRequires for system user bin needed by test suite</changelog>
  <changelog author="fvogt@suse.com" date="1490788800">- Make it possible to disable tests (for Ring0)
- Add BuildRequires: system-user-daemon for the testsuite</changelog>
  <changelog author="hendrikw@arcor.de" date="1492430400">- reenable full Larg File Support for i586</changelog>
  <changelog author="jengelh@inai.de" date="1492948800">- Remove --with-pic that's just for static libraries.
- Replace %__-type macro indirections.
  Replace old $RPM_ by their macro equivalents for consistency.
  Make the macro style consistent across the file again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- test: Add helper library to fake passwd/group files
- quote: escape literal backslashes (bsc#953659).
- Added patch:
  * 0001-test-Add-helper-library-to-fake-passwd-group-files.patch
  * 0002-quote-escape-literal-backslashes.patch</changelog>
</package>
<package pkgid="8639c30721923e675f80799993aa94b926558cffe6ef4239945585fd8369a9d1" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
</package>
<package pkgid="36daec2d7f70150eda0a6cc05f9c7e14b6d5ee6e9673057592fddaf33efa024f" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="lp150.4.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
</package>
<package pkgid="4deba59b13a4d6a32d084a3792d317e2d50e067c25fa020cec01d864e3c6840f" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.4.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
</package>
<package pkgid="fc3b17240c375666cf02b2649202c38791fe8806cc0eff88c9161ab989812248" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.2.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
</package>
<package pkgid="15ed771f9489b594d4b47e811d83a8ee465b33cc5e05322793384b29b5befbfd" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp150.4.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
</package>
<package pkgid="a2ebdb0b62a5252e81fda5e9f97e63f29209477b5b585b34165fa2a6f86a5e83" name="aide" arch="src">
  <version epoch="0" ver="0.16" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1144929600">- run aide --init as test</changelog>
  <changelog author="meissner@suse.de" date="1175169600">- buildrequires flex,bison</changelog>
  <changelog author="meissner@suse.de" date="1202817600">- Version 0.13.1
  * Fixed bug with reading gzipped aide.db files
  * Removed dead ustat code
- Version 0.13
  * Added support for selinux and xattr attributes
    (kindly contributed by Red Hat)
  * Added support for the Linux Audit System
    (kindly contributed by Red Hat)
  * Fixed usage of libgcrypt instead of libmhash
  * Added file locking for output files
  * Fixed bugs
- Version 0.12
  * Fixed bugs
  * Allow http/https/ftp URLs through libcurl
  * Support posix_fadvice() to avoid caching files
- enabled ACL and XATTR support</changelog>
  <changelog author="meissner@suse.de" date="1219406400">- enabled SELinux support [Fate#303662]
- enabled curl
- disable static (does not make much sense)</changelog>
  <changelog author="meissner@suse.de" date="1231156800">- fixed abort on check/update by removing the hash requirement bnc#406597
- fixed version output bnc#463511
- enhanced testcase to also run one aide --check</changelog>
  <changelog author="crrodriguez@suse.de" date="1245240000">- fix build when as-needed is a default liker option</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="ro@suse.de" date="1272542400">- make aide check verbose to get started
- add sleep and sync to fix build</changelog>
  <changelog author="meissner@suse.de" date="1281441600">- updated to 0.15
  - lots of fixes and some new stuff</changelog>
  <changelog author="freespacer@gmx.de" date="1285934400">- updated to version 0.15.1
  - Ignore changed file name if attributes does not match
  - Allow absence of DB_CHECKINODE if file name has changed
- renew patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="de57360b9d65b78ce17125ea19e0be9d3ab9345a608af9701a34ec327d91249e" name="aide" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="1397d4547d2736b84e1fdec796b816f20bd3deb1e5a46b6f1904be55fb8535d4" name="aide-test" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Add missing call to make
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
</package>
<package pkgid="61cfa7cae27a7c1dff4387911631285e333e1e7245fb220f71f5d74b61b72925" name="alpine" arch="src">
  <version epoch="0" ver="2.21" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="max@suse.com" date="1318248000">- Explicitly set the ssl prefix dir to fix build on ARM.</changelog>
  <changelog author="max@suse.com" date="1318334400">- Fix and extend operation-may-be-undefined-warning.diff
  (bnc#558841)
- Overhaul RPM summary and description.
- Month names containing non-ASCII characters were rendered
  incorrectly in non-UTF8 locales (bnc#597744).</changelog>
  <changelog author="max@suse.com" date="1318852800">- Fix two instances of premature closedir() and a potential buffer
  overflow in the maildir handler (alpine-maildir-closedir.patch).</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- clean up spec file</changelog>
  <changelog author="aj@suse.de" date="1343390400">- Include sys/resource.h for getrlimit.</changelog>
  <changelog author="jengelh@inai.de" date="1369224000">- Remove old SUSE definitions</changelog>
  <changelog author="jengelh@inai.de" date="1369224001">- Update to new upstream release 2.10
  * Quota report for IMAP folders that support it
  (press the "@" command in the index screen of such folder).
  * Search a folder for the content of any header with the ";"
  command.
  * Foreign characters are decoded correctly in IMAP folders.
  * Recognition of proper mime type for docx, xlsx, and pptx files.
  * When composing a message, Alpine will create a new thread when
  the subject is erased.
- Uncompress patches, since quilt does not like working with them
- Remove because merged upstream: chappa-filterflagbug.patch(.gz),
  chappa-nlinfobug.patch(.gz), chappa-replacebug.patch(.gz),
  chappa-searchheader.patch(.gz), chappa-streamlock.patch(.gz)
- Rediff to clear fuzz: alpine-no-add-needed.patch,
  pine-nonvoid-function.patch
- Remove because no longer applies and total lack of description
  as per Patch Guidelines:
  alpine-no-add-needed.patch</changelog>
  <changelog author="jengelh@inai.de" date="1378123200">- Update to new upstream release 2.11
  * Increase encryption of S/MIME encrypted messages.
  * Pico: Improvements in justification of paragraphs: lines that
  begin with a quote string, followed by a space were considered
  individual paragraphs, now they are considered part of a paragraph.
  * Unix Alpine: Allow local .pinerc file to be a symbolic link.
  * Experimental extended support of recognition of UTF-8 in urls
  * Added recognition of ws and wss URIs.
  * Add ability to color folder names, directory names, and text in
  the FOLDER SCREEN.
  * Add the ability to color any token used in the display of the
  INDEX SCREEN.
  * New option preserve-original-fields that adds the ability to
  preserve To: and Cc: fields when replying to a message, as
  specified by original sender.
  * Added Quota subcommands for printing, forwarding, saving, etc.
- Refresh from homepage (and save as unified): chappa-*.patch
- Refresh for -p1: operation-may-be-undefined-warning.diff,
  fix-implicit.patch, alpine-gcc44.diff
- Drop quilt-patches/alpine-2.00-as_needed.patch (merged upstream)</changelog>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
  <changelog author="Michal Svec &lt;msvec@suse.com&gt;" date="1541678400">- updated upstream URL</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1556798400">- Fix initialisation of encrypted password store (bsc#1133597,
  alpine-pinepw.patch).</changelog>
</package>
<package pkgid="a7d1595f2b4f71b1cec3202d9268d0099f7805d1c6146546e2fb8ce944eab050" name="alpine" arch="x86_64">
  <version epoch="0" ver="2.21" rel="lp150.2.3.1"/>
  <changelog author="max@suse.com" date="1390392000">- Add alpine-mime-type-workaround.patch:
  Send mime type in lowercase to work around MUAs that can't cope
  with upper case mime type strings in the Content-Type header
  such as the webmailer of GMX.  This is a backport from the
  current development release and will become obsolete with the
  next version upgrade.</changelog>
  <changelog author="jengelh@inai.de" date="1393848000">- The pico and pilot standalone programs have version numbers of
  their own; expose these in the .spec file</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
  <changelog author="Michal Svec &lt;msvec@suse.com&gt;" date="1541678400">- updated upstream URL</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1556798400">- Fix initialisation of encrypted password store (bsc#1133597,
  alpine-pinepw.patch).</changelog>
</package>
<package pkgid="d88c44a179600dc43938b2eba95651e950a1198ab2aaefcb688b8a4808c7e843" name="alsa" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="3ad3543acbbdb6b01c785f0f5f812e8a0524845787594ad27c03d2430f3c5430" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="b85154e56beba5a5dddc7aa3d8c5d9ce98d6ea301f6ac112a41edaeb52843a5b" name="alsa" arch="src">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="156566b8da48bf48902e87a21ed4a5797ff7cce1e3a0b1feaed1971e25b1f874" name="alsa" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="456941fb454bc1020382ecae38aab70ae920a28323cfbc0229722fb6ae7e9e92" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="5797f990f30a55ba4afe319eff2ed22adbe09d4949bf3fc315635f3f026b244a" name="alsa-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="8a0f97b1ccab6b36c590070adb85d8d18e89b518cebc2ad470b90661e62832e2" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="a3e47c4770e29c6a0b13c1b0d05d33411fdd69219c3d80767704d9413d5f20ad" name="alsa-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="b171a6549402ddbda52104418b028dd3fe404cd7b594792b68d80cfd9580f834" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="lp150.5.3.1"/>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-lib 1.1.1:
  * including previous fixes
  * a few more fixes/cleanup of control API
  * BSD compatibility changes
  * sync with 4.6 kernel ABI
  * provide API for sequencer sound card number / pid
  * fix races at dmix/dsnoop plugin
  * a few topology API updates
- Drop the obsoleted patches:
  0001-topology-Add-missing-include-sys-stat.h.patch
  0002-pcm-simple-Fix-asserts.patch
  0003-topology-open-topology-files-with-O_TRUNC.patch
  0004-topology-Remove-unused-function-write_data_block.patch
  0005-topology-Remove-unused-variables.patch
  0006-topology-Fix-comparison-of-unsigned-expression-0.patch
  0007-topology-Not-compare-a-for-loop-iterator-with-ABI-__.patch
  0008-topology-Quit-and-show-error-message-on-big-endian-m.patch
  0009-config-files-do-not-include-ucm-topology-configurati.patch
  0010-control-add-missing-asserts-to-ctl_elem_set-function.patch
  0011-pcm_hw-fix-possible-memory-leak-coverity.patch
  0012-coverity-fixes.patch
  0013-topology-fix-debug-output-to-print-correct-max-value.patch</changelog>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
</package>
<package pkgid="ef430a1dc34637ac0a657a36afb155859256589578a361d4eee0189545b68d30" name="alsa-docs" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="lp150.5.6.1"/>
  <changelog author="tiwai@suse.de" date="1463054400">- Backport various upstream fixes for PCM (bnc#979702):
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
</package>
<package pkgid="81095c5abee707842f97b40f45e794955d1671555715b706771f9bfe27020600" name="alsa-firmware" arch="noarch">
  <version epoch="0" ver="1.0.29" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="23c387d47b686bf31abca4f2aff2ec3674e7382f8b7f123b920ab6309e36aaa6" name="alsa-firmware" arch="src">
  <version epoch="0" ver="1.0.29" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1202472000">- updated to version 1.0.16-final:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1214481600">- updated to version 1.0.17-rc2:
  * update asihpi firmwares</changelog>
  <changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
  <changelog author="tiwai@suse.de" date="1232625600">- updated to version 1.0.19:
  * updated PCXHR firmwares</changelog>
  <changelog author="ro@suse.de" date="1236254400">- fix build</changelog>
  <changelog author="tiwai@suse.de" date="1241524800">- exclude some firmware files already contained in kernel-firmware
  package</changelog>
  <changelog author="tiwai@suse.de" date="1241611200">- updated to version 1.0.20:
  * just a version number bump</changelog>
  <changelog author="tiwai@suse.de" date="1254744000">- really exclude firmware files in kernel-firmware package</changelog>
  <changelog author="aj@suse.de" date="1267012800">- Use ATTR instead of SYSFS for udev rules.</changelog>
  <changelog author="tiwai@suse.de" date="1271678400">- updated to version 1.0.23:
  * update asihpi firmware version 40304</changelog>
  <changelog author="tiwai@suse.de" date="1296475200">- Updated to version 1.0.24.1:
  * including previous fixes
  * Add firmware for HDSP RPM</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1324555200">- alsa firmware is of no use without alsa</changelog>
  <changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25; Update asihpi firmware to 4.10.05</changelog>
  <changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  add firmware files for CA0132 HD-audio codec
- Fix macros for udev rules installation path</changelog>
  <changelog author="tiwai@suse.de" date="1391688000">- 0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:
  Add firmware files for cs46xx that have been cut since 3.13
  kernel</changelog>
  <changelog author="tiwai@suse.de" date="1403092800">- Updated to alsa-firmware 1.0.28:
  Removed obsoleted patch
  0001-Add-cs46xx-entry-to-the-main-configure-and-Makefile..patch:</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-firmware 1.0.29:
  update asihpi firmware to version 4.14</changelog>
  <changelog author="tiwai@suse.de" date="1559044800">- Install missing firmware files for CA0132 codec (bsc#1136638)</changelog>
</package>
<package pkgid="189a62ff95ea5e56c26bd2212116315b80ad1e5b0808d952c3fb7312571ad3dd" name="amavisd-new" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.5.3.1"/>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
</package>
<package pkgid="819efc8d9f47984ca2f99310ebb0fc0107fbeb7a909e291d6e94bc25dccd141a" name="amavisd-new-docs" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.5.3.1"/>
  <changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
</package>
<package pkgid="e9d752ccb6eeee8ba3cc075492d67f3b94f04be404ac248cffe3ae6419736881" name="ansible" arch="noarch">
  <version epoch="0" ver="2.7.8" rel="lp150.2.3.1"/>
  <changelog author="lars@linux-schulserver.de" date="1520337600">- License changed to GPL-3.0-or-later, as mentioned in the source
  (former license focues on GPL-3.0 only)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1522152000">- Update to 2.5.0:
  Major Changes
  * Ansible Network improvements
    + Created new connection plugins network_cli and netconf to replace
    connection=local. connection=local will continue to work for a
    number of Ansible releases.
    + No more unable to open shell. A clear and descriptive message will
    be displayed in normal ansible-playbook output without needing to enable debug mode
    + Loads of documentation, see Ansible for Network Automation Documentation.
    + Refactor common network shared code into package under module_utils/network/
    + Filters: Add a filter to convert XML response from a network device to JSON object.
    + Loads of bug fixes.
    + Plus lots more.
  * New simpler and more intuitive 'loop' keyword for task loops. The
    with_&lt;lookup&gt; loops will likely be deprecated in the near future
    and eventually removed.
  * Added fact namespacing; from now on facts will be available under
    ansible_facts namespace (for example: ansible_facts.os_distribution)
    without the ansible_ prefix. They will continue to be added into the
    main namespace directly, but now with a configuration toggle to enable
    this. This is currently on by default, but in the future it will default to off.
  * Added a configuration file that a site administrator can use to
    specify modules to exclude from being used.
  Minor Changes
  * please refer to /share/doc/packages/ansible/changelogs/CHANGELOG-v2.5.rst
  Deprecated Features
  * Previously deprecated 'hostfile' config settings have been 're-deprecated'
    because previously code did not warn about deprecated configuration settings.
  * Using Ansible-provided Jinja tests as filters is deprecated and will
    be removed in Ansible 2.9.
  * The stat and win_stat modules have deprecated get_md5 and the md5 return
    values. These options will become undocumented in Ansible 2.9 and
    removed in a later version.
  * The redis_kv lookup has been deprecated in favor of new redis lookup
  * Passing arbitrary parameters that begin with HEADER_ to the uri module,
    used for passing http headers, is deprecated. Use the headers parameter
    with a dictionary of header names to value instead.
    This will be removed in Ansible 2.9
  * Passing arbitrary parameters to the zfs module to set zfs properties is
    deprecated. Use the extra_zfs_properties parameter with a dictionary of
    property names to values instead. This will be removed in Ansible 2.9.
  * Use of the AnsibleModule parameter check\_invalid\_arguments in custom
    modules is deprecated. In the future, all parameters will be checked to
    see whether they are listed in the arg spec and an error raised if they
    are not listed. This behaviour is the current and future default so most
    custom modules can simply remove check\_invalid\_arguments if they set it
    to the default value of True. The check\_invalid\_arguments parameter
    will be removed in Ansible 2.9.
  * The nxos_ip_interface module is deprecated in Ansible 2.5.
    Use nxos_l3_interface module instead.
  * The nxos_portchannel module is deprecated in Ansible 2.5.
    Use nxos_linkagg module instead.
  * The nxos_switchport module is deprecated in Ansible 2.5.
    Use nxos_l2_interface module instead.
  * The ec2_ami_find has been deprecated; use ec2_ami_facts instead.
  * panos_security_policy: Use panos_security_rule - the old module uses
    deprecated API calls
  * vsphere_guest is deprecated in Ansible 2.5 and will be removed in
    Ansible-2.9. Use vmware_guest module instead.
  Removed Features (previously deprecated)
  * accelerate.
  * boundary_meter: There was no deprecation period for this but the hosted
    service it relied on has gone away so the module has been removed. #29387
  * cl_ : cl_interface, cl_interface_policy, cl_bridge, cl_img_install,
    cl_ports, cl_license, cl_bond. Use nclu instead
  * docker. Use docker_container and docker_image instead.
  * ec2_vpc.
  * ec2_ami_search, use ec2_ami_facts instead.
  * nxos_mtu. Use nxos_system's system_mtu option instead.
    To specify an interface's MTU use nxos_interface.
  * panos_nat_policy: Use panos_nat_rule the old module uses
    deprecated API calls
- also package the changelogs directory below
  /usr/share/doc/packages/ansible/ for better reference</changelog>
  <changelog author="lars@linux-schulserver.de" date="1524571200">- Update to 2.5.1
  Minor Changes
  + Updated example in vcenter_license module.
  + Updated virtual machine facts with instanceUUID which is unique
    for each VM irrespective of name and BIOS UUID.
  + A lot of Bugfixes, please refer to the Changelog installed in
    /usr/share/doc/packages/ansible/changelogs/CHANGELOG-v2.5.rst</changelog>
  <changelog author="kbabioch@suse.com" date="1529064000">- Update to 2.5.5
  - Fixed the honouration of the no_log option with failed task iterations
    (CVE-2018-10855 boo#1097775)
  - Bufixes:
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
  - aws_s3 - add async support to the action plugin
  - aws_s3 - fix decrypting vault files
  - ec2_ami - cast the device_mapping volume size to an int
  - eos_logging - fix idempotency issues
  - cache plugins - A cache timeout of 0 means the cache will not expire.
  - ios_logging - fix idempotency issues
  - ios/nxos/eos_config - don't retrieve config in running_config when config is provided for diff
  - nxos_banner - fix multiline banner issue
  - nxos terminal plugin - fix output truncation
  - nxos_l3_interface - fix no switchport issue with loopback and svi interfaces
  - nxos_snapshot - fix compare_option
- Applied spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
</package>
<package pkgid="07d718aee9ccdb52d84eea1f4c30f8b76768e029cd818cbc4d87da1baf6ecd27" name="ansible" arch="src">
  <version epoch="0" ver="2.7.8" rel="lp150.2.3.1"/>
  <changelog author="lars@linux-schulserver.de" date="1520337600">- License changed to GPL-3.0-or-later, as mentioned in the source
  (former license focues on GPL-3.0 only)</changelog>
  <changelog author="lars@linux-schulserver.de" date="1522152000">- Update to 2.5.0:
  Major Changes
  * Ansible Network improvements
    + Created new connection plugins network_cli and netconf to replace
    connection=local. connection=local will continue to work for a
    number of Ansible releases.
    + No more unable to open shell. A clear and descriptive message will
    be displayed in normal ansible-playbook output without needing to enable debug mode
    + Loads of documentation, see Ansible for Network Automation Documentation.
    + Refactor common network shared code into package under module_utils/network/
    + Filters: Add a filter to convert XML response from a network device to JSON object.
    + Loads of bug fixes.
    + Plus lots more.
  * New simpler and more intuitive 'loop' keyword for task loops. The
    with_&lt;lookup&gt; loops will likely be deprecated in the near future
    and eventually removed.
  * Added fact namespacing; from now on facts will be available under
    ansible_facts namespace (for example: ansible_facts.os_distribution)
    without the ansible_ prefix. They will continue to be added into the
    main namespace directly, but now with a configuration toggle to enable
    this. This is currently on by default, but in the future it will default to off.
  * Added a configuration file that a site administrator can use to
    specify modules to exclude from being used.
  Minor Changes
  * please refer to /share/doc/packages/ansible/changelogs/CHANGELOG-v2.5.rst
  Deprecated Features
  * Previously deprecated 'hostfile' config settings have been 're-deprecated'
    because previously code did not warn about deprecated configuration settings.
  * Using Ansible-provided Jinja tests as filters is deprecated and will
    be removed in Ansible 2.9.
  * The stat and win_stat modules have deprecated get_md5 and the md5 return
    values. These options will become undocumented in Ansible 2.9 and
    removed in a later version.
  * The redis_kv lookup has been deprecated in favor of new redis lookup
  * Passing arbitrary parameters that begin with HEADER_ to the uri module,
    used for passing http headers, is deprecated. Use the headers parameter
    with a dictionary of header names to value instead.
    This will be removed in Ansible 2.9
  * Passing arbitrary parameters to the zfs module to set zfs properties is
    deprecated. Use the extra_zfs_properties parameter with a dictionary of
    property names to values instead. This will be removed in Ansible 2.9.
  * Use of the AnsibleModule parameter check\_invalid\_arguments in custom
    modules is deprecated. In the future, all parameters will be checked to
    see whether they are listed in the arg spec and an error raised if they
    are not listed. This behaviour is the current and future default so most
    custom modules can simply remove check\_invalid\_arguments if they set it
    to the default value of True. The check\_invalid\_arguments parameter
    will be removed in Ansible 2.9.
  * The nxos_ip_interface module is deprecated in Ansible 2.5.
    Use nxos_l3_interface module instead.
  * The nxos_portchannel module is deprecated in Ansible 2.5.
    Use nxos_linkagg module instead.
  * The nxos_switchport module is deprecated in Ansible 2.5.
    Use nxos_l2_interface module instead.
  * The ec2_ami_find has been deprecated; use ec2_ami_facts instead.
  * panos_security_policy: Use panos_security_rule - the old module uses
    deprecated API calls
  * vsphere_guest is deprecated in Ansible 2.5 and will be removed in
    Ansible-2.9. Use vmware_guest module instead.
  Removed Features (previously deprecated)
  * accelerate.
  * boundary_meter: There was no deprecation period for this but the hosted
    service it relied on has gone away so the module has been removed. #29387
  * cl_ : cl_interface, cl_interface_policy, cl_bridge, cl_img_install,
    cl_ports, cl_license, cl_bond. Use nclu instead
  * docker. Use docker_container and docker_image instead.
  * ec2_vpc.
  * ec2_ami_search, use ec2_ami_facts instead.
  * nxos_mtu. Use nxos_system's system_mtu option instead.
    To specify an interface's MTU use nxos_interface.
  * panos_nat_policy: Use panos_nat_rule the old module uses
    deprecated API calls
- also package the changelogs directory below
  /usr/share/doc/packages/ansible/ for better reference</changelog>
  <changelog author="lars@linux-schulserver.de" date="1524571200">- Update to 2.5.1
  Minor Changes
  + Updated example in vcenter_license module.
  + Updated virtual machine facts with instanceUUID which is unique
    for each VM irrespective of name and BIOS UUID.
  + A lot of Bugfixes, please refer to the Changelog installed in
    /usr/share/doc/packages/ansible/changelogs/CHANGELOG-v2.5.rst</changelog>
  <changelog author="kbabioch@suse.com" date="1529064000">- Update to 2.5.5
  - Fixed the honouration of the no_log option with failed task iterations
    (CVE-2018-10855 boo#1097775)
  - Bufixes:
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
  - aws_s3 - add async support to the action plugin
  - aws_s3 - fix decrypting vault files
  - ec2_ami - cast the device_mapping volume size to an int
  - eos_logging - fix idempotency issues
  - cache plugins - A cache timeout of 0 means the cache will not expire.
  - ios_logging - fix idempotency issues
  - ios/nxos/eos_config - don't retrieve config in running_config when config is provided for diff
  - nxos_banner - fix multiline banner issue
  - nxos terminal plugin - fix output truncation
  - nxos_l3_interface - fix no switchport issue with loopback and svi interfaces
  - nxos_snapshot - fix compare_option
- Applied spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
</package>
<package pkgid="21d7da597dca2405debab302c2e3fede8d913c51c87cb19953923cbe59f421d2" name="ansible" arch="noarch">
  <version epoch="0" ver="2.8.1" rel="lp150.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="f8c3ef03c542e4b23d572c460920ea472ad6a20097b2aa870e27462a80563781" name="ansible" arch="src">
  <version epoch="0" ver="2.8.1" rel="lp150.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1530014400">- use python3 on (open)SUSE 15 or newer</changelog>
  <changelog author="boris@steki.net" date="1530532800">- updated to latest release 2.6.0
- New Plugins:
  + Callback:
  - cgroup_memory_recap
  - grafana_annotations
  - sumologic
  + Connection:
  - httpapi
  + Inventory:
  - foreman
  - gcp_compute
  - generator
  - nmap
  + Lookup:
  - onepassword
  - onepassword_raw
- Modules updates too many to mention here
  please look at package documentation directory (/usr/share/doc/packages/.../changelogs)
- bug fixes:
  - **Security Fix** - Some connection exceptions would cause no_log
    specified on a task to be ignored.  If this happened, the task information,
    including any private information coul d have been displayed to stdout and
    (if enabled, not the default) logged to a log file specified in
    ansible.cfg's log_path.  Additionally, sites which redirected stdout from
    ansible runs to a log file may have stored that private information onto
    disk that way as well.  (https://github.com/ansible/ansible/pull/41414)
  - Changed the admin_users config option to not include "admin" by default
    as admin is frequently used for a non-privileged account
    (https://github.com/ansible/ansible/pull/41164)
  - Changed the output to "text" for "show vrf" command as default "json"
    output format with respect to "eapi" transport was failing
    (https://github.com/ansible/ansible/pull/41470)
  - Document mode=preserve for both the copy and template module
  - Fix added for Digital Ocean Volumes API change causing Ansible to
    recieve an unexpected value in the response.
    (https://github.com/ansible/ansible/pull/41431)
  - Fix an encoding issue when parsing the examples from a plugins'
    documentation
  - Fix iosxr_config module to handle route-policy, community-set,
    prefix-set, as-path-set and rd-set blocks.  All these blocks are part of
    route-policy language of iosxr.
  - Fix mode=preserve with remote_src=True for the copy module
  - Implement mode=preserve for the template module
  - The yaml callback plugin now allows non-ascii characters to be
    displayed.
  - Various grafana_* modules - Port away from the deprecated
    b64encodestring function to the b64encode function instead.
    https://github.com/ansible/ansible/pull/38388
  - added missing 'raise' to exception definition
    https://github.com/ansible/ansible/pull/41690
  - allow custom endpoints to be used in the aws_s3 module
    (https://github.com/ansible/ansible/pull/36832)
  - allow set_options to be called multiple times
    https://github.com/ansible/ansible/pull/41913
  - ansible-doc - fixed traceback on missing plugins
    (https://github.com/ansible/ansible/pull/41167)
  - cast the device_mapping volume size to an int in the ec2_ami module
    (https://github.com/ansible/ansible/pull/40938)
  - copy - fixed copy to only follow symlinks for files in the non-recursive case
  - copy module - The copy module was attempting to change the mode of files
    for remote_src=True even if mode was not set as a parameter.  This
    failed on filesystems which do not have permission bits
    (https://github.com/ansible/ansible/pull/40099)
  - copy module - fixed recursive copy with relative paths
    (https://github.com/ansible/ansible/pull/40166)
  - correct debug display for all cases
    https://github.com/ansible/ansible/pull/41331
  - correctly check hostvars for vars term
    https://github.com/ansible/ansible/pull/41819
  - correctly handle yaml inventory files when entries are null dicts
    https://github.com/ansible/ansible/issues/41692
  - dynamic includes - Allow inheriting attributes from static parents
    (https://github.com/ansible/ansible/pull/38827)
  - dynamic includes - Don't treat undefined vars for conditional includes
    as truthy (https://github.com/ansible/ansible/pull/39377)
  - dynamic includes - Fix IncludedFile comparison for free strategy
    (https://github.com/ansible/ansible/pull/37083)
  - dynamic includes - Improved performance by fixing re-parenting on copy
    (https://github.com/ansible/ansible/pull/38747)
  - dynamic includes - Use the copied and merged task for calculating task
    vars (https://github.com/ansible/ansible/pull/39762)
  - file - fixed the default follow behaviour of file to be true
  - file module - Eliminate an error if we're asked to remove a file but
    something removes it while we are processing the request
    (https://github.com/ansible/ansible/pull/39466)
  - file module - Fix error when recursively assigning permissions and a
    symlink to a nonexistent file is present in the directory tree
    (https://github.com/ansible/ansible/issues/39456)
  - file module - Fix error when running a task which assures a symlink to a
    nonexistent file exists for the second and subsequent times
    (https://github.com/ansible/ansible/issues/39558)
  - file module - The file module allowed the user to specify src as a
    parameter when state was not link or hard.  This is documented as only
    applying to state=link or state=hard but in previous Ansible, this could
    have an effect in rare cornercases.  For instance, "ansible -m file -a
    'state=directory path=/tmp src=/var/lib'" would create /tmp/lib.  This
    has been disabled and a warning emitted (will change to an error in
    Ansible-2.10).
  - file module - The touch subcommand had its diff output broken during the
    2.6.x development cycle.  This is now fixed
    (https://github.com/ansible/ansible/issues/41755)
  - fix BotoCoreError exception handling
  - fix apt-mark on debian6 (https://github.com/ansible/ansible/pull/41530)
  - fix async for the aws_s3 module by adding async support to the action
    plugin (https://github.com/ansible/ansible/pull/40826)
  - fix decrypting vault files for the aws_s3 module
    (https://github.com/ansible/ansible/pull/39634)
  - fix errors with S3-compatible APIs if they cannot use ACLs for buckets
    or objects
  - fix permission handling to try to download a file even if the user does
    not have permission to list all objects in the bucket
  - fixed config required handling, specifically for _terms in lookups
    https://github.com/ansible/ansible/pull/41740
  - gce_net - Fix sorting of allowed ports
    (https://github.com/ansible/ansible/pull/41567)
  - group_by - support implicit localhost
    (https://github.com/ansible/ansible/pull/41860)
  - import/include - Ensure role handlers have the proper parent, allowing
    for correct attribute inheritance
    (https://github.com/ansible/ansible/pull/39426)
  - import_playbook - Pass vars applied to import_playbook into parsing of
    the playbook as they may be needed to parse the imported plays
    (https://github.com/ansible/ansible/pull/39521)
  - include_role/import_role - Don't overwrite included role handlers with
    play handlers on parse (https://github.com/ansible/ansible/pull/39563)
  - include_role/import_role - Fix parameter templating
    (https://github.com/ansible/ansible/pull/36372)
  - include_role/import_role - Use the computed role name for
    include_role/import_role so to diffentiate between names computed from
    host vars (https://github.com/ansible/ansible/pull/39516)-
    include_role/import_role - improved performance and recursion depth
    (https://github.com/ansible/ansible/pull/36470)
  - lineinfile - fix insertbefore when used with BOF to not insert duplicate
    lines (https://github.com/ansible/ansible/issues/38219)
  - password lookup - Do not load password lookup in network filters,
    allowing the password lookup to be overriden
    (https://github.com/ansible/ansible/pull/41907)
  - pause - ensure ctrl+c interrupt works in all cases
    (https://github.com/ansible/ansible/issues/35372)
  - powershell - use the tmpdir set by `remote_tmp` for become/async tasks
    instead of the generic $env:TEMP -
    https://github.com/ansible/ansible/pull/40210
  - selinux - correct check mode behavior to report same changes as normal
    mode (https://github.com/ansible/ansible/pull/40721)
  - spwd - With python 3.6 spwd.getspnam returns PermissionError instead of
    KeyError if user does not have privileges
    (https://github.com/ansible/ansible/issues/39472)
  - synchronize - Ensure the local connection created by synchronize uses
    _remote_is_local=True, which causes ActionBase to build a local tmpdir
    (https://github.com/ansible/ansible/pull/40833)
  - template - Fix for encoding issues when a template path contains
    non-ascii characters and using the template path in ansible_managed
    (https://github.com/ansible/ansible/issues/27262)
  - template action plugin - fix the encoding of filenames to avoid
    tracebacks on Python2 when characters that are not present in the user's
    locale are present.  (https://github.com/ansible/ansible/pull/39424)
  - user - only change the expiration time when necessary
    (https://github.com/ansible/ansible/issues/13235)
  - uses correct conn info for reset_connection
    https://github.com/ansible/ansible/issues/27520
  - win_environment - Fix for issue where the environment value was deleted
    when a null value or empty string was set -
    https://github.com/ansible/ansible/issues/40450
  - win_file - fix issue where special chars like [ and ] were not being
    handled correctly https://github.com/ansible/ansible/pull/37901
  - win_get_url - fixed a few bugs around authentication and force no when
    using an FTP URL
  - win_iis_webapppool - redirect some module output to null so Ansible can
    read the output JSON https://github.com/ansible/ansible/issues/40874
  - win_template - fix when specifying the dest option as a directory with
    and without the trailing slash
    https://github.com/ansible/ansible/issues/39886
  - win_updates - Added the ability to run on a scheduled task for older
    hosts so async starts working again -
    https://github.com/ansible/ansible/issues/38364
  - win_updates - Fix logic when using a whitelist for multiple updates
  - win_updates - Fix typo that hid the download error when a download
    failed
  - win_updates - Fixed issue where running win_updates on async fails
    without any error
  - windows become - Show better error messages when the become process fails
  - winrm - Add better error handling when the kinit process fails
  - winrm - allow `ansible_user` or `ansible_winrm_user` to override
    `ansible_ssh_user` when both are defined in an inventory -
    https://github.com/ansible/ansible/issues/39844
  - winrm - ensure pexpect is set to not echo the input on a failure and have
    a manual sanity check afterwards
    https://github.com/ansible/ansible/issues/41865
  - winrm connection plugin - Fix exception messages sometimes raising a
    traceback when the winrm connection plugin encounters an unrecoverable
    error.  https://github.com/ansible/ansible/pull/39333
  - xenserver_facts - ensure module works with newer versions of XenServer
    (https://github.com/ansible/ansible/pull/35821)</changelog>
  <changelog author="mrueckert@suse.de" date="1530532801">- revert some unneeded changes from spec-cleaner</changelog>
  <changelog author="lars@linux-schulserver.de" date="1532952000">- update to 2.6.2
  Minor Changes
  + Sceanrio guide for removing an existing virtual machine is added.
  + lineinfile - add warning when using an empty regexp
  + Restore module_utils.basic.BOOLEANS variable for backwards compatibility
    with the module API in older ansible releases.
  Bugfixes:
  + Add text output along with structured output in nxos_facts
  + Allow more than one page of results by using the right pagination
    indicator ('NextMarker' instead of 'NextToken').
  + Fix an atomic_move error that is 'true', but misleading.
    Now we show all 3 files involved and clarify what happened.
  + Fix eos_l2_interface eapi.
  + Fix fetching old style facts in junos_facts module
  + Fix get_device_info nxos zero or more whitespace regex
  + Fix nxos CI failures
  + Fix nxos_nxapi default http behavior
  + Fix nxos_vxlan_vtep_vni
  + Fix regex network_os_platform nxos
  + Refactor nxos cliconf get_device_info for non structured
    output supported devices
  + To fix the NoneType error raised in ios_l2_interface when
    Access Mode VLAN is unassigned
  + emtpy host/group name is an error
  + fix default SSL version for docker modules
  + fix mail module when using starttls
  + fix nmap config example
  + fix ps detection of service
  + fix the remote tmp folder permissions issue when becoming a non
    admin user
  + fix typoe in sysvinit that breaks update.rc-d detection
  + fixes docker_container compatibilty with docker-py &lt; 2.2
  + get_capabilities in nxapi module_utils should not return empty dictionary
  + inventory - When using an inventory directory, ensure extension
    comparison uses text types
  + ios_vlan - fix unable to identify correct vlans issue
  + nxos_facts warning message improved
  + openvswitch_db - make 'key' argument optional
  + pause - do not set stdout to raw mode when redirecting to a file
  + pause - nest try except when importing curses to gracefully fail
    if curses is not present
  + plugins/inventory/openstack.py - Do not create group with empty
    name if region is not set
  + preseve delegation info on nolog
  + remove ambiguity when it comes to 'the source'
  + remove dupes from var precedence
  + restores filtering out conflicting facts
  + user - fix bug that resulted in module always reporting a change when
    specifiying the home directory on FreeBSD
  + user - use correct attribute name in FreeBSD for creat_home
  + vultr - Do not fail trying to load configuration from ini files if
    required variables have been set as environment variables.
  + vyos_command correcting conditionals looping
  + win_chocolatey - enable TLSv1.2 support when downloading the
    Chocolatey installer
  + win_reboot - fix for handling an already scheduled reboot and other
    minor log formatting issues
  + win_reboot - fix issue when overridding connection timeout hung
    the post reboot uptime check
  + win_reboot - handle post reboots when running test_command
  + win_security_policy - allows an empty string to reset a policy value
  + win_share - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_unzip - discard any cmdlet output we don't use to ensure only the
    return json is received by Ansible
  + win_updates - fixed module return value is lost in error in some cases
  + win_user - Use LogonUser to validate the password as it does not
    rely on SMB/RPC to be available
  + Security Fix - avoid loading host/group vars from cwd when not
    specifying a playbook or playbook base dir
  + Security Fix - avoid using ansible.cfg in a world writable dir.
  + Fix junos_config confirm commit timeout issue
    (https://github.com/ansible/ansible/pull/41527)
  + file module - The touch subcommand had its diff output broken during
    the 2.6.x development cycle. This is now fixed.
  + inventory manager - This fixes required options being populated before
    the inventory config file is read, so the required options may be
    set in the config file.
  + nsupdate - allow hmac-sha384 https://github.com/ansible/ansible/pull/42209
  + win_domain - fixes typo in one of the AD cmdlets
    https://github.com/ansible/ansible/issues/41536
  + win_group_membership - uses the internal Ansible SID conversion logic
    and uses that when comparing group membership instead of the name
- use fdupes to save some space in python_sitelib
- define BuildRoot on older distributions like SLE-11
- be a bit more flexible with the ending of manpage files to allow
  Fedora builds to succeed</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1535371200">- update to 2.6.3
  Bugfixes:
  * Fix lxd module to be idempotent when the given configuration for
  the lxd container has not changed
  * Fix setting value type to str to avoid conversion during template
  read. Fix Idempotency in case of 'no key'.
  * Fix the mount module's handling of swap entries in fstab
  * The fix for (CVE-2018-10875) prints out a warning message about
  skipping a config file from a world writable current working
  directory. However, if the user explicitly specifies that the
  config file should be used via the ANSIBLE_CONFIG environment
  variable then Ansible would honor that but still print out the
  warning message. This has been fixed so that Ansible honors the
  user's explicit wishes and does not print a warning message in
  that circumstance.
  * To fix the bug where existing host_record was deleted when existing
  record name is used with different IP.
  * VMware handle pnic in proxyswitch
  * fix azure security group cannot add rules when purge_rule set to false.
  * fix azure_rm_deployment collect tags from existing Resource Group.
  * fix azure_rm_loadbalancer_facts list takes at least 2 arguments.
  * fix for the bundled selectors module (used in the ssh and local
  connection plugins) when a syscall is restarted after being
  interrupted by a signal
  * get_url - fix the bug that get_url does not change mode when checksum matches
  * nicer error when multiprocessing breaks
  * openssl_certificate - Convert valid_date to bytes for conversion
  * openstack_inventory.py dynamic inventory file fixed the plugin to the
  script so that it will work with current ansible-inventory. Also
    redirect stdout before dumping the ouptput, because not doing so will
  cause JSON parse errors in some cases.
  * slack callback - Fix invocation by looking up data from cli.options
  * sysvinit module: handle values of optional parameters. Don't disable
  service when enabled parameter isn't set. Fix command when arguments
  parameter isn't set.
  * vars_prompt - properly template play level variables in vars_prompt
  * win_domain - ensure the Netlogon service is up and running after
  promoting host to controller
  * win_domain_controller - ensure the Netlogon service is up and running
  after promoting host to controller</changelog>
  <changelog author="lars@linux-schulserver.de" date="1536667200">- update to 2.6.4
  Minor Changes:
  * add azure_rm_storageaccount support to StorageV2 kind.
  * import_tasks - Do not allow import_tasks to transition to dynamic
    if the file is missing
  Bugfixes:
  * Add md5sum check in nxos_file_copy module
  * Allow arbitrary log_driver for docker_container
  * Fix Python2.6 regex bug terminal plugin nxos, iosxr
  * Fix check_mode in nxos_static_route module
  * Fix glob path of rc.d Some distribtuions like SUSE has the rc%.d
    directories under /etc/init.d
  * Fix network config diff issue for lines
  * Fixed an issue where ansible_facts.pkg_mgr would incorrectly set
    to zypper on Debian/Ubuntu systems that happened to have the
    command installed
  * The docker_* modules respect the DOCKER_* environment variables again
  * The fix for CVE-2018-10875 prints out a warning message about
    skipping a config file from a world writable current working directory.
    However, if the user is in a world writable current working directory
    which does not contain a config file, it should not print a warning
    message. This release fixes that extaneous warning.
  * To resolve nios_network issue where vendor-encapsulated-options
    can not have a use_option flag.
  * To resolve the issue of handling exception for Nios lookup gracefully.
  * always correctly template no log for tasks
  * ansible-galaxy - properly list all roles in roles_path
  * basic.py - catch ValueError in case a FIPS enabled platform
    raises this exception
  * docker_container: fixing working_dir idempotency problem
  * docker_container: makes unit parsing for memory sizes more consistent,
    and fixes idempotency problem when kernel_memory is set
  * fix example code for AWS lightsail documentation
  * fix the enable_snat parameter that is only supposed to be used by
    an user with the right policies.
  * fixes docker_container check and debug mode
  * improves docker_container idempotency
  * ios_l2_interface - fix bug when list of vlans ends with comma
  * ios_l2_interface - fix issue with certain interface types
  * ios_user - fix unable to delete user admin issue
  * ios_vlan - fix unable to work on certain interface types issue
  * nxos_facts test lldp feature and fix nxapi check_rc
  * nxos_interface port-channel idempotence fix for mode
  * nxos_linkagg mode fix
  * nxos_system idempotence fix
  * nxos_vlan refactor to support non structured output
  * one_host - fixes settings via environment variables
  * use retry_json nxos_banner
  * user - Strip trailing comments in /etc/default/passwd
  * user - when creating a new user without an expiration date,
    properly set no expiration rather that expirining the account
  * win_domain_computer - fixed deletion of computer active directory
    object that have dependent objects
  * win_domain_computer - fixed error in diff_support
  * win_domain_computer - fixed error when description parameter is empty
  * win_psexec - changed code to not escape the command option when building the args
  * win_uri -- Fix support for JSON output when charset is set
  * win_wait_for - fix issue where timeout doesn't wait unless state=drained</changelog>
  <changelog author="sean@suspend.net" date="1539000000">- update to 2.7.0
  Major changes:
  * Allow config to enable native jinja types
  * Remove support for simplejson
  * yum and dnf modules now at feature parity
  Minor changes:
  * Changed the prefix of all Vultr modules from vr to vultr
  * Enable installroot tests for yum4(dnf) integration testing, dnf backend now supports that
  * Fixed timer in exponential backoff algorithm in vmware.py
  Bugfixes:
  * Security Fix - avoid loading host/group vars from cwd when not specifying a playbook or playbook base dir
  * Security Fix - avoid using ansible.cfg in a world writable dir
  * Some connection exception would cause no_log specified on a task to be ignored (stdout info disclosure)
  * Fix glob path of rc.d (SUSE-specific)
  * Fix lambda_policy updates
  * Fix alt linux detection/matching</changelog>
  <changelog author="sean@suspend.net" date="1540641600">- update to 2.7.1
  Minor changes:
  * Fix yum module to properly check for empty conf_file value
  * added capability to set the scheme for the consul_kv lookup
  * added optional certificate and certificate validation for consul_kv lookups
  * dnf - properly handle modifying the enable/disable excludes data field
  * dnf appropriately handles disable_excludes repoid argument
  * dnf proerly honors disable_gpg_check for local package installation
  * fix yum module to handle list argument optional empty strings properly
  * netconf_config - Make default_operation optional in netconf_config module
  * yum - properly handle proxy password and username embedded in url
  * yum/dnf - fail when space separated string of names</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543406400">- update to version 2.7.2
  Minor changes:
  * Fix documentation for cloning template
  * Parsing plugin filter may raise TypeError, gracefully handle this
  exception and let user know about the syntax error in plugin filter file
  * Scenario guide for VMware HTTP API usage
  * Update plugin filter documentation
  * fix yum and dnf autoremove input sanitization to properly warn user if
  invalid options passed and update documentation to match
  * improve readability and fix privileges names on vmware scenario_clone_template
  * k8s - updated module documentation to mention how to avoid SSL validation errors
  * yum - when checking for updates, now properly include Obsoletes
  (both old and new) package data in the module JSON output</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752000">- update to version 2.7.3
  Minor Changes:
  * Document Path and Port are mutually exclusive parameters in wait_for module
  * Puppet module remove --ignorecache to allow Puppet 6 support
  * dnf properly support modularity appstream installation via overloaded group
  modifier syntax
  * proxmox_kvm - fix exception
  * win_security_policy - warn users to use win_user_right instead when editing
  Privilege Rights
  Bugfixes:
  * Fix the issue that FTD HTTP API retries authentication-related HTTP requests
  * Fix the issue that module fails when the Swagger model does not have required fields
  * Fix the issue with comparing string-like objects
  * Fix using omit on play keywords
  * Windows - prevent sensitive content from appearing in scriptblock logging (CVE-2018-16859)
  * apt_key - Disable TTY requirement in GnuPG for the module to work correctly
  when SSH pipelining is enabled
  * better error message when bad type in config, deal with EVNAR= more gracefully
  * configuration retrieval would fail on non primed plugins
  * cs_template - Fixed a KeyError on state=extracted
  * docker_container - fix idempotency problems with docker-py caused by previous
  init idempotency fix
  * docker_container - fix interplay of docker-py version check with argument_spec
  validation improvements
  * docker_network - driver_options containing Python booleans would cause Docker
    to throw exceptions
  * ec2_group - Fix comparison of determining which rules to purge by ignoring descriptions
  * pip module - fix setuptools/distutils replacement
  * sysvinit - enabling a service should use "defaults" if no runlevels are specified</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1543752001">- update to version 2.7.4
  Bugfixes:
  * powershell - add lib/ansible/executor/powershell to the packaging data</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1544961600">- update to version 2.7.5
  Minor Changes:
  * Add warning about falling back to jinja2_native=false when Jinja2 version is lower than 2.10.
  * Change the position to search os-release since clearlinux new versions are providing /etc/os-release too
  * Fixed typo in ansible-galaxy info command.
  * Improve the deprecation message for squashing, to not give misleading advice
  * Update docs and return section of vmware_host_service_facts module.
  * ansible-galaxy: properly warn when git isn't found in an installed bin path instead of traceback
  * dnf module properly load and initialize dnf package manager plugins
  * docker_swarm_service: use docker defaults for the user parameter if it is set to null
  Bugfixes:
  * ACME modules: improve error messages in some cases (include error returned by server).
  * Added unit test for VMware module_utils.
  * Also check stdout for interpreter errors for more intelligent messages to user
  * Backported support for Devuan-based distribution
  * Convert hostvars data in OpenShift inventory plugin to be serializable by ansible-inventory
  * Fix AttributeError (Python 3 only) when an exception occurs while rendering a template
  * Fix N3K power supply facts (https://github.com/ansible/ansible/pull/49150).
  * Fix NameError nxos_facts (https://github.com/ansible/ansible/pull/48981).
  * Fix VMware module utils for self usage.
  * Fix error in OpenShift inventory plugin when a pod has errored and is empty
  * Fix if the route table changed to none (https://github.com/ansible/ansible/pull/49533)
  * Fix iosxr netconf plugin response namespace (https://github.com/ansible/ansible/pull/49300)
  * Fix issues with nxos_install_os module for nxapi (https://github.com/ansible/ansible/pull/48811).
  * Fix lldp and cdp neighbors information (https://github.com/ansible/ansible/pull/48318)(https://github.com/ansible/ansible/pull/48087)(https://github.com/ansible/ansible/pull/49024).
  * Fix nxos_interface and nxos_linkagg Idempotence issue (https://github.com/ansible/ansible/pull/46437).
  * Fix traceback when updating facts and the fact cache plugin was nonfunctional
  * Fix using vault encrypted data with jinja2_native (https://github.com/ansible/ansible/issues/48950)
  * Fixed: Make sure that the files excluded when extracting the archive are not checked. https://github.com/ansible/ansible/pull/45122
  * Fixes issue where a password parameter was not set to no_log
  * Respect no_log on retry and high verbosity (CVE-2018-16876)
  * aci_rest - Fix issue ignoring custom port
  * acme_account, acme_account_facts - in some cases, it could happen that the modules return information on disabled accounts accidentally returned by the ACME server.
  * docker_swarm - decreased minimal required API version from 1.35 to 1.25; some features require API version 1.30 though.
  * docker_swarm_service: fails because of default "user: root" (https://github.com/ansible/ansible/issues/49199)
  * ec2_metadata_facts - Parse IAM role name from the security credential field since the instance profile name is different
  * fix azure_rm_image module use positional parameter (https://github.com/ansible/ansible/pull/49394)
  * fixes an issue with dict_merge in network utils (https://github.com/ansible/ansible/pull/49474)
  * gcp_utils - fix google auth scoping issue with application default credentials or google cloud engine credentials. Only scope credentials that can be scoped.
  * mail - fix python 2.7 regression
  * openstack - fix parameter handling when cloud provided as dict https://github.com/ansible/ansible/issues/42858
  * os_user - Include domain parameter in user deletion https://github.com/ansible/ansible/issues/42901
  * os_user - Include domain parameter in user lookup https://github.com/ansible/ansible/issues/42901
  * ovirt_storage_connection - comparing passwords breaks idempotency in update_check (https://github.com/ansible/ansible/issues/48933)
  * paramiko_ssh - improve log message to state the connection type
  * reboot - use IndexError instead of TypeError in exception
  * redis cache - Support version 3 of the redis python library (https://github.com/ansible/ansible/issues/49341)
  * sensu_silence - Cast int for expire field to avoid call failure to sensu API.
  * vmware_host_service_facts - handle exception when service package does not have package name.
  * win_nssm - Switched to Argv-ToString for escaping NSSM credentials (https://github.com/ansible/ansible/issues/48728)
  * zabbix_hostmacro - Added missing validate_certs logic for running module against Zabbix servers with untrused SSL certificates (https://github.com/ansible/ansible/issues/47611)
  * zabbix_hostmacro - Fixed support for user macros with context (https://github.com/ansible/ansible/issues/46953)</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1547985600">- update to version 2.7.6
  Minor Changes:
  * Added documentation about using VMware dynamic inventory plugin.
  * Fixed bug around populating host_ip in hostvars in vmware_vm_inventory.
  * Image reference change in Azure VMSS is detected and applied correctly.
  * docker_volume - reverted changed behavior of force, which was released in Ansible 2.7.1 to 2.7.5, and Ansible 2.6.8 to 2.6.11. Volumes are now only recreated if the parameters changed and force is set to true (instead of or). This is the behavior which has been described in the documentation all the time.
  * set ansible_os_family from name variable in os-release
  * yum and dnf can now handle installing packages from URIs that are proxy redirects and don't end in the .rpm file extension
  Bugfixes:
  * Added log message at -vvvv when using netconf connection listing connection details.
  * Changes how ansible-connection names socket lock files. They now use the same name as the socket itself, and as such do not lock other attempts on connections to the same host, or cause issues with overly-long hostnames.
  * Fix mandatory statement error for junos modules (https://github.com/ansible/ansible/pull/50138)
  * Moved error in netconf connection plugin from at import to on connection.
  * This reverts some changes from commit 723daf3. If a line is found in the file, exactly or via regexp matching, it must not be added again. insertafter/insertbefore options are used only when a line is to be inserted, to specify where it must be added.
  * allow using openstack inventory plugin w/o a cache
  * callbacks - Do not filter out exception, warnings, deprecations on failure when using debug (https://github.com/ansible/ansible/issues/47576)
  * certificate_complete_chain - fix behavior when invalid file is parsed while reading intermediate or root certificates.
  * copy - Ensure that the src file contents is converted to unicode in diff information so that it is properly wrapped by AnsibleUnsafeText to prevent unexpected templating of diff data in Python3 (https://github.com/ansible/ansible/issues/45717)
  * correct behaviour of verify_file for vmware inventory plugin, it was always returning True
  * dnf - fix issue where conf_file was not being loaded properly
  * dnf - fix update_cache combined with install operation to not cause dnf transaction failure
  * docker_container - fix network_mode idempotency if the container:&lt;container-name&gt; form is used (as opposed to container:&lt;container-id&gt;) (https://github.com/ansible/ansible/issues/49794)
  * docker_container - warning when non-string env values are found, avoiding YAML parsing issues. Will be made an error in Ansible 2.8. (https://github.com/ansible/ansible/issues/49802)
  * docker_swarm_service - Document labels and container_labels with correct type.
  * docker_swarm_service - Document limit_memory and reserve_memory correctly on how to specify sizes.
  * docker_swarm_service - Document minimal API version for configs and secrets.
  * docker_swarm_service - fix use of Docker API so that services are not detected as present if there is an existing service whose name is a substring of the desired service
  * docker_swarm_service - fixing falsely reporting update_order as changed when option is not used.
  * document old option that was initally missed
  * ec2_instance now respects check mode https://github.com/ansible/ansible/pull/46774
  * fix for network_cli - ansible_command_timeout not working as expected (#49466)
  * fix handling of firewalld port if protocol is missing
  * fix lastpass lookup failure on python 3 (https://github.com/ansible/ansible/issues/42062)
  * flatpak - Fixed Python 2/3 compatibility
  * flatpak - Fixed issue where newer versions of flatpak failed on flatpak removal
  * flatpak_remote - Fixed Python 2/3 compatibility
  * gcp_compute_instance - fix crash when the instance metadata is not set
  * grafana_dashboard - Fix a pair of unicode string handling issues with version checking (https://github.com/ansible/ansible/pull/49194)
  * host execution order - Fix reverse_inventory not to change the order of the items before reversing on python2 and to not backtrace on python3
  * icinga2_host - fixed the issue with not working use_proxy option of the module.
  * influxdb_user - An unspecified password now sets the password to blank, except on existing users. This previously caused an unhandled exception.
  * influxdb_user - Fixed unhandled exception when using invalid login credentials (https://github.com/ansible/ansible/issues/50131)
  * openssl_* - fix error when path contains a file name without path.
  * openssl_csr - fix problem with idempotency of keyUsage option.
  * openssl_pkcs12 - now does proper path expansion for ca_certificates.
  * os_security_group_rule - os_security_group_rule doesn't exit properly when secgroup doesn't exist and state=absent (https://github.com/ansible/ansible/issues/50057)
  * paramiko_ssh - add auth_timeout parameter to ssh.connect when supported by installed paramiko version. This will prevent "Authentication timeout" errors when a slow authentication step (&gt;30s) happens with a host (https://github.com/ansible/ansible/issues/42596)
  * purefa_facts and purefb_facts now correctly adds facts into main ansible_fact dictionary (https://github.com/ansible/ansible/pull/50349)
  * reboot - add appropriate commands to make the plugin work with VMware ESXi (https://github.com/ansible/ansible/issues/48425)
  * reboot - add support for rebooting AIX (https://github.com/ansible/ansible/issues/49712)
  * reboot - gather distribution information in order to support Alpine and other distributions (https://github.com/ansible/ansible/issues/46723)
  * reboot - search common paths for the shutdown command and use the full path to the binary rather than depending on the PATH of the remote system (https://github.com/ansible/ansible/issues/47131)
  * reboot - use a common set of commands for older and newer Solaris and SunOS variants (https://github.com/ansible/ansible/pull/48986)
  * redfish_utils - fix reference to local variable 'systems_service'
  * setup - fix the rounding of the ansible_memtotal_mb value on VMWare vm's (https://github.com/ansible/ansible/issues/49608)
  * vultr_server - fixed multiple ssh keys were not handled.
  * win_copy - Fix copy of a dir that contains an empty directory - https://github.com/ansible/ansible/issues/50077
  * win_firewall_rule - Remove invalid 'bypass' action
  * win_lineinfile - Fix issue where a malformed json block was returned causing an error
  * win_updates - Correctly report changes on success</changelog>
  <changelog author="Matthias Eliasson &lt;matthias.eliasson@gmail.com&gt;" date="1549713600">- Update to version 2.7.7
  Minor Changes:
  * Allow check_mode with supports_generate_diff capability in cli_config. (https://github.com/ansible/ansible/pull/51417)
  * Fixed typo in vmware documentation fragment. Changed "supported added" to "support added".
  Bugfixes:
  * All K8S_AUTH_* environment variables are now properly loaded by the k8s lookup plugin
  * Change backup file globbing for network _config modules so backing up one host's config will not delete the backed up config of any host whose hostname is a subset of the first host's hostname (e.g., switch1 and switch11)
  * Fixes bug where nios_a_record wasn't getting deleted if an uppercase named a_record was being passed. (https://github.com/ansible/ansible/pull/51539)
  * aci_aaa_user - Fix setting user description (https://github.com/ansible/ansible/issues/51406)
  * apt_repository - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * archive - Fix check if archive is created in path to be removed
  * azure_rm inventory plugin - fix azure batch request (https://github.com/ansible/ansible/pull/50006)
  * cnos_backup - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * cnos_image - fixed syntax error (https://github.com/ansible/ansible/pull/47219)
  * consul_kv - minor error-handling bugfix under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * copy - align invocation in return value between check and normal mode
  * delegate_facts - fix to work properly under block and include_role (https://github.com/ansible/ansible/pull/51553)
  * docker_swarm_service - fix endpoint_mode and publish idempotency.
  * ec2_instance - Correctly adds description when adding a single ENI to the instance
  * ensure we have a XDG_RUNTIME_DIR, as it is not handled correctly by some privilege escalation configurations
  * file - Allow state=touch on file the user does not own https://github.com/ansible/ansible/issues/50943
  * fix ansible-pull hanlding of extra args, complex quoting is needed for inline JSON
  * fix ansible_connect_timeout variable in network_cli,netconf,httpapi and nxos_install_os timeout check
  * netapp_e_storagepool - fixed failure under Python 3.7 (https://github.com/ansible/ansible/pull/47219)
  * onepassword_facts - Fix an issue looking up some 1Password items which have a 'password' attribute alongside the 'fields' attribute, not inside it.
  * prevent import_role from inserting dupe into roles: execution when duplicate signature role already exists in the section.
  * reboot - Fix bug where the connection timeout was not reset in the same task after rebooting
  * ssh connection - do not retry with invalid credentials to prevent account lockout (https://github.com/ansible/ansible/issues/48422)
  * systemd - warn when exeuting in a chroot environment rather than failing (https://github.com/ansible/ansible/pull/43904)
  * win_chocolatey - Fix hang when used with proxy for the first time - https://github.com/ansible/ansible/issues/47669
  * win_power_plan - Fix issue where win_power_plan failed on newer Windows 10 builds - https://github.com/ansible/ansible/issues/43827</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551009600">- Update to version 2.7.8
  Minor Changes:
  * Raise AnsibleConnectionError on winrm connnection errors
  Bugfixes:
  * Backport of https://github.com/ansible/ansible/pull/46478 , fixes name collision in haproxy module
  * Fix aws_ec2 inventory plugin code to automatically populate regions when missing as documentation states, also leverage config system vs self default/type validation
  * Fix unexpected error when using Jinja2 native types with non-strict constructed keyed_groups (https://github.com/ansible/ansible/issues/52158).
  * If an ios module uses a section filter on a device which does not support it, retry the command without the filter.
  * acme_challenge_cert_helper * the module no longer crashes when the required ``cryptography`` library cannot be found.
  * azure_rm_managed_disk_facts * added missing implementation of listing managed disks by resource group
  * azure_rm_mysqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_postgresqldatabase * fix force_update bug (https://github.com/ansible/ansible/issues/50978).
  * azure_rm_postgresqldatabase * fix force_update bug.
  * azure_rm_postgresqlserver * fixed issues with passing parameters while updating existing server instance
  * azure_rm_sqlserver * fix for tags support
  * azure_rm_virtualmachine * fixed several crashes in module
  * azure_rm_virtualmachine_facts * fix crash when vm created from custom image
  * azure_rm_virtualmachine_facts * fixed crash related to VM with managed disk attached
  * ec2 * Correctly sets the end date of the Spot Instance request. Sets `ValidUntil` value in proper way so it will be auto-canceled through `spot_wait_timeout` interval.
  * openssl_csr * fixes idempotence problem with PyOpenSSL backend when no Subject Alternative Names were specified.
  * openstack inventory plugin * send logs from sdk to stderr so they do not combine with output
  * psrp * do not display bootstrap wrapper for each module exec run
  * redfish_utils * get standard properties for firmware entries (https://github.com/ansible/ansible/issues/49832)
  * remote home directory * Disallow use of remote home directories that include relative pathing by means of `..` (CVE-2019-3828) (https://github.com/ansible/ansible/pull/52133)
  * ufw * when using ``state: reset`` in check mode, ``ufw --dry-run reset`` was executed, which causes a loss of firewall rules. The ``ufw`` module was adjusted to no longer run ``ufw --dry-run reset`` to prevent this from happening.
  * ufw: make sure that only valid values for ``direction`` are passed on.
  * update GetBiosBootOrder to use standard Redfish resources (https://github.com/ansible/ansible/issues/47571)
  * win become * Fix some scenarios where become failed to create an elevated process
  * win_psmodule * the NuGet package provider will be updated, if needed, to avoid issue under adding a repository
  * yum * Remove incorrect disable_includes error message when using disable_excludes (https://github.com/ansible/ansible/issues/51697)
  * yum * properly handle a proxy config in yum.conf for an unauthenticated proxy</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1552737600">- update URL (use SSL version of the URL)
- prepare update for multiple releases (bsc#1102126, bsc#1109957)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1552824000">- Update to version 2.7.9
  Minor Changes
  * Add missing import for ConnectionError in edge and routeros module_utils.
  * ``to_yaml`` filter updated to maintain formatting consistency when used
    with ``pyyaml`` versions 5.1 and later
    (https://github.com/ansible/ansible/pull/53772)
  * docker_image * set ``changed`` to ``false`` when using ``force: yes`` to
    tag or push an image that ends up being identical to one already present on
    the Docker host or Docker registry.
  * jenkins_plugin * Set new default value for the update_url parameter
    (https://github.com/ansible/ansible/issues/52086)
  Bugfixes
  * Fix bug where some inventory parsing tracebacks were missing or reported under the wrong plugin.
  * Fix rabbitmq_plugin idempotence due to information message in new version of rabbitmq (https://github.com/ansible/ansible/pull/52166)
  * Fixed KeyError issue in vmware_host_config_manager when a supported option isn't already set (https://github.com/ansible/ansible/issues/44561).
  * Fixed issue related to --yaml flag in vmware_vm_inventory. Also fixed caching issue in vmware_vm_inventory (https://github.com/ansible/ansible/issues/52381).
  * If large integers are passed as options to modules under Python 2, module argument parsing will reject them as they are of type ``long`` and not of type ``int``.
  * allow nice error to work when auto plugin reads file w/o `plugin` field
  * ansible-doc * Fix traceback on providing arguemnt --all to ansible-doc command
  * azure_rm_virtualmachine_facts * fixed crash related to attached managed disks (https://github.com/ansible/ansible/issues/52181)
  * basic * modify the correct variable when determining available hashing algorithms to avoid errors when md5 is not available (https://github.com/ansible/ansible/issues/51355)
  * cloudscale * Fix compatibilty with Python3 in version 3.5 and lower.
  * convert input into text to ensure valid comparisons in nmap inventory plugin
  * dict2items * Allow dict2items to work with hostvars
  * dnsimple * fixed a KeyError exception related to record types handling.
  * docker_container * now returns warnings from docker daemon on container creation and updating.
  * docker_swarm * Fixed node_id parameter not working for node removal (https://github.com/ansible/ansible/issues/53501)
  * docker_swarm * do not crash with older docker daemons (https://github.com/ansible/ansible/issues/51175).
  * docker_swarm * fixes idempotency for the ``ca_force_rotate`` option.
  * docker_swarm * improve Swarm detection.
  * docker_swarm * improve idempotency checking; ``rotate_worker_token`` and ``rotate_manager_token`` are now also used when all other parameters have not changed.
  * docker_swarm * now supports docker-py 1.10.0 and newer for most operations, instead only docker 2.6.0 and newer.
  * docker_swarm * properly implement check mode (it did apply changes).
  * docker_swarm * the ``force`` option was ignored when ``state: present``.
  * docker_swarm_service * do basic validation of ``publish`` option if specified (must be list of dicts).
  * docker_swarm_service * don't crash when ``publish`` is not specified.
  * docker_swarm_service * fix problem with docker daemons which do not return ``UpdateConfig`` in the swarm service spec.
  * docker_swarm_service * the return value was documented as ``ansible_swarm_service``, but the module actually returned ``ansible_docker_service``. Documentation and code have been updated so that the variable is now called ``swarm_service``. In Ansible 2.7.x, the old name ``ansible_docker_service`` can still be used to access the result.
  * ec2 * if the private_ip has been provided for the new network interface it shouldn't also be added to top level parameters for run_instances()
  * fix DNSimple to ensure check works even when the number of records is larger than 100
  * get_url * return no change in check mode when checksum matches
  * inventory plugins * Fix creating groups from composed variables by getting the latest host variables
  * inventory_aws_ec2 * fix no_log indentation so AWS temporary credentials aren't displayed in tests
  * jenkins_plugin * Prevent plugin to be reinstalled when state=present (https://github.com/ansible/ansible/issues/43728)
  * lvol * fixed ValueError when using float size (https://github.com/ansible/ansible/issues/32886, https://github.com/ansible/ansible/issues/29429)
  * mysql * MySQLdb doesn't import the cursors module for its own purposes so it has to be imported in MySQL module utilities before it can be used in dependent modules like the proxysql module family.
  * mysql * fixing unexpected keyword argument 'cursorclass' issue after migration from MySQLdb to PyMySQL.
  * mysql_user: match backticks, single and double quotes when checking user privileges.
  * onepassword_facts * Fixes issues which prevented this module working with 1Password CLI version 0.5.5 (or greater). Older versions of the CLI were deprecated by 1Password and will no longer function.
  * openssl_certificate * ``has_expired`` correctly checks if the certificate is expired or not
  * openssl_certificate * fix Python 3 string/bytes problems for `notBefore`/`notAfter` for self-signed and ownCA providers.
  * openssl_certificate * make sure that extensions are actually present when their values should be checked.
  * openssl_csr * improve ``subject`` validation.
  * openssl_csr * improve error messages for invalid SANs.
  * play order is now applied under all circumstances, fixes
  * remote_management foreman * Fixed issue where it was impossible to createdelete a product because product was missing in dict choices ( https://github.com/ansible/ansible/issues/48594 )
  * rhsm_repository * handle systems without any repos
  * skip invalid plugin after warning in loader
  * urpmi module * fixed issue
  * win_certificate_store * Fix exception handling typo
  * win_chocolatey * Fix issue when parsing a beta Chocolatey install * https://github.com/ansible/ansible/issues/52331
  * win_chocolatey_source * fix bug where a Chocolatey source could not be disabled unless ``source`` was also set * https://github.com/ansible/ansible/issues/50133
  * win_domain * Do not fail if DC is already promoted but a reboot is required, return ``reboot_required: True``
  * win_domain * Fix when running without credential delegated authentication * https://github.com/ansible/ansible/issues/53182
  * win_file * Fix issue when managing hidden files and directories * https://github.com/ansible/ansible/issues/42466
  * winrm * attempt to recover from a WinRM send input failure if possible
  * zabbix_hostmacro: fixes truncation of macro contexts that contain colons (see https://github.com/ansible/ansible/pull/51853)
  New Plugins
  * vmware_vm_inventory * VMware Guest inventory source</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554379200">- Update to version 2.7.10
  Minor Changes
- Catch all connection timeout related exceptions and raise AnsibleConnectionError instead
- openssl_pkcs12, openssl_privatekey, openssl_publickey - These modules no longer delete the output file before starting to regenerate the output, or when generating the output failed.
  Bugfixes
- Backport of https://github.com/ansible/ansible/pull/54105, pamd - fix idempotence issue when removing rules
- Use custom JSON encoder in conneciton.py so that ansible objects (AnsibleVaultEncryptedUnicode, for example) can be sent to the persistent connection process
- allow 'dict()' jinja2 global to function the same even though it has changed in jinja2 versions
- azure_rm inventory plugin - fix missing hostvars properties (https://github.com/ansible/ansible/pull/53046)
- azure_rm inventory plugin - fix no nic type in vmss nic. (https://github.com/ansible/ansible/pull/53496)
- deprecate {Get/Set}ManagerAttributes commands (https://github.com/ansible/ansible/issues/47590)
- flatpak_remote - Handle empty output in remote_exists, fixes https://github.com/ansible/ansible/issues/51481
- foreman - fix Foreman returning host parameters
- get_url - Fix issue with checksum validation when using a file to ensure we skip lines in the file that do not contain exactly 2 parts. Also restrict exception handling to the minimum number of necessary lines (https://github.com/ansible/ansible/issues/48790)
- grafana_datasource - Fixed an issue when running Python3 and using basic auth (https://github.com/ansible/ansible/issues/49147)
- include_tasks - Fixed an unexpected exception if no file was given to include.
- openssl_certificate - fix ``state=absent``.
- openssl_certificate, openssl_csr, openssl_pkcs12, openssl_privatekey, openssl_publickey - The modules are now able to overwrite write-protected files (https://github.com/ansible/ansible/issues/48656).
- openssl_dhparam - fix ``state=absent`` idempotency and ``changed`` flag.
- openssl_pkcs12, openssl_privatekey - These modules now accept the output file mode in symbolic form or as a octal string (https://github.com/ansible/ansible/issues/53476).
- openssl_publickey - fixed crash on Python 3 when OpenSSH private keys were used with passphrases.
- openstack inventory plugin: allow "constructed" functionality (``compose``, ``groups``, and ``keyed_groups``) to work as documented.
- random_mac - generate a proper MAC address when the provided vendor prefix is two or four characters (https://github.com/ansible/ansible/issues/50838)
- replace - fix behavior when ``before`` and ``after`` are used together (https://github.com/ansible/ansible/issues/31354)
- report correct CPU information on ARM systems (https://github.com/ansible/ansible/pull/52884)
- slurp - Fix issues when using paths on Windows with glob like characters, e.g. ``[``, ``]``
- ssh - Check the return code of the ssh process before raising AnsibleConnectionFailure, as the error message for the ssh process will likely contain more useful information. This will improve the missing interpreter messaging when using modules such as setup which have a larger payload to transfer when combined with pipelining. (https://github.com/ansible/ansible/issues/53487)
- tower_settings - 'name' and 'value' parameters are always required, module can not be used in order to get a setting
- win_acl - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_acl_inheritance - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_certificate_store - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_chocolatey - Fix incompatibilities with the latest release of Chocolatey ``v0.10.12+``
- win_copy - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_file - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_find - Ensure found files are sorted alphabetically by the path instead of it being random
- win_find - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_owner - Fix issues when using paths with glob like characters, e.g. ``[``, ``]``
- win_psexec - Support executables with a space in the path
- win_reboot - Fix reboot command validation failure when running under the psrp connection plugin
- win_tempfile - Always return the full NTFS absolute path and not a DOS 8.3 path.
- win_user_right - Fix output containing non json data - https://github.com/ansible/ansible/issues/54413
- windows - Fixed various module utils that did not work with path that had glob like chars
- yum - fix disable_excludes on systems with yum rhn plugin enabled (https://github.com/ansible/ansible/issues/53134)</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1558526400">- Update to version 2.8.0
  Major changes:
  * Experimental support for Ansible Collections and content namespacing -
    Ansible content can now be packaged in a collection and addressed via
    namespaces. This allows for easier sharing, distribution, and installation
    of bundled modules/roles/plugins, and consistent rules for accessing
    specific content via namespaces.
  * Python interpreter discovery - The first time a Python module runs on a
    target, Ansible will attempt to discover the proper default Python
    interpreter to use for the target platform/version (instead of immediately
    defaulting to /usr/bin/python). You can override this behavior by
    setting ansible_python_interpreter or via config.
    (see https://github.com/ansible/ansible/pull/50163)
  * become - The deprecated CLI arguments for --sudo, --sudo-user,
  - -ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in
    favor of the more generic --become, --become-user, --become-method, and
  - -ask-become-pass.
  * become - become functionality has been migrated to a plugin architecture,
    to allow customization of become functionality and 3rd party become methods
    (https://github.com/ansible/ansible/pull/50991)
- addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837
  For the full changelog see /usr/share/doc/packages/ansible/changelogs or online:
  https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst</changelog>
  <changelog author="Lars Vogdt &lt;lars@linux-schulserver.de&gt;" date="1559995200">- Update to version 2.8.1
  Full changelog is at /usr/share/doc/packages/ansible/changelogs/
  Bugfixes
  - -------
  - ACI - DO not encode query_string
  - ACI modules - Fix non-signature authentication
  - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading
  - Fix "Interface not found" errors when using eos_l2_interface with nonexistant
    interfaces configured
  - Fix cannot get credential when `source_auth` set to `credential_file`.
  - Fix netconf_config backup string issue
  - Fix privilege escalation support for the docker connection plugin when
    credentials need to be supplied (e.g. sudo with password).
  - Fix vyos cli prompt inspection
  - Fixed loading namespaced documentation fragments from collections.
  - Fixing bug came up after running cnos_vrf module against coverity.
  - Properly handle data importer failures on PVC creation, instead of timing out.
  - To fix the ios static route TC failure in CI
  - To fix the nios member module params
  - To fix the nios_zone module idempotency failure
  - add terminal initial prompt for initial connection
  - allow include_role to work with ansible command
  - allow python_requirements_facts to report on dependencies containing dashes
  - asa_config fix
  - azure_rm_roledefinition - fix a small error in build scope.
  - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network
    peering.
  - cgroup_perf_recap - When not using file_per_task, make sure we don't
    prematurely close the perf files
  - display underlying error when reporting an invalid ``tasks:`` block.
  - dnf - fix wildcard matching for state: absent
  - docker connection plugin - accept version ``dev`` as 'newest version' and
    print warning.
  - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available
    since docker-py 1.8.0, not 2.0.0 as assumed by the version check.
  - docker_container - fix network creation when ``networks_cli_compatible`` is
    enabled.
  - docker_container - use docker API's ``restart`` instead of ``stop``/``start``
    to restart a container.
  - docker_image - if ``build`` was not specified, the wrong default for
    ``build.rm`` is used.
  - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the
    module failed.
  - docker_image - module failed when ``source: build`` was set but
    ``build.path`` options not specified.
  - docker_network module - fix idempotency when using ``aux_addresses`` in
    ``ipam_config``.
  - ec2_instance - make Name tag idempotent
  - eos: don't fail modules without become set, instead show message and continue
  - eos_config: check for session support when asked to 'diff_against: session'
  - eos_eapi: fix idempotency issues when vrf was unspecified.
  - fix bugs for ce - more info see
  - fix incorrect uses of to_native that should be to_text instead.
  - hcloud_volume - Fix idempotency when attaching a server to a volume.
  - ibm_storage - Added a check for null fields in ibm_storage utils module.
  - include_tasks - whitelist ``listen`` as a valid keyword
  - k8s - resource updates applied with force work correctly now
  - keep results subset also when not no_log.
  - meraki_switchport - improve reliability with native VLAN functionality.
  - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and
    clearing functionality
  - netapp_e_volumes - fix workload profileId indexing when no previous workload
    tags exist on the storage array.
  - nxos_acl some platforms/versions raise when no ACLs are present
  - nxos_facts fix &lt;https://github.com/ansible/ansible/pull/57009&gt;
  - nxos_file_copy fix passwordless workflow
  - nxos_interface Fix admin_state check for n6k
  - nxos_snmp_traps fix group all for N35 platforms
  - nxos_snmp_user fix platform fixes for get_snmp_user
  - nxos_vlan mode idempotence bug
  - nxos_vlan vlan names containing regex ctl chars should be escaped
  - nxos_vtp_* modules fix n6k issues
  - openssl_certificate - fix private key passphrase handling for
    ``cryptography`` backend.
  - openssl_pkcs12 - fixes crash when private key has a passphrase and the module
    is run a second time.
  - os_stack - Apply tags conditionally so that the module does not throw up an
    error when using an older distro of openstacksdk
  - pass correct loading context to persistent connections other than local
  - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux
  - postgresql - added initial SSL related tests
  - postgresql - added missing_required_libs, removed excess param mapping
  - postgresql - move connect_to_db and get_pg_version into
    module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514)
  - postgresql_db - add note to the documentation about state dump and the
    incorrect rc (https://github.com/ansible/ansible/pull/57297)
  - postgresql_db - fix for postgresql_db fails if stderr contains output
  - postgresql_ping - fixed a typo in the module documentation
  - preserve actual ssh error when we cannot connect.
  - route53_facts - the module did not advertise check mode support, causing it
    not to be run in check mode.
  - sysctl: the module now also checks the output of STDERR to report if values
    are correctly set (https://github.com/ansible/ansible/pull/55695)
  - ufw - correctly check status when logging is off
  - uri - always return a value for status even during failure
  - urls - Handle redirects properly for IPv6 address by not splitting on ``:``
    and rely on already parsed hostname and port values
  - vmware_vm_facts - fix the support with regular ESXi
  - vyos_interface fix &lt;https://github.com/ansible/ansible/pull/57169&gt;
  - we don't really need to template vars on definition as we do this on demand
    in templating.
  - win_acl - Fix qualifier parser when using UNC paths -
  - win_hostname - Fix non netbios compliant name handling
  - winrm - Fix issue when attempting to parse CLIXML on send input failure
  - xenserver_guest - fixed an issue where VM whould be powered off even though
    check mode is used if reconfiguration requires VM to be powered off.
  - xenserver_guest - proper error message is shown when maximum number of
    network interfaces is reached and multiple network interfaces are added at
    once.
  - yum - Fix false error message about autoremove not being supported
  - yum - fix failure when using ``update_cache`` standalone
  - yum - handle special "_none_" value for proxy in yum.conf and .repo files</changelog>
</package>
<package pkgid="eba0c37a4e3febc28a29bd65b2573c28fd2dd098ab92c13591d11e6208361a4e" name="ant" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="3e70fb47f49ba7b0ab407cc4e8c8b10247c4a1d0bb1b6677790412e13c0cd969" name="ant" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="396ca79563fc6010993cff072a1f571bf35ec9eb0d374b951e88e7542548807f" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="c1fe0ef08df6b87984adb721e15ebf584dd1fea7e8a9150f1cd76651a57a567d" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="b02e33abd472db91c49c6df2ffe96f3ae85b183323023bef980a4f8866daef5f" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="fea0f74f41ce671ace7aebf0e44dd7999dee033ccb73c926ba18d26a71eea106" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="7d23d4fa202bc7fa066ca20a318630e71220250a23c1258db5f0f2d0de91a36d" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="f1892ba988cddc7b333660a53eb685dbbe4b7ac774f3a561e5109ad251a317d9" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="7bcc7d44a2c0aabe2fbc15f7f849366b9b39fa68c878e3cedbc325a1157f40af" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="7628a2d5c4c00e065278ae06f3a39be25660eeccb775a112367c344d62b18159" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="58679bfdbe17a46fd69d383f6f81e001783cf8ef84a529b4d0efc114294fd1d1" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="745a32792a29edb6dde94485a15a599d6a353cdb20f76f7d4204982440a88458" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="289a058f7523c9bb4caf32df5dbcb728629c2978ceb93bb37939c5d0268f5275" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="c3228042f4e6ab780fd41d9b478ae0210bf841b925c41b7c39d3b7237fb690be" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="c3e4c6e7692f689b1b8bf7226860c09a0f4a36edba5a31d854f0a46dae0e9b4c" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="45998075b9b3e42e9fdce2e79b09db9d14c4e5c008a8442f5f9d3b204136d5e7" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="edefc37854d04341f8cb0feadc13d7d81805a27d8cdc0debe7b51bd137eb3231" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="e1e8b9c615200506cbb25c55ff88b8ad136292e98dca89021465732926e0fbab" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="4481df3a561ca589b0d9c3ff9ae30586193eda663696565e94d49bcaa07f7709" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="c14769ffa9c961614342a19e4fdd7143061d8203ca389fbb568a9946e93aa051" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="523403a8a4ba16665e9b3294eae282c8289c68d3ef8e39b6047a1fe2b245fea6" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="0ea9ca2946a321dd7e456d01faa771e92f73034d8e9da76ea086caec46c14664" name="aom-tools" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp150.2.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
</package>
<package pkgid="936f8df38143064a375827a60528ecad69aedf5c4d3e723b149d24498e8eeea3" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="a44d0b5a1928ee8fdce1ffe47d7edb1bd1573173805fab508de6d911545d9b25" name="apache-commons-beanutils" arch="src">
  <version epoch="0" ver="1.9.2" rel="lp150.2.3.1"/>
  <changelog author="skh@suse.de" date="1094385600">- Initial package created with version 1.6.1 (JPackage 1.5)</changelog>
  <changelog author="skh@suse.de" date="1095336000">- Fix prerequires of javadoc subpackage</changelog>
  <changelog author="skh@suse.de" date="1108987200">- update to version 1.7.0
- don't use icecream</changelog>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="ebc08dbd1774fdce715746b7f9da89c61f1e90dea52871f9824b66837b2c03be" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.2" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1121688000">- Current version 1.7.0 from JPackage.org</changelog>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1333368000">- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()</changelog>
  <changelog author="dmacvicar@suse.de" date="1404734400">- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup bit with spec-cleaner</changelog>
  <changelog author="p.drouand@gmail.com" date="1417694400">- Remove java-devel dependency; not needed anymore</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Added patch:
  * jdk9.patch
  - Specify java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1566388800">- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch</changelog>
</package>
<package pkgid="94dc8e25264821d333b9fff199bf7fde7ef4afd9d0e6f4a1ba6bd87532479934" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="b314a81f31ed436ae46d672a4f05a07bc6985aa11e9184dbe7840909833b3b90" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.6.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="7ceed6c896e8bc7cfa9a5b0bfef4034d4ccda8b4b295fe5477c8a14d78cf573c" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="f53754e3e63fee360b175eb9eb75d91a34f0c6aff8de06e489aadac7636ac58a" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.6.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1539000000">- Add patch to fix CVE-2018-11797 (bsc#1111009):
  * improve-skip-duplicates.patch</changelog>
</package>
<package pkgid="403de156296286bcbc6eb34d17baf5b7ced51d2ae91c6ca2d147d99283fc9264" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="03cc818e83173c25cc649f8bb60af88f81588edb117687ce14b3cca3c4e6b0c9" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="ff606cebbbfb020832b2def506cc71610b649cb90911f7fefc50c3e932769ac4" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="aa0892d41d01585fc3a624c243d8fe52531ce4ad6fcb1448970fa15f74fd75bd" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="2af5d70a9c7bc160a2e1888ebec3a73f78fd325029fb5fa6be76fa0f692a5499" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="30a4dee6429b580b5a0670e12b34eb70fd00693b26127956e27c0e0265c86efc" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="917c07e914852d6f42dbdb0b9e81b3b1a4f55ec9b43086353aa4e9e84e649144" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="3c49422b32bd9974a7f3fab55ef4af9cf41b92862ce6116c6b0a11134334add1" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="03275b3602f0aed8cb7a9138eed9e81ea072ca047881526173bd712a0113be8c" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="63481da631cf00c5b397c569d340317ca86beaeb5e51b0e9149b3f84a8c7a1c7" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="32247c3bd9dfbe0221c79c47938a42351ee3016798ae8e42b06705d533495dfc" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="694203dbde547385a1536638d94061028986115f86583709e1462d686156ec90" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="91eb766653626906befd4bc7d3a4059645d2ddb02b9f24fed6b4766fa9770652" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="7e4dd294951cbdc2aa242673a9a4bb4d9d2aae9b94cf7d82420fd9ff62ddd624" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="4b5ce86c5993c985e999e9c5aff0297034cbdd750326560c02371759c29f2afd" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="e1381c13c804cf8b7ecbd38b88fb483245bea981366842c548cb7e3fad238320" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="b86e0e3ef5b446a766eacd59432d5a2cf78bfb69b27f1d13a732a3061e7a09ea" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="34bac8cb0cf5ac305b5cdfc35cf2223d19408744cb2c405d5c7d7bb861405d7b" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="1fe4323b7bdfa26f8b778495613208148a8c234d2eba75ecfab105f5a7705805" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="09b3a761375cbb6ffaab669ce7bc79b8176eceebd2cc5f08b196492fcd258fda" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="549eebe4424cecdf27c3c2cc5c7d3a1495ce709befc150c4db6f4c7d6b7ff8ea" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="fa9cd9d70ce68e4852c30bb0140f78648ab8e36f955f3e7627410cbe544b9d58" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="0d48fe16b331450b3b4d4657e3a7e305717a6536e6b017a6376a1a090af1638f" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="1329978f21cc79d2f1254a015f671afa43365ab91a2bc6192547086330312639" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="d9024e6dd3201e1a294b59f7f9af6a2b5332a6b2e1406f8786798d5340a9a6b6" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="4c827ac9f3f7e9c74deab0e753e5681e9398cd462827d77175227e173bab6a12" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="3d54045310da6192ed46c49b5184f302b61670673140a04af6a09bafac4fd086" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="46cce1b4d8abef08e08b70a9b3f38c181d48c59fe2ffffad0cce1a77187d4fe7" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="638d32130320839ce09c5ee5e3c9dbb8da285bdc9404e9a8b14457ad366883ca" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="60da7731a4e2991ecde69b07f21559e1a0d1627c27384f3d4f48b6a3651eb34c" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="ed3de96e05774ad4613853ccaed2a515a2d267c5a91dfc9759f005eaaae72fcf" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="fc3cf63c56b9bb1842f732ae99be61e99205b50724095f62959eaea9577cf972" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="f2492ac4d53ba1ee84ebb4752ce4b1a40dd1304059e359fb9646564f8e57cd7d" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="9f67e6e809b66ed7fa72427a21eb757ed807c115e1ee34d553eb308f7672f414" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="4d941c83855d2357fe4524778ead26e44b31707330ce5ccfd6d841926923bf06" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="b92f678c10ec343b24b4f5becf605669f9f914b4f845ee8813adbe4281b9a733" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="df9606c24084d929b1bce8ad64c2bc534dc6efba42f598b7565c5066a7854775" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="2f9b7222f5653d7088592808d3e91325bbaecc8877bff8e13462d008bc08f539" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="2bccbbf65ab7738d0b4a386d6676f3a9465dfbbbbdfe1531cfae2baa5209286d" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="450b5cc2ca48a72fd657e52d9d109693c6c261c10f8c3373645ff54007d64c16" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="a7e8b12921385f4ad78bfae00f3e8e14561bf408e503687f218071019da4e564" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="e88f522baa674bd1359bc5994104a86bf9283116e1ce12c31c23701a311bb79d" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="3afd23ef0a571b9d05f8a011a5876acaa40b6f3456e5094d636e9f2405e02962" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="6fb78b4fe061283386faaab23a5a4080a2623666fe243087117b5b5a7657d9ea" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="27b5216ed07ba7549936960e43f87d1d67a7b98e1cda1bc3be1f6279004823c4" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="c4956492c9a52544c32daf421178bbd33ccaeb685dc8caff5edd68dbd1f1df63" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="b599dcaf218e671e6aa30e3e4ed81784d52622a28917047e3bc9908d87cca6ff" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="4e06ff0bbd969073761590d50f99ed379a1ed4cbf6bbc99aa8a30d9c80748cd8" name="apache2-mod_auth_kerb" arch="src">
  <version epoch="0" ver="5.4" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.de" date="1147867200">- initial release</changelog>
  <changelog author="mc@suse.de" date="1158667200">- update to version 5.1</changelog>
  <changelog author="mc@suse.de" date="1166529600">- update to version 5.3</changelog>
  <changelog author="mc@suse.de" date="1189425600">- add mod_auth_kerb-init_creds_opt.dif</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238155200">- update to 5.4:
  * implemented KrbServiceName Any to deal with multiple keytab
    entries for various browsers
  * implemented KrbLocalUserMapping i.e. to strip @REALM from
    username for further use
  * implemented already_succeeded function to avoid hammering the
    KDC with same auth requests in single connection
  * fixed threading issues
  * improved configure and Makefile scripts (mainly for BSD users)
  * fixed minor issues
- minor spec file style fixes
- added patch to fix compiler warnings
- removed mod_auth_kerb-init_creds_opt.dif, has been merged
  upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238500800">- build against heimdal on SLE 9
- added missing %changelog in spec file</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1238587200">- fixed warning fixing patch that was causing a "undefined symbol:
  cmp_gss_type" error at runtime</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832000">- add per-connection authentication caching, based on
  https://sourceforge.net/tracker/?func=detail&amp;aid=1891230&amp;group_id=51775&amp;atid=464526
  by &lt;jorgensen@lowtechsolutions.net&gt;, but made it configurable
  through the KrbCacheAuthentication directive (that is disabled
  by default, as it is to be seen as experimental)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1247832001">- add mod_auth_kerb.apache22.patch that adds Apache 2.2 authn
  provider support (authn_kerberos):
  https://sourceforge.net/tracker/?func=detail&amp;aid=2782088&amp;group_id=51775&amp;atid=464526</changelog>
  <changelog author="draht@suse.de" date="1342094400">- preparation of the package for submission against sle11-sp1,
  review of source and patches/changes, compilation warnings,
  licence and packaging. This is (FATE#313165) (ECO-FATE#313165)
  and [bnc#771265].</changelog>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
</package>
<package pkgid="2904ac7f22ebb45dbf650f81c0f476a6484d3e9575e759882449f2ebdf7d1874" name="apache2-mod_auth_kerb" arch="x86_64">
  <version epoch="0" ver="5.4" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.com" date="1365249600">- add support for apache 2.4
  mod_auth_kerb-5.4-apache24.patch
  http://sourceforge.net/tracker/?func=detail&amp;aid=3521787&amp;group_id=51775&amp;atid=464526
- new format for License</changelog>
  <changelog author="draht@suse.de" date="1396008000">- sles12 submission:
  * mod_auth_kerb.apache22.patch -&gt; mod_auth_kerb.apache22+.patch
    make apache 2.2 modifications unconditional, as they are
    required by apache 2.4, too.
    This immediately means that compiling this package against
    apache 2.0 would not work.
  * rework mod_auth_kerb-5.4-apache24.patch into
    mod_auth_kerb-api_changes_apache24.patch: adaption to apache
    2.4 API, in particular logging and remote IP reference struct
    members.</changelog>
  <changelog author="pgajdos@suse.com" date="1414756800">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="hguo@suse.com" date="1431345600">- Introduce upstream patches:
  * Support s4u2proxy operation.
  * Fix an issue that causes loss of delegation after first request on the connection.
  * Fix an issue that causes HTTP 500 error when user account name is longer than Kerberos principal name.
  * Consider authentication request successful when GSS_S_CONTINUE_NEEDED (multiple-exchange-request) is encountered.
  The existing patch for Apache2.4 compatibility has been re-aligned with the introduction of new patches.</changelog>
  <changelog author="kstreitova@suse.com" date="1432641600">- add new licenses:
  * MIT - for mit-internals.h file
  * ASL 2.0 - for 0101-mod_auth_kerb-5.4-s4u2proxy.patch</changelog>
  <changelog author="hguo@suse.com" date="1433332800">- Clean up of spec file:
  * Fix unrecognised license name (Apache 2.0).
  * Remove build dependencies and macros for building on unsupported SUSE distros.
  * Remove expired macro "debug_package".
  * Fix URL link of the package.
  * Remove unnecessary "INSTALL" document file from file list.</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1443009600">- test module with %apache_test_module_load</changelog>
  <changelog author="pgajdos@suse.com" date="1443787200">- fix build for 11sp3 (add BuildRoot:)</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- add mod_auth_kerb-5.4-auth_segfault.patch to fix a segmentation
  fault in function authenticate_user_krb5pwd() when credentials
  are supplied using basic authentication [bsc#1142545]</changelog>
</package>
<package pkgid="d9c373a7a57d02802aaad6dc396a0ead354f841328fa6ae82f27d083c1eb530d" name="apache2-mod_jk" arch="x86_64">
  <version epoch="0" ver="1.2.43" rel="lp150.2.3.1"/>
  <changelog author="gaboo@gaboo.org" date="1280836800">- Update to version 1.2.30
  * Apache: Improve compatibility with Apache 2.3. (rjung)
  * AJP: Improve socket shutdown handling. (mturk)
  * AJP: Ensure we never reuse a non reusable socket. (mturk)
  * AJP: Tolerate a single excess packet when waiting for cpong. (mturk)
  * AJP: Check protocol correctness more strictly. (mturk)
  * other bug fixes and improvements
  * http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="vlado.paskov@gmail.com" date="1307448000">- Update of README.SUSE file: now reflects configuration steps for
  mod_jk with tomcat6 server. It was refering tomcat5 configuration.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="dimstar@opensuse.org" date="1359374400">- Update to version 1.2.37:
  + Fix compatibility with apache 2.4
- Introduce apxs variable, based on apache_branch. With apache 2.4,
  apxs2 moved from %{_sbindir} to %{_bindir}.</changelog>
  <changelog author="tchvatal@suse.com" date="1401710400">- Version bump to 1.2.40 fixes bnc#880798:
  * Fix forwarding of chunked requests, which is broken in version 1.2.39. (rjung)
  * 56352: Fix regression in memory release. (mturk)
  * Fix status worker display of worker IP address after name or port was changed. (rjung)
  * 56297: Improve key hash function. Copied from APR. (rjung)
  * 55683: Remove quotes from quoted session cookies. (rjung)
  * 53542: ISAPI: Fix grammar in 503 error page. (rjung)
  * 55696: Crash on Mac OS X 10.9 during config parsing. (rjung)
  * Deprecate nt_service from Tomcat Connectors. (mturk)
  * 56133: Fix possible crash when a request fails during request body transfer to the back end and reply_timeout was set. Patch contributed by Hiroto Shimizu. (rjung)
  * Fix status worker not updating parameters for all members. (mturk)
  * 55853: HTTPD: Use the correct API for setting Content-Length. Patch contributed by areese yahoo-inc.com. (rjung)
  * Add IPV6 support for connection to webserver. New directive prefer_ipv6 has been added to control the hostname resolution and preserve backward compatibility. (mturk)
  * Add --disable-sock-cloexec to configure to disable use of SOCK_CLOEXEC (using FD_CLOEXEC + fnctl instead) so built modules will work with Linux kernels prior to 2.6.27. (timw)
  * Clean up config file parsing. Worker names are now restricted to 60 bytes. (rjung)
  * Allow to set a stickyness cookie in case a web framework breaks Tomcat's adding of the routing ID to the end of the JSESSIONID cookie. (rjung)
  * Use max_packet_size also for request body forwarding. (rjung)
  * Apache 2.4: By default forward logical client address as provided by mod_remoteip. When setting JkOptions ForwardPhysicalAddress mod_jk will instead forward the physical peer address. (rjung)
  * Minor documentation improvements. (rjung)</changelog>
  <changelog author="tchvatal@suse.com" date="1401710401">- Cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- use apache rpm macros</changelog>
  <changelog author="pgajdos@suse.com" date="1416830400">- fix tomcat paths in jk.conf [bnc#742618]</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add asc signature file.
- Fix URL for homepage</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Drop the asc again to make dimstar happy</changelog>
  <changelog author="pgajdos@suse.com" date="1433419200">- access configuration conditional in jk.conf example</changelog>
  <changelog author="tchvatal@suse.com" date="1433419201">- Apply patch to fix bnc#927845 CVE-2014-8111 VUL-1: apache2-mod_jk: Tomcat
  mod_jk information leak due to incorrect JkMount/JkUnmount directives
  processing:
  * apache2-mod_jk-CVE-2014-8111.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1441800000">- test package with %apache_test_module_load</changelog>
  <changelog author="tchvatal@suse.com" date="1453291200">- Version update to 1.2.41:
  * remove merged patch apache2-mod_jk-CVE-2014-8111.patch
  * many small bugfixes all around:
    + http://tomcat.apache.org/connectors-doc/miscellaneous/changelog.html</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Just depend on java-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1517486400">- Version update to 1.2.42:
  * Many small fixes
  * Optimalization for new gccs
  * Minor code cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1518523200">- Disable tests for now as the default profile is not working
  properly to load up and upstream should update the sample</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Update to version 1.2.43 [bsc#1085220, CVE-2018-1323]
  * LB: Propagate load factor changes applied by the status worker
    to a load balancer sub worker correctly to all processes.
  * ISAPI: Align the make files for 32-bit and 64-bit builds.
  * Update config.guess and config.sub
  * Update PCRE bundled with the ISAPI redirector to 8.41.
  * Update the ISAPI redirector installation documentation to
    reflect the currently supported versions of Windows.
  * Align the normalization performed by the ISAPI redirector with
    that implemented by Tomcat.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1542283200">- Security fix: [bsc#1114612, CVE-2018-11759]
  * connector path traversal due to mishandled HTTP requests in httpd
  * Added patches:
  - apache2-mod_jk-1.2.43-lb_retries.patch (to introduce lb_retries)
  - apache2-mod_jk-1.2.43-CVE-2018-11759.patch</changelog>
</package>
<package pkgid="2b07c3d4691f80dcbfffdae62d5bbf5f9ccafb37f7c6dcf04f9e04800b4a6f12" name="apache2-mod_nss" arch="src">
  <version epoch="0" ver="1.0.17" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1444824000">- mod_nss-httpd24.patch applied depending on %{apache_branch}
  instead of %{suse_version}, fixes build for sle11 with new apache</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="pgajdos@suse.com" date="1452600000">- %check: access syntax depends on %{apache_branch}</changelog>
  <changelog author="vcizek@suse.com" date="1457956800">- update to 1.0.13
  Update default ciphers to something more modern and secure
  Check for host and netstat commands in gencert before trying to use them
  Add server support for DHE ciphers
  Extract SAN from server/client certificates into env
  Fix memory leaks and other coding issues caught by clang analyzer
  Add support for Server Name Indication (SNI) (#1010751)
  Add support for SNI for reverse proxy connections
  Add RenegBufferSize? option
  Add support for TLS Session Tickets (RFC 5077)
  Fix logical AND support in OpenSSL cipher compatibility
  Correctly handle disabled ciphers (CVE-2015-5244)
  Implement a slew more OpenSSL cipher macros
  Fix a number of illegal memory accesses and memory leaks
  Support for SHA384 ciphers if they are available in NSS
  Add compatibility for mod_ssl-style cipher definitions (#862938)
  Add TLSv1.2-specific ciphers
  Completely remove support for SSLv2
  Add support for sqlite NSS databases (#1057650)
  Compare subject CN and VS hostname during server start up
  Add support for enabling TLS v1.2
  Don't enable SSL 3 by default (CVE-2014-3566)
  Fix CVE-2013-4566
  Move nss_pcache to /usr/libexec
  Support httpd 2.4+
- drop almost all our patches (upstream)
  * 0001-SNI-check-with-NameVirtualHosts.patch
  * mod_nss-CVE-2013-4566-NSSVerifyClient.diff
  * mod_nss-PK11_ListCerts_2.patch
  * mod_nss-add_support_for_enabling_TLS_v1.2.patch
  * mod_nss-array_overrun.patch
  * mod_nss-cipherlist_update_for_tls12-doc.diff
  * mod_nss-cipherlist_update_for_tls12.diff
  * mod_nss-clientauth.patch
  * mod_nss-compare_subject_CN_and_VS_hostname.patch
  * mod_nss-gencert.patch
  * mod_nss-httpd24.patch
  * mod_nss-lockpcache.patch
  * mod_nss-negotiate.patch
  * mod_nss-no_shutdown_if_not_init_2.patch
  * mod_nss-overlapping_memcpy.patch
  * mod_nss-pcachesignal.h
  * mod_nss-proxyvariables.patch
  * mod_nss-reseterror.patch
  * mod_nss-reverse_proxy_send_SNI.patch
  * mod_nss-reverseproxy.patch
  * mod_nss-sslmultiproxy.patch
  * mod_nss-tlsv1_1.patch
  * mod_nss-wouldblock.patch
  * update-ciphers.patch
- add automake and libtool to BuildRequires
- temporarily comment out %check</changelog>
  <changelog author="pgajdos@suse.com" date="1458129600">- fix test: add NSSPassPhraseDialog, point it to plain file</changelog>
  <changelog author="vcizek@suse.com" date="1458216000">- use a whitelist approach for keeping directives in the migration
  script (bsc#961907)
  * modify mod_nss_migrate.pl</changelog>
  <changelog author="vcizek@suse.com" date="1460808000">- update to 1.0.14 (fixes boo#973996)
  * OpenSSL ciphers stopped parsing at +, CVE-2016-3099
  * Created valgrind suppression files to ease debugging
  * Implement SSL_PPTYPE_FILTER to call executables to get
    the key password pins. Can be used to prompt with systemd.
  * Improvements to migrate.pl
- drop mod_nss_migrate.pl and use upstream migrate script instead
  * add mod_nss-migrate.patch</changelog>
  <changelog author="vcizek@suse.com" date="1469793600">- use systemd-ask-password to prompt for a certificate passphrase
  (bsc#972968)
  * drop obsolete mod_nss-bnc863518-reopen_dev_tty.diff</changelog>
  <changelog author="vcizek@suse.com" date="1473940800">- don't disable SSLV2, because it doesn't work with NSS 3.24
  (boo#993642)
  * add mod_nss-dont_disable_SSLV2.patch
- remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in
  (bsc#998176)
- change ownership of the gencert generated NSS database so apache
  can read it (bsc#998180)
  * add mod_nss-gencert-correct-ownership.patch
- use correct configuration path in mod_nss.conf.in (bsc#996282)
- remove %post migration code from the old alias directory
- generate dummy certificates if there aren't any in mod_nss.d
  (bsc#998183)</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Avoid changing permissions through symlinks</changelog>
  <changelog author="vcizek@suse.com" date="1508760000">- Use ss instead of the deprecated netstat in gencert (bsc#1064415)
  * add mod_nss-gencert_use_ss_instead_of_netstat.patch
- spec: cleanup and fix URLs</changelog>
  <changelog author="vcizek@suse.com" date="1512648000">- drop obsolete mod_nss-dont_disable_SSLV2.patch
  * bump up minimal NSS version to 3.25, which we now have everywhere
- Require iproute2 for ss, which is used by gencert to gather noise</changelog>
  <changelog author="vcizek@suse.com" date="1512993600">- Fix NSS database startup permission check (bsc#1057776)
  * add 0001-Handle-group-membership-when-testing-for-file-permis.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- buildrequire apr-devel instead of libapr1-devel
- buildrequire apr-util-devel instead of libapr-util1-devel</changelog>
  <changelog author="vcizek@suse.com" date="1520424000">- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
  * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak
  * Don't set remote user in fixup hook
  * Drop SSLv2 tests because it is completely disabled now
- drop 0001-Handle-group-membership-when-testing-for-file-permis.patch
  (upstream)
- add 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch</changelog>
  <changelog author="vcizek@suse.com" date="1520510400">- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag</changelog>
  <changelog author="vcizek@suse.com" date="1521460800">- Update to 1.0.16
  * Fix up some broken cipher strings from a bad merge
- adjust distro detection, Tumbleweed has NSS 3.35, Leap 15 has 3.34
- drop 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch
  (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1521460801">- Use fixed upstream 1.0.16 tarball
  * https://pagure.io/mod_nss/issue/44</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.0.17
  * Add TLSv1.3 support
  * Update documentation for TLS 1.3
  * Add TLS 1.3 support to the cipher tests
  * PEP-8 fixups
  * Change the default certificate database format to SQLite.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568116800">- Use a stronger password in gencert to pass the stricter tests in
  FIPS mode (bsc#1150133)
  * mod_nss-gencert_stronger_password.patch</changelog>
</package>
<package pkgid="ebab7a44e424d6e0ced620103f78840498b2e0dc054a51e5211a2b55642c764e" name="apache2-mod_nss" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1444824000">- mod_nss-httpd24.patch applied depending on %{apache_branch}
  instead of %{suse_version}, fixes build for sle11 with new apache</changelog>
  <changelog author="pgajdos@suse.com" date="1449835200">- %{apache_branch} converted to number</changelog>
  <changelog author="pgajdos@suse.com" date="1452600000">- %check: access syntax depends on %{apache_branch}</changelog>
  <changelog author="vcizek@suse.com" date="1457956800">- update to 1.0.13
  Update default ciphers to something more modern and secure
  Check for host and netstat commands in gencert before trying to use them
  Add server support for DHE ciphers
  Extract SAN from server/client certificates into env
  Fix memory leaks and other coding issues caught by clang analyzer
  Add support for Server Name Indication (SNI) (#1010751)
  Add support for SNI for reverse proxy connections
  Add RenegBufferSize? option
  Add support for TLS Session Tickets (RFC 5077)
  Fix logical AND support in OpenSSL cipher compatibility
  Correctly handle disabled ciphers (CVE-2015-5244)
  Implement a slew more OpenSSL cipher macros
  Fix a number of illegal memory accesses and memory leaks
  Support for SHA384 ciphers if they are available in NSS
  Add compatibility for mod_ssl-style cipher definitions (#862938)
  Add TLSv1.2-specific ciphers
  Completely remove support for SSLv2
  Add support for sqlite NSS databases (#1057650)
  Compare subject CN and VS hostname during server start up
  Add support for enabling TLS v1.2
  Don't enable SSL 3 by default (CVE-2014-3566)
  Fix CVE-2013-4566
  Move nss_pcache to /usr/libexec
  Support httpd 2.4+
- drop almost all our patches (upstream)
  * 0001-SNI-check-with-NameVirtualHosts.patch
  * mod_nss-CVE-2013-4566-NSSVerifyClient.diff
  * mod_nss-PK11_ListCerts_2.patch
  * mod_nss-add_support_for_enabling_TLS_v1.2.patch
  * mod_nss-array_overrun.patch
  * mod_nss-cipherlist_update_for_tls12-doc.diff
  * mod_nss-cipherlist_update_for_tls12.diff
  * mod_nss-clientauth.patch
  * mod_nss-compare_subject_CN_and_VS_hostname.patch
  * mod_nss-gencert.patch
  * mod_nss-httpd24.patch
  * mod_nss-lockpcache.patch
  * mod_nss-negotiate.patch
  * mod_nss-no_shutdown_if_not_init_2.patch
  * mod_nss-overlapping_memcpy.patch
  * mod_nss-pcachesignal.h
  * mod_nss-proxyvariables.patch
  * mod_nss-reseterror.patch
  * mod_nss-reverse_proxy_send_SNI.patch
  * mod_nss-reverseproxy.patch
  * mod_nss-sslmultiproxy.patch
  * mod_nss-tlsv1_1.patch
  * mod_nss-wouldblock.patch
  * update-ciphers.patch
- add automake and libtool to BuildRequires
- temporarily comment out %check</changelog>
  <changelog author="pgajdos@suse.com" date="1458129600">- fix test: add NSSPassPhraseDialog, point it to plain file</changelog>
  <changelog author="vcizek@suse.com" date="1458216000">- use a whitelist approach for keeping directives in the migration
  script (bsc#961907)
  * modify mod_nss_migrate.pl</changelog>
  <changelog author="vcizek@suse.com" date="1460808000">- update to 1.0.14 (fixes boo#973996)
  * OpenSSL ciphers stopped parsing at +, CVE-2016-3099
  * Created valgrind suppression files to ease debugging
  * Implement SSL_PPTYPE_FILTER to call executables to get
    the key password pins. Can be used to prompt with systemd.
  * Improvements to migrate.pl
- drop mod_nss_migrate.pl and use upstream migrate script instead
  * add mod_nss-migrate.patch</changelog>
  <changelog author="vcizek@suse.com" date="1469793600">- use systemd-ask-password to prompt for a certificate passphrase
  (bsc#972968)
  * drop obsolete mod_nss-bnc863518-reopen_dev_tty.diff</changelog>
  <changelog author="vcizek@suse.com" date="1473940800">- don't disable SSLV2, because it doesn't work with NSS 3.24
  (boo#993642)
  * add mod_nss-dont_disable_SSLV2.patch
- remove deprecated NSSSessionCacheTimeout option from mod_nss.conf.in
  (bsc#998176)
- change ownership of the gencert generated NSS database so apache
  can read it (bsc#998180)
  * add mod_nss-gencert-correct-ownership.patch
- use correct configuration path in mod_nss.conf.in (bsc#996282)
- remove %post migration code from the old alias directory
- generate dummy certificates if there aren't any in mod_nss.d
  (bsc#998183)</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Avoid changing permissions through symlinks</changelog>
  <changelog author="vcizek@suse.com" date="1508760000">- Use ss instead of the deprecated netstat in gencert (bsc#1064415)
  * add mod_nss-gencert_use_ss_instead_of_netstat.patch
- spec: cleanup and fix URLs</changelog>
  <changelog author="vcizek@suse.com" date="1512648000">- drop obsolete mod_nss-dont_disable_SSLV2.patch
  * bump up minimal NSS version to 3.25, which we now have everywhere
- Require iproute2 for ss, which is used by gencert to gather noise</changelog>
  <changelog author="vcizek@suse.com" date="1512993600">- Fix NSS database startup permission check (bsc#1057776)
  * add 0001-Handle-group-membership-when-testing-for-file-permis.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- buildrequire apr-devel instead of libapr1-devel
- buildrequire apr-util-devel instead of libapr-util1-devel</changelog>
  <changelog author="vcizek@suse.com" date="1520424000">- Update to 1.0.15
  * Try to auto-detect the NSS database format if not specified
  * Update nss_pcache.8 man page to drop directory and prefix
  * When a token is configured in password file only authenticate once
  * Return an error when NSSPassPhraseDialog is invalid
  * Move 3DES ciphers down from HIGH to MEDIUM to match OpenSSL 1.0.2k+
  * Add -Werror=implicit-function-declaration to CFLAGS
  * Handle group membership when testing for file permissions
  * NSS system-wide policy now disables SSLv3, don't use it in tests
  * Add missing error messages for libssl errors
  * Fix doc typo in SSL_[SERVER|CLIENT]_SAN_IPaddr env variable name
  * When including additional test config use specific extension
  * Fix the TLS Session ID cache
  * Make an invalid protocol setting fatal
  * Don't use same NSS db in nss_pcache as mod_nss, use NSS_NoDB_Init()
  * Add info log message when FIPS is enabled
  * Add AES-256 and drop DES, CAST128, SKIPJACK as wrapping key types
  * Fix removal of CR from PEM certificates
  * Add OCSP caching and timeout tuning knobs
  * Check the NSS database directory permissions as well as the files
    inside it for read access on startup.
  * Add in simple aliases for ciphers to fix those that
    don't follow the pattern (dhe_rsa_aes_128_sha256,
    dhe_rsa_aes_256_sha256) and those with typos
    (camelia_128_sha, camelia_256_sha)
  * Fix semaphore leak
  * Don't set remote user in fixup hook
  * Drop SSLv2 tests because it is completely disabled now
- drop 0001-Handle-group-membership-when-testing-for-file-permis.patch
  (upstream)
- add 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch</changelog>
  <changelog author="vcizek@suse.com" date="1520510400">- Since the update to NSS 3.35, the default NSS certificate
  database format changed from Berkley DB to SQLite
- use %license tag</changelog>
  <changelog author="vcizek@suse.com" date="1521460800">- Update to 1.0.16
  * Fix up some broken cipher strings from a bad merge
- adjust distro detection, Tumbleweed has NSS 3.35, Leap 15 has 3.34
- drop 0001-Fix-up-some-broken-cipher-strings-from-a-bad-merge.patch
  (upstream)</changelog>
  <changelog author="vcizek@suse.com" date="1521460801">- Use fixed upstream 1.0.16 tarball
  * https://pagure.io/mod_nss/issue/44</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.0.17
  * Add TLSv1.3 support
  * Update documentation for TLS 1.3
  * Add TLS 1.3 support to the cipher tests
  * PEP-8 fixups
  * Change the default certificate database format to SQLite.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1568116800">- Use a stronger password in gencert to pass the stricter tests in
  FIPS mode (bsc#1150133)
  * mod_nss-gencert_stronger_password.patch</changelog>
</package>
<package pkgid="58fe9172b621b9411f309348dce91587f2f083826ae5b1119171fd368219bc11" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="8e1cf7a53d105f048e3ebafcf34dfde215b3678d32050d21dc733394ef55c392" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
</package>
<package pkgid="8c0614e53e0bb3f5f9fae6489d206eee22147f33acbe785e9a3b9a2355630eaf" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.19.1"/>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
</package>
<package pkgid="e69c2d82c26218cae73c27c3fc981bfd8606c008a29b2620a773a87a8c6cea24" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.22.1"/>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
</package>
<package pkgid="24960ad789877df5d5290f07be529c53b7dbeb60f23f90cb21b1dc234cc30d3d" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.25.1"/>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535457600">- align patch names:
  php7-CVE-2018-14851.patch -&gt; php-CVE-2018-14851.patch
  php7-CVE-2017-9120.patch -&gt; php-CVE-2017-9120.patch
  php7-CVE-2018-1000222.patch -&gt; php-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537185600">- reenable php7-dba support of Berkeley DB [bsc#1108554]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1537358400">- security update
  * CVE-2018-17082 [bsc#1108753]
    + php-CVE-2018-17082.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1544443200">- add security patch of imap extension, which is currently disabled
  * CVE-2018-19935 [bsc#1118832]
    + php-CVE-2018-19935.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1545220800">- Enable testsuite during build time and save log to subpackage
   testresults (boo#1119396)</changelog>
  <changelog author="pgajdos@suse.com" date="1551787200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1552305600">- security update
  * CVE-2019-9024 [bsc#1126821]
    + php-CVE-2019-9024.patch
  * CVE-2019-9020 [bsc#1126711]
    + php-CVE-2019-9020.patch
  * CVE-2018-20783 [bsc#1127122]
    + php-CVE-2018-20783.patch
  * CVE-2019-9021 [bsc#1126713]
    + php-CVE-2019-9021.patch
  * CVE-2019-9022 [bsc#1126827]
    + php-CVE-2019-9022.patch
  * CVE-2019-9023 [bsc#1126823]
    + php-CVE-2019-9023.patch
  * CVE-2019-9641 [bsc#1128722]
    + php-CVE-2019-9641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552651200">- upstream bug #41631 is already fixed [bsc#1129032]
- deleted sources
  - README.default_socket_timeout (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1553083200">- security update
- added patches
  CVE-2019-9637 [bsc#1128892]
  + php-CVE-2019-9637.patch
  CVE-2019-9675 [bsc#1128886]
  + php-CVE-2019-9675.patch
  CVE-2019-9638 [bsc#1128889], CVE-2019-9639 [bsc#1128887]
  + php-CVE-2019-9638,9639.patch
  CVE-2019-9640 [bsc#1128883]
  + php-CVE-2019-9640.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556539200">- security update
- added patches
  CVE-2019-11034 [bsc#1132838]
  + php-CVE-2019-11034.patch
  CVE-2019-11035 [bsc#1132837]
  + php-CVE-2019-11035.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- security update
- added patches
  CVE-2019-11036 [bsc#1134322]
  + php-CVE-2019-11036.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2019-11039 [bsc#1138173]
  + php-CVE-2019-11039.patch
  CVE-2019-11040 [bsc#1138172]
  + php-CVE-2019-11040.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-11041 [bsc#1146360]
  + php7-CVE-2019-11041.patch
  CVE-2019-11042 [bsc#1145095]
  + php7-CVE-2019-11042.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1569499200">- turn off run of testsuite as we get Kernel panic on s390x</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1569499201">- drop -n from php invocation from pecl [bsc#1151793]
  https://github.com/pear/pear-core/commit/f94454a74785865cec50bf9d64c410efc29b587a</changelog>
</package>
<package pkgid="b3b8d28ecfb8bbfdb14a9ccd46596f612992338775f1eedfd3458fe05ea21aa3" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="e7942397f134f7ff82f1053067add8d97e79c1dfaa4f443797b65f08a84ecd66" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="2538bcf2cff067d8f8abe39cdf39b8fd18b8d68c5053b83b6cd8b8bfd2515b43" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="d1f0717c3bb87c4eedb83ba8f63f7a8cd6e68f7b761350ea9182c12e67c03235" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="7c4fb972dc24c882c2758e2daeef1e3229e6700b9631512e953d6939490aa97f" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="bcce9d340e29756d40bd5305ec8dd40973f385ce6bd88f43a80a73d977310803" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="38817360f16c5ea279038d75aabbfb721592ebd25189e165e75e7ba4de4b01b1" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="25e961a0a4c6c02d46f5e3405ad1e7ea6c170322679d3b7767ec4ba02827b316" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="751b628765f9bdeba4197ff472b47047b14d3804abb443c3ba23590a9e43a9ba" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="66982ac97b5ce2b7d155790433b8b93e68cd3932ba461ca493aaac3d0817d140" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="81757f579c008a4addeedcef8a10ed230b012eb6b269c596508354ef06a0941a" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="ee0937751ccf6b2c83165c3e8e57bfeb4940ebb537e8303e9e8f0bca084eadbe" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="89058699e99f7c5fc353b99c390f19f365948029659102813de5d44669fa13f6" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="0bb6945c32dab895c15d2122311a60468b85d11708efba77345658cc36d65b8b" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="c219a84a0ad4ccf4f5fec70bb2e51c82a24a72dcd84a739a8d664fb9956964e4" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="de9c84324eaf801b73657f29988f54542c13a8d8025622d599db9203e1db26fd" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="426e2202b8377f21b2e831f6e6e43d7da9f1e9bb9aff683640efc1e8206ce8b1" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="bf1f485e8c91fa8980a647816eea537eaf41d6622ee76458877ef5b176d58133" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.14.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
</package>
<package pkgid="a526c0d123187541f1c8a61f1d74e3c58468ce98045f32c7300602a16b219b57" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.17.1"/>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
</package>
<package pkgid="35d1f85c46eba7c384a9fabf6ca4ad68f877c406082561011b08b818b2704d07" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.20.1"/>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
</package>
<package pkgid="da48d933b4cf56b2f88d5f7efbe6f483a1e15dee03c0c49b9d40ae6b67c48e72" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.23.1"/>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1551268800">- added patches
  fix https://github.com/icing/mod_h2/issues/167 [bsc#1125965]
  + apache2-mod_http2-issue-167.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554292800">- security update
- added patches
  CVE-2019-0211 [bsc#1131233]
  + apache2-CVE-2019-0211.patch (thanks to Simotek)
  CVE-2019-0220 [bsc#1131241]
  + apache2-CVE-2019-0220.patch
  CVE-2019-0217 [bsc#1131239]
  + apache2-CVE-2019-0217.patch
  CVE-2019-0197 [bsc#1131245], CVE-2019-0196 [bsc#1131237]
  + apache2-mod_http2-1.14.1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1566216000">- security update
  * mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082, [bsc#1145741])
  * mod_http2, memory corruption on early pushes (CVE-2019-10081, [bsc#1145742])
  * mod_http2, DoS attack by exhausting h2 workers. (CVE-2019-9517, [bsc#1145575])
  * mod_rewrite potential open redirect (CVE-2019-10098, [bsc#1145738])
  * mod_remoteip: Stack buffer overflow and NULL pointer dereference (CVE-2019-10097, [bsc#1145739])
  * Limited cross-site scripting in mod_proxy error page (CVE-2019-10092, [bsc#1145740])
- added patches
  + apache2-http2-security-issues.patch
  + apache2-CVE-2019-10092.patch
  + apache2-CVE-2019-10097.patch
  + apache2-CVE-2019-10098.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1566475200">- security update
- added patches
  CVE-2019-9517 [bsc#1145575], CVE-2019-10082 [bsc#1145741], CVE-2019-10081 [bsc#1145742]
  + apache2-mod_http2-1.15.4.patch</changelog>
</package>
<package pkgid="f3376d582ccaf25300883c4bf079ed28a803a17e0a6cf3a0abc5c90e50edbf2a" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="10337b786112114a6753f4d36c13f995c2769271040b5c265a37aaf3360f44b1" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
</package>
<package pkgid="b1c519847db9d18703f4a166b02537cca99a4d69811fba7dce15ba69124a53fb" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- consider also patterns in APACHE_CONF_INCLUDE_DIRS as documentation
  says (patch Juergen Gleiss)</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395201">- security update:
  * CVE-2018-11763 [bsc#1109961]
    + apache2-mod_http2-1.11.0.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1547035200">- do not create sysconfig.d when already exists [bsc#1121086]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548331200">- security update
  * CVE-2018-17189 [bsc#1122838]
    + apache2-mod_http2-1.11.4.patch
  * CVE-2018-17199 [bsc#1122839]
    + apache2-CVE-2018-17199.patch</changelog>
</package>
<package pkgid="90c7f3ca645375eabb0a93c69eb68239adb105ebbef1a37e561f42f48cfd7922" name="apparmor" arch="src">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="14175799e732d80b56b4be31fe3a350a14b06a2a38813cd02f366da3ffca84ad" name="apparmor" arch="src">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="ee352836c057e6d661d8bdae74d7f43db47786cae8c011879641cb1dcd6e71dc" name="apparmor" arch="src">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="9fa5e3e65dbc04de870d36ac56d5097853a952f4cacc6fe0167033b371deb1c3" name="apparmor" arch="src">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="761f5d00be7f3eb61721e965c7f262d6ee01affd05c79fcb62aa0af953e3e12a" name="apparmor" arch="src">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="3bf9afa2ad01ed49295f5e285cb2f438a1d9b8b09a1ef2851361a8c779c30bb6" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="bb109636de39cfd8efb862620c9a20b3fac0295804aacceafe04cb602570f5d7" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="12ceca030260ea8129e000ba405e405aa2614a286ab4601edee985783400d732" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="e88f78fd998bd55a9878ab5200af92890ddb30550ed5d3086227081a39012410" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="27870d0f584d6edfee5b4fa2864028cf49174752ea577c03e6c8ce24fdf0f141" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="8af1ae7d3d0000e82c6cb3a3edc4042b7d7cb1339dd08a720c86b1181aba015f" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="607e9527fc21811b82da32adfc70b654fe4157ae58b7a3ca6e5458c08b7fe1b8" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="b59877daf13c9d6026e5e225cdd74f393575f4554465773db557e9dfcfd810bd" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="2c7311b882d165d0d181b8d8aa1127818692d7b693c5a8f49a03404496fc635c" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="feab852d95becf0ec40fbe2281421203f0ea2fd187b4487fcc0f0ae56d64b46b" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="d848ab40d67d9fa9dff2606ac5c72f504b1564b2a05d0e2440185984ecfbfa9e" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="c8100d5ac5d194d9784a1b7c939bdc79237070f5481bb3bd96952b581342caec" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="c2c3eb64b024f0add667b144d36533624698f71080573caeaeead16b865ff058" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="f1aea48a522f7fe232ea55107963e26d4e8abd7910d1ba35601f9ca4b30bef4f" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="7c7b9358a7709072ce72958a614bdd945740b520ac09c931cca6fb931374225d" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="4d3a926944257a84b8fe3365a5a8bfc7bf3e4eb1144b6fbc1f2560c21b9bf0fb" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="064a9a9e897d9a182269314e1aca9071fe890501fee0b9058763e986cb20f5df" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="4b809611975d68ee831944f9fe2c2248c2e2bcc71a754aef9916211e6d5047b4" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="d5c89168c0557c280f59c51d7ad4ae566fc2fa7134626c722366f7cdfd73f5b8" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="f08d53099ceb268b87af6a9557ca0109281352bec44d984ac5c02842884304ee" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="8883661626e6637c2279b050555fdd2a53f0ce76a53891de58bbd7e87ed1e039" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="cd9f4b5ce3abfb8bad835f73d175acceb7cd997caca48dc69867532b59c72a9d" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="a228772599dd134483e879ca79e7c4fdbeaddf0ee6eb6b4b4936975d7cc51be7" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="af377f09df1d87f6d944fce0ed940dbbe31ca10af2d6ddb0002688fb0ca155e7" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="55b2ab63f5ed9bbc31e23460d114e756b43abd6f9ebe7425bcafa4f0cf9afc9e" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="76cbf1357d354bf6b1f3ce39e913e2896e6ac48abad65c41645ab416e678f53b" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="110e88335ce048bce20c148b89222f69b77bf51e7cda5fbabf691043b8cf3fa7" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="b89ef90a6ecec07ff1b92ec728d65e2f7cd1201e78a66755919dee338b42646c" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="8c871fc775f679aef8cdc72b1da96d35c71ccd86f86ee23bebf29d4c0378f54c" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="a26fc9331484e87db8b19a3b5b45e4951a7d347886899786fbaf20505d59e62f" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="3439a2aa0c8cc465a2c1bad37964fdbbe8e9e14851d02113dfb257f0a5316295" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485604800">- split libapparmor into separate spec to get rid of build loop
  involving mariadb, systemd, apparmor, libapr and mariadb again
  (see the discussion in SR 448871 for details)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="62abc0273e9a28d471f5ed16d260af9a2767fcbbcf7244817ffbf55e43e4b26b" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12" rel="lp150.6.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1485777600">- add upstream-changes-r3616..3628.diff:
  - update abstractions/base, abstractions/apache2-common and dovecot profiles
  - merge ask_the_questions() of aa-logprof and aa-mergeprof
  - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
- adjust deleting the cache in profiles %post to the new cache location
- silence errors when deleting the cache (boo#976914)</changelog>
  <changelog author="jmatejek@suse.com" date="1487246400">- add python3-drop-re-locale.patch: remove deprecated re.LOCALE
  flag in Python UI as it was dropped from Python 3.6 (lp#1661766)</changelog>
  <changelog author="kukuk@suse.com" date="1489665600">- Cleanup spec file:
  - don't use insserv if we afterwards call systemd, this can
    have bad side effects
  - remove dead code
  - remove now obsolete 'distro' checks
- Replace init.d script with new wrapper working with systemd</changelog>
  <changelog author="suse-beta@cboltz.de" date="1490443200">- add upstream-changes-r3629..3648.diff:
  - preserve unknown profiles when reloading apparmor.service
    (CVE-2017-6507, lp#1668892, boo#1029696)
  - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
  - update nvidia abstraction for newer nvidia drivers
  - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
  - add --parser, --base and --Include option to aa-easyprof to allow
    non-standard paths (useful for tests) (lp#1521031)
  - move initialization code in apparmor.aa to init_aa(). This allows to
    run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
    don't exist.
  - several improvements in the utils tests
- drop upstreamed python3-drop-re-locale.patch
- no longer delete/skip some of the utils tests (to allow this, add
  parser-tests-dbus-duplicated-conditionals.diff)
- add var.mount dependeny to apparmor.service (boo#1016259#c34)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1499860800">- add JSON support. Required for FATE#323380.
  (apparmor-yast-cleanup.patch, apparmor-json-support.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1500033600">- don't rely on implementation details for reload in %post</changelog>
  <changelog author="jmatejek@suse.com" date="1502452800">- do not require exact X.Y version of "python3"
- require also matching python(abi) which is arguably more important</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1544529600">- Update dnsmasq fix, which was changed by following commit:
  3ef8df6ac ("dnsmasq: Adjust pattern for log files to comply SELinux")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
</package>
<package pkgid="658497f2c4bc05f9252ed61942a870ce1f0afa9afe55f836fcef56d22101c5b9" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.11.2"/>
  <changelog author="coolo@suse.com" date="1506254400">- add apparmor-fix-podsyntax.patch from mailing list to fix
  compilation with perl 5.26</changelog>
  <changelog author="rgoldwyn@suse.com" date="1507032000">- profiles-sockets-temporary-fix.patch to cater to nameservices with the
  new sockets mediation, until unix rules are upstreamed (boo#1061195)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
</package>
<package pkgid="5afc4d6b064c0cbd51defd2564440e61be184d642f7e140aa0bf21c0abd5a21c" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12.2" rel="lp150.6.14.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508241600">- add nameservice-libtirpc.diff to fix NIS/YP logins (boo#1062244)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
</package>
<package pkgid="c715071bdf62737045033879b66d856926ad4e3a7f568ffc14fd14cfa160e36b" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="2.12.3" rel="lp150.6.17.1"/>
  <changelog author="suse-beta@cboltz.de" date="1508932800">- update to AppArmor 2.11.1
  - add permissions to several profiles and abstractions (including
    lp#1650827 and boo#1057900)
  - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
    lp#1661766 and boo#1062667)
  - fix downgrading/converting of 'unix' rules (will be supported in
    kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
    upstream changelog
- remove upstream(ed) patches
  - upstream-changes-r3616..3628.diff
  - upstream-changes-r3629..3648.diff
  - parser-tests-dbus-duplicated-conditionals.diff
  - apparmor-fix-podsyntax.patch
  - sshd-profile-drop-local-include-r3615.diff
- refresh apparmor-yast-cleanup.patch
- add utils-fix-sorted-save_profiles-regression.diff to fix a regression
  in displaying the "changed profiles" list in aa-logprof</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511956800">- read_inactive_profile-exactly-once.patch (bsc#1069346)
  Perform reading of inactive profiles exactly once.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1512043200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - add JSON interface to aa-logprof and aa-genprof (used by YaST)
  - drop old YaST interface code
  - update audio, base and nameservice abstractions
  - allow @{pid} to match 7-digit pids
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog
- drop upstreamed patches
  - apparmor-yast-cleanup.patch
  - apparmor-json-support.patch
  - nameservice-libtirpc.diff
- drop obsolete perl modules (YaST no longer needs them)
- drop patches that were only needed by the obsolete perl modules:
  - apparmor-utils-string-split
  - apparmor-abstractions-no-multiline.diff
- drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
  apparmor_parser
- refresh utils-fix-sorted-save_profiles-regression.diff
- add aa-teardown (new script to unload all profiles)
- make ExecStop in apparmor.service a no-op (workaround for a systemd
  restriction, see boo#996520 and boo#853019 for details)
- lessopen profile: allow capability dac_read_search and dac_override,
  allow groff to execute several helpers (boo#1065388)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - add support for 'owner' rules in aa-logprof and aa-genprof
  - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
  - update aa-decode to also decode PROCTITLE (lp#1736841)
  - several profile and abstraction updates, including boo#1069470
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- drop upstreamed patches:
  - read_inactive_profile-exactly-once.patch
  - utils-fix-sorted-save_profiles-regression.diff
- lessopen profile: change all 'rix' rules to 'mrix'
- add 32-bit-no-uid.diff to fix handling of log events without ouid on
  32 bit systems</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515067200">- add parser-write-cache-warn-only.diff to make cache write failures a
  warning instead of an error (boo#1069906, boo#1074429)
- reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
  to avoid pulling in several Gnome packages on servers (boo#1067477)</changelog>
  <changelog author="kukuk@suse.de" date="1515672000">- add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
  read-only and don't bail out (bsc#1069906, bsc#1074429)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1524052800">- Set flags for profiles represented by glob
  set-flags-for-profiles-represented-by-glob.patch (bsc#1086154)
  fix-regression-in-set-flags.patch
- Add dovecot stats in dovecot profiles
  add-dovecot-stats.patch (bsc#1089787)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1525867200">- add fix-samba-profiles.patch - smbd loads new shared libraries.
  Allow winbindd to access new kerberos credential cache location
  (boo#1092099)</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1539172800">- Backport dnsmasq fix:
  025c7dc6 ("dnsmasq: Add permission to open log files")
  dnsmasq-Add-permission-to-open-log-files.patch
  (bsc#1111345)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1539518400">- update to AppArmor 2.12.1
  - add qt5 and qt5-compose-cache-write abstractions
  - add @{uid} and @{uids} kernel var placeholders
  - several profile and abstraction updates
  - add support for conditional includes ("include if exists")
  - ignore "abi" rules in parser and tools (instead of erroring out)
  - utils: fix overwriting of child profile flags if they differ from
    the main profile
  - several bugfixes (including boo#1100779)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.1
    for detailed upstream release notes
- remove upstream(ed) patches:
  - parser-write-cache-warn-only.diff
  - disable-cache-on-ro-fs.diff
  - add-dovecot-stats.patch
  - set-flags-for-profiles-represented-by-glob.patch
  - fix-regression-in-set-flags.patch
  - fix-samba-profiles.patch
  - dnsmasq-Add-permission-to-open-log-files.patch
- refresh apparmor-enable-profile-cache.diff and
  apparmor-samba-include-permissions-for-shares.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1545393600">- update to AppArmor 2.12.2
  - add profile names to most profiles
  - update dnsmasq profile (pid file and logfile path) (boo#1111342)
  - add vulkan abstraction
  - add letsencrypt certificate path to abstractions/ssl_*
  - ignore *.orig and *.rej files when loading profiles
  - fix aa-complain etc. to handle named profiles
  - several bugfixes and small profile improvements
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.2
    for the detailed upstream changelog</changelog>
  <changelog author="mt@suse.de" date="1545393601">- netconfig: write resolv.conf to /run with link to /etc (fate#325872,
  boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1546948800">- apparmor-lessopen-profile.patch: Change of path of rpm in
  lessopen.sh (boo#1082956, boo#1117354)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1550577600">- Start apparmor after filesystem remount (bsc#1123820)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1551960000">- identd-include-proc-tcp.patch: add /proc/pid/tcp readable (bsc#1125439)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1553774400">-  dovecot-align-pop3-managesieve-login-to-imap-login.patch
  allow network access and notify file creation/access
  (bsc#1120279)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1561896000">- update to AppArmor 2.12.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12.3
    for the detailed upstream changelog
- drop upstreamed patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - dovecot-align-pop3-managesieve-login-to-imap-login.patch
  - identd-include-proc-tcp.patch
  - profile_filename_cornercase.diff
  - dnsmasq-revert-alternation.diff
- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys
- add fix-utils-test-network.diff to fix "make check" in utils/</changelog>
</package>
<package pkgid="bbf62ddfcea7fe1705a96a277c9f5d349e1cfb0925032c8bb46aed7a46a6a1c6" name="apr-util" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="9afbe8d5e98d12c829b17baa7f0cf9559723e42348d7f81b94e019a654a86694" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="poeml@cmdline.net" date="1329566400">- updated to 1.4.1
- fixed crash in memtest testcase. Patch sent upstreams
  https://issues.apache.org/bugzilla/show_bug.cgi?id=52705
  apr-util-1.4.1-testmemcache-initialize-values-array.patch
- removed obsolete libapr-util1-1.3.12-gcc46.patch
- Changes with 1.4.1:
  * ) Apply Windows build fixes for the apr_crypto API.
  Changes with 1.4.0:
  * ) apr_ldap_init: Pass secure=1 to ldapssl_init() with Solaris LDAP SDK.  PR: 42682
  * ) apr_memcache_server_create: Fix possible segfault. PR 51064.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Do not include apr.h and apr_errno.h from system search path in
    apu_errno.h. PR 46487
  * ) Add optional dbm, openssl and nss subpackages to the RPM spec file.
  * ) apr_dbd_freetds: The sybdb.h header file might be freetds/sybdb.h
    or sybdb.h.
  * ) Add apr_crypto implementations for OpenSSL and Mozilla NSS. Add a unit
    test to verify the interoperability of the two modules. Builds default
    to disabled unless explicitly enabled.
  * ) Add the apr_crypto interface, a rewrite of the earlier apr_ssl code,
    based on the modular dso interface used for dbd and ldap. Initially,
    the interface supports symmetrical encryption and decryption. The
    purpose of the interface is to offer portable and interoperable
    access to basic crypto using the native crypto libraries present on
    each platform.
  * ) Add trace probes to hooks, making it easier to inspect APR Hook based
    applications with DTrace or other such mechanisms.
  * ) Implement resource list when threads are unavailable. PR 24325
  Changes with 1.3.13:
  * ) Fix a failure of configure to detect ldap_set_rebind_proc(),
    encountered on Fedora 15 with gcc 4.6.
  * ) apr_thread_pool: Fix thread unsafe pool usage.
  * ) Improve platform detection for bundled expat by updating
    config.guess and config.sub.
  * ) Sync libtool handling of bundled expat from APR.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343822400">- Apache 2.4.x complains "Your APR does not include SSL/EVP support."
  Indeed, that's the case, fix it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1345204800">- Needs libuud-devel now</changelog>
  <changelog author="mls@suse.de" date="1373976000">- get rid of --parents in doc section</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to apr-util 1.5.2
  * apr_uri_parse(): Do not accept invalid characters in the scheme.
  * Fix memory leak in hook sorting function.
  * Fix password validation failure for all crypt and crypt_r based
  * Fix potential data corruption in apr_brigade_write()
  * Fixes for ap_crypto,memcache etc.. see
  https://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.5</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377691200">- Use compiler symbol visibility
- libapr1 does not have symbol *versioning* so requires_ge it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385035200">- version 1.5.3
  * Add support to apr_memcache for unix domain sockets.
  * Add support for Berkeley DB 6.0.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410955200">- version 1.5.4
  * MySQL driver: Fix incorrect handling of bad parameter.
  * apr_crypto_get_driver(): Fix invalid storage reference on error path.
- docs: Tell doxygen not to store timestamps in files.</changelog>
  <changelog author="tchvatal@suse.com" date="1413460800">- Clean up with spec-cleaner
- Kill support of sle10 and sle9
- Remove unused configure switches</changelog>
  <changelog author="coolo@suse.com" date="1413633600">- fix requires after spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1444737600">- require postgresql-devel version at least 9.1.0 to fix build for
  SLE-11-SP4</changelog>
  <changelog author="pgajdos@suse.com" date="1454587200">- require postgresql-devel less then 9.4 to fix build on SLE_12
  and SLE_12_SP1</changelog>
  <changelog author="pgajdos@suse.com" date="1460030400">- require just posgresql-devel everywhere, it seems to work now</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1497873600">- APR-util 1.6.0
  * Update MySQL build to stop using libmysqlclient_r
  * apr_siphash: Implement keyed hash function SipHash
  * apr_buckets: Add apr_bucket_file_set_buf_size()
  * apr_crypto: avoid excessive iteration in bcrypt hash.
  * apr_xml_to_text: Add style APR_XML_X2T_PARSED.
  * see http://www.apache.org/dist/apr/CHANGES-APR-UTIL-1.6 for
  extra details</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Rename package to apr-util
- Drop baselib.conf as it does not target any supported
  architecture</changelog>
  <changelog author="jengelh@inai.de" date="1500292800">- Replace unusual *.?a match by *.la.
- Fix RPM groups, diversify summaries.</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- We need to obsolete same version of package (bsc#1063305)</changelog>
  <changelog author="kstreitova@suse.com" date="1510056000">- APR-util 1.6.1
  * apr_crypto: Fix compatibility with LibreSSL. PR 61596.
  * sdbm: better database/page validation to fail cleanly when
    corrupted [bsc#1064990], CVE-2017-12618</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Add apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2.</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- extend apr-util-mariadb-10.2.patch: Fix detection / build with
  MariaDB 10.2. [bsc#1094754]</changelog>
</package>
<package pkgid="dcaec22ee2ee5a11629864b408ffb4d9c9356d11762400146a80c0efd2b198a1" name="aria2" arch="src">
  <version epoch="0" ver="1.33.1" rel="lp150.5.1"/>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="9a99b6151708a51dc9fcff3771126965c965b4f4f5ed35fcf7b14803111be8b0" name="aria2" arch="x86_64">
  <version epoch="0" ver="1.33.1" rel="lp150.5.1"/>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="9e24def1a2997563e2d38af3d30efdc2fa4c870366253e9a329d31fa8721f885" name="aria2-devel" arch="x86_64">
  <version epoch="0" ver="1.33.1" rel="lp150.5.1"/>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="23a25b8ec979dc2f5a31f4e4c109d4365b68eb1ed9552bca995fcd03bdc3e8ef" name="aria2-lang" arch="noarch">
  <version epoch="0" ver="1.33.1" rel="lp150.5.1"/>
  <changelog author="mpluskal@suse.com" date="1449403200">- Update to 1.19.3
  * Fix bug that pause/unpause seeding torrent prevents new
  downloads from starting
  * Add --bt-enable-hook-after-hash-check option
  * Add --socket-recv-buffer-size option
  * Set the maximum socket receive buffer in bytes. Specifing 0
  will disable this option. This value will be set to socket file
  descriptor using SO_RCVBUF socket option with setsockopt() call.
  * Disable --deferred-input when --save-session is used together
  * base32: decode lowercased characters as well
  * Send the last error message as part of tellStatus RPC response
  * Don't enable mmap if file allocation is disabled
  * Evict timed out pooled socket periodically
  * Don't write control file if content is not changed from
  previous one
  * Remove content-length and content-range if transfer-encoding
  is given
  * Retry after 404 status if --max-file-not-found &gt; 0
- Build shared library</changelog>
  <changelog author="mpluskal@suse.com" date="1457265600">- Update to 1.20.0
  * src/WinConsoleFile.cc: fix colour
  * configure.ac: fix autoreconf error
  * Don't inherit file descriptor to child process
  * Update Russian version documentation
  * Add "seeder" key to tellStatus RPC response
  * WinTLS: Fix hang because of buffered received data
  * Add --max-mmap-limit option
  * mingw: Use SetFileValidData to make --file-allocation=falloc
    work
  * Retry with 504 status code
  * Increase DHT transaction ID from 2 to 4 bytes to avoid conflict
  * Update wslay
  * Add --enable-werror option to configure to enable warning flags
  * Don't modify user variables (e.g., CFLAGS, LIBS, etc)
  * Improve error message when loading pkcs12 file failed
  * Updated dependency and source url's
  * Reduce delay in tracker request
  * Disable IPv6 on non-async NameResolver if configuration wants
  * Fix mysterious 1 second delay with async DNS
  * Fix bug that UDP port was incorrectly used in UDP tracker
    announce request
  * Refactor HttpRequest
  * Send Want-Digest as per RFC 3230
  * Try all found address set to bind sockets with
  - -multiple-interface
  * Replace sourceforge references with aria2.github.io
  * Add system.listMethods RPC method
  * Support content-range from non-compliant server
  * Reduce UDP tracker request timeout
  * Apply --retry-wait when retrying after 404
- Spec file cleanup
  * Dependencies updated
  * Install localised manpages
  * Simplify conditions</changelog>
  <changelog author="mpluskal@suse.com" date="1459425600">- Update to 1.21.0
  * SessionSerializer: Fix bug that pause=true is added to wrong
    item
  * Add "following" to aria2.tellStatus response key as reverse
    link for followedBy
  * mingw: Add warning for falloc
  * Update ciphers in AppleTLS
  * OSX: Enable libssh2 and sftp
  * Update OSX dependencies
  * Fix compile error without TLS support
  * Add support for using gnutls system wide crypto policy
- Update project url</changelog>
  <changelog author="zaitor@opensuse.org" date="1462017600">- Update to version 1.22.0:
  * Add description about possible fragmentation with
  - -file-allocation=trunc.
  * Make single-entry metalink download with multi-file torrent
    work.
  * Add all contributor's names in AUTHORS.
  * Ignore floating number in torrent file.
  * Added support for a dynamic management of the number of
    concurrent downloads as a function of the overall bandwidth
    observed. This change adds --optimize-concurrent-downloads
    option.
  * Add --stream-piece-selector=random.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 1.23.0:
  * Simplify cache write
  * Allow subsecond value in ns cookie.txt file's expiry time field
  * Adjust chromium cookie time
  * import-po: iterate on glob, not ls output
  * Add --stderr option to redirect all stdout log output to stderr
  * Add "hide" to --download-result option
  * Fix downloaded metaurl torrent filename
  * Add a little bit of color to have a better visual of important
    informations
  * Update README URLs based on HTTP redirects
  * Relocate from github.com/tatsuhiro-t/aria2 to
    github.com/aria2/aria2
  * mingw: Defer the falloc warning until falloc is specified by
    option
  * Add bittorrent key to aria2.tellStopped status
  * Addsystem.listNotifications RPC method
  * Report CheckIntegrity info in tellStatus
- Update download url</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update to version 1.24.0:
  * BitTorrent: Allow 32KiB request
  * Don't unchoke peer which is not interested in us
  * Fix bug that evaluation of Peer::amChoking is negated
  * Faster seed/download on fast connection
  * Increase DHT task concurrency to 15
  * Fixed mmap failure check with MAP_FAILED flag
  * Added file size overflow check for mmap on 32bit os
  * Use standard percent-encode for tracker request query
  * mingw32: Gain privilege before opening files
  * Restart active download to apply previously not applicable
    options</changelog>
  <changelog author="mpluskal@suse.com" date="1469448000">- Update to version 1.25.0:
  * Update third-party libraries for binary releases
  * Send have message without too much delay
  * Also send bitfield rather than have messages if bitfield
    message is equal to or less than the sum of have messages
    which otherwise would be sent.
  * Fix bug that causes bogus EOF connection failure in BitTorrent
    downloads
  * Fix frequent interested/not interested message transmission
  * Fix frequent choke/unchoke message transmission
  * Try to use available URI if all pooled requests are sleeping
  * Update expat in OSX build
  * aria2mon: Add --secret option
  * Set server status error on network failure in server
    performance profile
  * Disable AI_ADDRCONFIG if no IPv4/IPv6 address is configured for
    any interface
  * Russian manual: Update aria2c.rst
  * Apply --retry-wait on 503 only
  * Ensure that lowest speed check is done even when download speed
    is 0
  * Document that -o is always relative to -d option
  * Allow larger ut_metadata size
  * mingw: Change FD_SETSIZE to 32768
  * Fix compile error on OS X
- Add aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Trim filler phrases from description.
  Explicitly add BR:pkgconfig so pkgconfigdeps.sh can autocreate
  pkgconfig() symbols.</changelog>
  <changelog author="mpluskal@suse.com" date="1471780800">- Update to version 1.26.0:
  * aria2mon: Replace client.call with local method
  * Reorder a note section in aria2c.rst
  * bash_completion: Add missing options which takes one of
    pre-defined values
  * Replace "/" with "-" in magnet dn name when used as in-memory
    download name
  * Fix Dockerfile.raspberrypi to correctly decompress expat
    archive
  * Enable ccache in travis-ci
  * Enable OSX/macOS build for travis
  * Better auto-renaming
  * Log number of items loaded from input file
  * Link external libraries to libaria2 with --enable-libaria2
  * Allow seconds for seed-time (fractional minutes)
- Drop no longer needed aria2-no-return-in-nonvoid-function.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1472731200">- Update to version 1.26.1:
  * Make assertion hold</changelog>
  <changelog author="mpluskal@suse.com" date="1475496000">- Update to version 1.27.1:
  * Add missing libssl_compat.h to SRCS
- Changes for version 1.27.0:
  * Fix possible cause of crash if UDP tracker is used
  * Remove custom ftruncate64 for Android
  * The latest NDK versions support ftruncate64, so building a
    local copy of ftruncate64 is no longer needed.
  * Also, the arm and x86 builds of ftruncate64 failed when
    targeting API level 21 or higher, as they include which are not
    present starting from API level 21.
  * Fix typo found by Debian's Lintian
  * Add --save-not-found option
  * Compile with openssl 1.1.0</changelog>
  <changelog author="mpluskal@suse.com" date="1476792000">- Update to version 1.28.0:
  * Restore LTLIBINTL in src/Makefile.am
  * Add --keep-unfinished-download-result option
  * Fix -Wexpansion-to-defined warning with clang-3.9
  * Fix bug that file name is not logged with --conditional-get</changelog>
  <changelog author="mpluskal@suse.com" date="1479384000">- Update to version 1.29.0:
  * WinTLS: Fix busy loop on write error
  * Support 1xx non-final response
  * Update wslay
  * Don't download piece which is filtered out (e.g., --select-file)</changelog>
  <changelog author="mpluskal@suse.com" date="1481976000">- Update to version 1.30.0:
  * Fix bug that --disable-websocket causes build error
  * Fix bug that lower bound of optimize-concurrent-downloads becomes 1
  * Print DHT nodes with -S option
  * Take into account address family when resolving DHT node address
  * Allow block device file to -i option
  * Expand ${HOME} to user's home directory in several options
  * The following options implement this substitution:
  - -ca-certificate
  - --certificate
  - -dht-file-path
  - -dht-file-path6
  - --dir
  - -input-file
  - -load-cookies
  - -log
  - -metalink-file
  - -netrc-path
  - -on-bt-download-complete
  - -on-download-complete
  - -on-download-error
  - -on-download-start
  - -on-download-stop
  - -on-download_pause
  - -out
  - -private-key
  - -rpc-certificate
  - -rpc-private-key
  - -save-cookies
  - -save-session
  - -server-stat-if
  - -server-stat-of
  - -torrent-file
  * Document that libaria2 is not thread safe
- Fix typos in changelog</changelog>
  <changelog author="dasantiago@suse.com" date="1484827200">- Version bump to 1.31.0
  * Better error message when local file status cannot be retrieved
  * Fix assertion failure in SimpleRandomizer::getRandomBytes
  * Add option content-disposition-default-utf8</changelog>
  <changelog author="sfalken@opensuse.org" date="1488974400">- Edited %files section to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="petr@cervinka.net" date="1495195200">- Version bump to 1.32.0
  * Clarify --max-concurrent-downloads option
  * Fix compile error with toolchain which lacks IPV6_TCLASS
  * Log directed URI in notice log level
  * Spelling and typo fixes
  * Remove unused Android parts
  * Save control file early
  * Update links in Dockerfile.raspberrypi
  * Propagate disk full error on pre-allocation to last error code</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 1.33.0:
  * libaria2: Return last error code from
    DownloadHandle::getErrorCode
  * libuv: use pkg-config
  * Add --peer-agent option
  * Add --bt-load-saved-metadata option
  * Don't save control file if --auto-save-interval is 0.
  * Fix infinite loop bug when file is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update to version 1.33.1:
  * This release fixes a bug that causes high CPU usage in mingw
    build.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547035200">- Fix CVE-2019-3500 boo#1120488
  * aria2-CVE-2019-3500.patch</changelog>
</package>
<package pkgid="25b43f0f6178d5d38951676acf6b52540a9d0a9f0d9f6a55f319a1ba89ed9f4d" name="arpwatch" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp150.3.3.1"/>
  <changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
</package>
<package pkgid="aaa24518af1ddca9c4a3c46e4813579d37a5d26d75212d7e66825e2d517cb8b5" name="arpwatch-ethercodes-build" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp150.3.3.1"/>
  <changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
</package>
<package pkgid="bfee13bb6ddfd4ff91f19965277551ad695274c1d08a1c8aaab130bc9c771d84" name="at-spi2-atk" arch="src">
  <version epoch="0" ver="2.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Always accept connections as root if unable to find an owning
    user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Avoid lagging with large gtk menus (bgo#754048).</changelog>
  <changelog author="mgorse@suse.com" date="1456833601">- Drop at-spi2.sh; equivalent functionality now upstream
  (bgo#761600).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Don't drop the main context when p2p socket configuration fails
    (bgo#763273).
  + Make sure the runtime directory exists (bgo#763274).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + emit_event: Fix out-of-bounds memory access if class is NULL
    (bgo#758935).
  + Remove a debug print.
  + Collection: fix missing return value (bgo#758934).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1468929600">- Update to version 2.21.4:
  + emit_event: Fix out-of-bounds memory access if class is NULL.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472472000">- Update to version 2.21.91:
  + atk_bridge_adaptor_init: return -1 if NO_AT_BRIDGE is set
    (bgo#770574).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + Remove some inadvertently-committed debugging code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + test: remove atk_table_cell_get_column_index test, as the
    at-spi2-core function no longer exists (and never worked
    anyhow).</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + Fix position getter for table cells.
  + atk-adaptor/bridge: Fix GList handling resulting in memory
    corruption (bgo#781658).
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + Fix memory corruption when deleting an event from the list of
    events for which there are registered listeners (bgo#781658).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Add error-message, error-for, details, and details-for relation
    types.
  + Add Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries, RPM groups and old macros.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.26.0:
  + Single commit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509364800">- Update to version 2.26.1:
  + Meson: Ensure paths written to .pc file are absolute.
  + Package a couple of missing meson.build files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to meson build-system:
  + Add meson BuildRequires.
  + Replace autotools macros with meson, meson_build and
    meson_install.
  + Clean up spec, run spec-cleaner.
- Add explicit pkgconfig(libxml-2.0) BuildRequires: Needed after
  the switch to meson.</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix crash retrieving table header cells (bsc#1127792)..
- Changes in version 2.26.2:
  + Fix a couple of cache-related functions so that they don't
    return without unlocking the mutex (bgo#793625).</changelog>
</package>
<package pkgid="9076a27d8506162a848370cf70b72cf9efeace87092d56ddec5fa2b92d31f170" name="at-spi2-atk-common" arch="x86_64">
  <version epoch="0" ver="2.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Always accept connections as root if unable to find an owning
    user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Avoid lagging with large gtk menus (bgo#754048).</changelog>
  <changelog author="mgorse@suse.com" date="1456833601">- Drop at-spi2.sh; equivalent functionality now upstream
  (bgo#761600).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Don't drop the main context when p2p socket configuration fails
    (bgo#763273).
  + Make sure the runtime directory exists (bgo#763274).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + emit_event: Fix out-of-bounds memory access if class is NULL
    (bgo#758935).
  + Remove a debug print.
  + Collection: fix missing return value (bgo#758934).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1468929600">- Update to version 2.21.4:
  + emit_event: Fix out-of-bounds memory access if class is NULL.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472472000">- Update to version 2.21.91:
  + atk_bridge_adaptor_init: return -1 if NO_AT_BRIDGE is set
    (bgo#770574).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + Remove some inadvertently-committed debugging code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + test: remove atk_table_cell_get_column_index test, as the
    at-spi2-core function no longer exists (and never worked
    anyhow).</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + Fix position getter for table cells.
  + atk-adaptor/bridge: Fix GList handling resulting in memory
    corruption (bgo#781658).
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + Fix memory corruption when deleting an event from the list of
    events for which there are registered listeners (bgo#781658).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Add error-message, error-for, details, and details-for relation
    types.
  + Add Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries, RPM groups and old macros.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.26.0:
  + Single commit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509364800">- Update to version 2.26.1:
  + Meson: Ensure paths written to .pc file are absolute.
  + Package a couple of missing meson.build files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to meson build-system:
  + Add meson BuildRequires.
  + Replace autotools macros with meson, meson_build and
    meson_install.
  + Clean up spec, run spec-cleaner.
- Add explicit pkgconfig(libxml-2.0) BuildRequires: Needed after
  the switch to meson.</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix crash retrieving table header cells (bsc#1127792)..
- Changes in version 2.26.2:
  + Fix a couple of cache-related functions so that they don't
    return without unlocking the mutex (bgo#793625).</changelog>
</package>
<package pkgid="09e6d5ee9dc6c73bfe6fdfba2f33ea7e869bc603aefcd686c1af988aa8c9c172" name="at-spi2-atk-devel" arch="x86_64">
  <version epoch="0" ver="2.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Always accept connections as root if unable to find an owning
    user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Avoid lagging with large gtk menus (bgo#754048).</changelog>
  <changelog author="mgorse@suse.com" date="1456833601">- Drop at-spi2.sh; equivalent functionality now upstream
  (bgo#761600).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Don't drop the main context when p2p socket configuration fails
    (bgo#763273).
  + Make sure the runtime directory exists (bgo#763274).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + emit_event: Fix out-of-bounds memory access if class is NULL
    (bgo#758935).
  + Remove a debug print.
  + Collection: fix missing return value (bgo#758934).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1468929600">- Update to version 2.21.4:
  + emit_event: Fix out-of-bounds memory access if class is NULL.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472472000">- Update to version 2.21.91:
  + atk_bridge_adaptor_init: return -1 if NO_AT_BRIDGE is set
    (bgo#770574).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + Remove some inadvertently-committed debugging code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + test: remove atk_table_cell_get_column_index test, as the
    at-spi2-core function no longer exists (and never worked
    anyhow).</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + Fix position getter for table cells.
  + atk-adaptor/bridge: Fix GList handling resulting in memory
    corruption (bgo#781658).
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + Fix memory corruption when deleting an event from the list of
    events for which there are registered listeners (bgo#781658).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Add error-message, error-for, details, and details-for relation
    types.
  + Add Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries, RPM groups and old macros.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.26.0:
  + Single commit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509364800">- Update to version 2.26.1:
  + Meson: Ensure paths written to .pc file are absolute.
  + Package a couple of missing meson.build files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to meson build-system:
  + Add meson BuildRequires.
  + Replace autotools macros with meson, meson_build and
    meson_install.
  + Clean up spec, run spec-cleaner.
- Add explicit pkgconfig(libxml-2.0) BuildRequires: Needed after
  the switch to meson.</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix crash retrieving table header cells (bsc#1127792)..
- Changes in version 2.26.2:
  + Fix a couple of cache-related functions so that they don't
    return without unlocking the mutex (bgo#793625).</changelog>
</package>
<package pkgid="30524d3f207c854de543e3f6335d8e72ff01ba4cc3c0760c801faf4038c540ef" name="at-spi2-atk-gtk2" arch="x86_64">
  <version epoch="0" ver="2.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.19.90:
  + Always accept connections as root if unable to find an owning
    user.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.19.91:
  + Avoid lagging with large gtk menus (bgo#754048).</changelog>
  <changelog author="mgorse@suse.com" date="1456833601">- Drop at-spi2.sh; equivalent functionality now upstream
  (bgo#761600).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 2.19.92:
  + Don't drop the main context when p2p socket configuration fails
    (bgo#763273).
  + Make sure the runtime directory exists (bgo#763274).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.20.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 2.20.1:
  + emit_event: Fix out-of-bounds memory access if class is NULL
    (bgo#758935).
  + Remove a debug print.
  + Collection: fix missing return value (bgo#758934).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1468929600">- Update to version 2.21.4:
  + emit_event: Fix out-of-bounds memory access if class is NULL.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472472000">- Update to version 2.21.91:
  + atk_bridge_adaptor_init: return -1 if NO_AT_BRIDGE is set
    (bgo#770574).</changelog>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + Remove some inadvertently-committed debugging code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + test: remove atk_table_cell_get_column_index test, as the
    at-spi2-core function no longer exists (and never worked
    anyhow).</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + Fix position getter for table cells.
  + atk-adaptor/bridge: Fix GList handling resulting in memory
    corruption (bgo#781658).
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + Fix memory corruption when deleting an event from the list of
    events for which there are registered listeners (bgo#781658).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Fix use after free when returned objects hold only one ref
    (bgo#781716).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Add error-message, error-for, details, and details-for relation
    types.
  + Add Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries, RPM groups and old macros.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.26.0:
  + Single commit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509364800">- Update to version 2.26.1:
  + Meson: Ensure paths written to .pc file are absolute.
  + Package a couple of missing meson.build files.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to meson build-system:
  + Add meson BuildRequires.
  + Replace autotools macros with meson, meson_build and
    meson_install.
  + Clean up spec, run spec-cleaner.
- Add explicit pkgconfig(libxml-2.0) BuildRequires: Needed after
  the switch to meson.</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix crash retrieving table header cells (bsc#1127792)..
- Changes in version 2.26.2:
  + Fix a couple of cache-related functions so that they don't
    return without unlocking the mutex (bgo#793625).</changelog>
</package>
<package pkgid="ef07feb98d6cb1d765882f9a19dd0e985dc7f8d9e7d591098eb9d94eb5514094" name="at-spi2-core" arch="src">
  <version epoch="0" ver="2.26.3" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + at-spi-bus-launcher: Fix uninitialized variable.
  + Fix return value error in session_manager_connect (bgo#768881).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1484654400">- Update to version 2.23.4:
  + Don't pull in X headers if x11 is disabled (bgo#773710).
  + at-spi-bus-launcher: session management fixes (bgo#774441).
  + events: add recently added page changed event (bgo#719898).
  + roles: EXTENDED roles are deprecated (bgo#720123).</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 2.23.90:
  + Fix an occasional crash when an application is closed
    (bgo#767074).</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.23.92:
  + Table cell API fixes (bgo#779835).</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + atspi_table_cell_get_position: Don't crash on error.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Attempt to fix an occasional crash when an application
    disappears (bgo#767074).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Fix -Wmisleading-indentation warnings.
  + Fix memory leak of at-spi-bus-launcher.
  + Add error-message, error-for, details, and details-for relation
    types.
  + Poll direct dbus connections in the main loop--fixes processes
    being marked hung and the hung flag never being removed.
  + Add Meson build system.
  + Various build fixes.
- Add pkgconfig(xkbcommon-x11) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Update to version 2.25.4:
  + Fix gir generation with autotools (bgo#783994).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 2.25.90:
  + Fix a couple of introspection issues (bgo#784481).
  + atspi_get_a11_bus: don't leak the DBusConnection.
  + Meson fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 2.25.91:
  + Meson build files should now be usable, with the exception of
    the dist target.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 2.25.92:
  + configure.ac: make xkb optional, as intended.
  + Optionally read the bus adddress from the ATSPI_BUS_ADDRESS
    environment variable (bgo#787126).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505131200">- Update to version 2.26.0:
  + m4/gettext.m4, m4/iconv.m4, m4/lib-ld.m4, m4/lib-link.m4,
    m4/lib-prefix.m4, m4/nls.m4, m4/po.m4 and m4/progtest.m4:
    Upgrade to gettext-0.19.8.1.
  + configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.8.</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries and old RPM macros.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 2.26.1:
  + Remove unused dependency on libxkbcommon.
  + Various meson build fixes.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1509537601">- Update to version 2.26.2:
  + dist po/meson.build (bgo#789666).
  + Generate correct sonname when building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to using meson buildsystem:
  + Add meson and gtk-doc BuildRequires.
  + Use meson, meson_build and meson_install macros instead of
    autotools macros.
  + Drop update-desktop-files BuildRequires and stop using
    suse_update_desktop_file macro, no longer needed.
  + Modernize spec, use spec-cleaner.</changelog>
  <changelog author="mgorse@suse.com" date="1512388800">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027, bgo#791124).
- Add at-spi2-core-bgo791167-reproducible-build.patch: use
  @basename@ in templates, rather than @filename@; fixes build
  reproducibility and multiarch conflict (bgo#791167).</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix a possible buffer overrun in the case of a very long
    dbus session address (bgo#791124).
  + Fix atspi_table_cell_get_(row|column)_header_cells (bsc#1127792)..
- Drop at-spi2-core-bgo791124-buffer-overflow.patch: fixed
  upstream.</changelog>
</package>
<package pkgid="aaaa7a165f26bb6333d6beaad78f72ddafee1bc0085002aaeeadb4ddf87eb217" name="at-spi2-core" arch="x86_64">
  <version epoch="0" ver="2.26.3" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + at-spi-bus-launcher: Fix uninitialized variable.
  + Fix return value error in session_manager_connect (bgo#768881).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1484654400">- Update to version 2.23.4:
  + Don't pull in X headers if x11 is disabled (bgo#773710).
  + at-spi-bus-launcher: session management fixes (bgo#774441).
  + events: add recently added page changed event (bgo#719898).
  + roles: EXTENDED roles are deprecated (bgo#720123).</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 2.23.90:
  + Fix an occasional crash when an application is closed
    (bgo#767074).</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.23.92:
  + Table cell API fixes (bgo#779835).</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + atspi_table_cell_get_position: Don't crash on error.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Attempt to fix an occasional crash when an application
    disappears (bgo#767074).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Fix -Wmisleading-indentation warnings.
  + Fix memory leak of at-spi-bus-launcher.
  + Add error-message, error-for, details, and details-for relation
    types.
  + Poll direct dbus connections in the main loop--fixes processes
    being marked hung and the hung flag never being removed.
  + Add Meson build system.
  + Various build fixes.
- Add pkgconfig(xkbcommon-x11) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Update to version 2.25.4:
  + Fix gir generation with autotools (bgo#783994).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 2.25.90:
  + Fix a couple of introspection issues (bgo#784481).
  + atspi_get_a11_bus: don't leak the DBusConnection.
  + Meson fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 2.25.91:
  + Meson build files should now be usable, with the exception of
    the dist target.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 2.25.92:
  + configure.ac: make xkb optional, as intended.
  + Optionally read the bus adddress from the ATSPI_BUS_ADDRESS
    environment variable (bgo#787126).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505131200">- Update to version 2.26.0:
  + m4/gettext.m4, m4/iconv.m4, m4/lib-ld.m4, m4/lib-link.m4,
    m4/lib-prefix.m4, m4/nls.m4, m4/po.m4 and m4/progtest.m4:
    Upgrade to gettext-0.19.8.1.
  + configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.8.</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries and old RPM macros.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 2.26.1:
  + Remove unused dependency on libxkbcommon.
  + Various meson build fixes.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1509537601">- Update to version 2.26.2:
  + dist po/meson.build (bgo#789666).
  + Generate correct sonname when building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to using meson buildsystem:
  + Add meson and gtk-doc BuildRequires.
  + Use meson, meson_build and meson_install macros instead of
    autotools macros.
  + Drop update-desktop-files BuildRequires and stop using
    suse_update_desktop_file macro, no longer needed.
  + Modernize spec, use spec-cleaner.</changelog>
  <changelog author="mgorse@suse.com" date="1512388800">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027, bgo#791124).
- Add at-spi2-core-bgo791167-reproducible-build.patch: use
  @basename@ in templates, rather than @filename@; fixes build
  reproducibility and multiarch conflict (bgo#791167).</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix a possible buffer overrun in the case of a very long
    dbus session address (bgo#791124).
  + Fix atspi_table_cell_get_(row|column)_header_cells (bsc#1127792)..
- Drop at-spi2-core-bgo791124-buffer-overflow.patch: fixed
  upstream.</changelog>
</package>
<package pkgid="1bd76289cf5f9ca4377d23305859e2e69a2952b1bc89f575e8fdfd9d72a334ed" name="at-spi2-core-devel" arch="x86_64">
  <version epoch="0" ver="2.26.3" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + at-spi-bus-launcher: Fix uninitialized variable.
  + Fix return value error in session_manager_connect (bgo#768881).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1484654400">- Update to version 2.23.4:
  + Don't pull in X headers if x11 is disabled (bgo#773710).
  + at-spi-bus-launcher: session management fixes (bgo#774441).
  + events: add recently added page changed event (bgo#719898).
  + roles: EXTENDED roles are deprecated (bgo#720123).</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 2.23.90:
  + Fix an occasional crash when an application is closed
    (bgo#767074).</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.23.92:
  + Table cell API fixes (bgo#779835).</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + atspi_table_cell_get_position: Don't crash on error.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Attempt to fix an occasional crash when an application
    disappears (bgo#767074).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Fix -Wmisleading-indentation warnings.
  + Fix memory leak of at-spi-bus-launcher.
  + Add error-message, error-for, details, and details-for relation
    types.
  + Poll direct dbus connections in the main loop--fixes processes
    being marked hung and the hung flag never being removed.
  + Add Meson build system.
  + Various build fixes.
- Add pkgconfig(xkbcommon-x11) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Update to version 2.25.4:
  + Fix gir generation with autotools (bgo#783994).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 2.25.90:
  + Fix a couple of introspection issues (bgo#784481).
  + atspi_get_a11_bus: don't leak the DBusConnection.
  + Meson fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 2.25.91:
  + Meson build files should now be usable, with the exception of
    the dist target.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 2.25.92:
  + configure.ac: make xkb optional, as intended.
  + Optionally read the bus adddress from the ATSPI_BUS_ADDRESS
    environment variable (bgo#787126).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505131200">- Update to version 2.26.0:
  + m4/gettext.m4, m4/iconv.m4, m4/lib-ld.m4, m4/lib-link.m4,
    m4/lib-prefix.m4, m4/nls.m4, m4/po.m4 and m4/progtest.m4:
    Upgrade to gettext-0.19.8.1.
  + configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.8.</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries and old RPM macros.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 2.26.1:
  + Remove unused dependency on libxkbcommon.
  + Various meson build fixes.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1509537601">- Update to version 2.26.2:
  + dist po/meson.build (bgo#789666).
  + Generate correct sonname when building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to using meson buildsystem:
  + Add meson and gtk-doc BuildRequires.
  + Use meson, meson_build and meson_install macros instead of
    autotools macros.
  + Drop update-desktop-files BuildRequires and stop using
    suse_update_desktop_file macro, no longer needed.
  + Modernize spec, use spec-cleaner.</changelog>
  <changelog author="mgorse@suse.com" date="1512388800">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027, bgo#791124).
- Add at-spi2-core-bgo791167-reproducible-build.patch: use
  @basename@ in templates, rather than @filename@; fixes build
  reproducibility and multiarch conflict (bgo#791167).</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix a possible buffer overrun in the case of a very long
    dbus session address (bgo#791124).
  + Fix atspi_table_cell_get_(row|column)_header_cells (bsc#1127792)..
- Drop at-spi2-core-bgo791124-buffer-overflow.patch: fixed
  upstream.</changelog>
</package>
<package pkgid="badb2a6dd8cffc6cf8ccff013e8eecb11c4e58ee79607242596ebf6ed5707d0f" name="at-spi2-core-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26.3" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + at-spi-bus-launcher: Fix uninitialized variable.
  + Fix return value error in session_manager_connect (bgo#768881).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1484654400">- Update to version 2.23.4:
  + Don't pull in X headers if x11 is disabled (bgo#773710).
  + at-spi-bus-launcher: session management fixes (bgo#774441).
  + events: add recently added page changed event (bgo#719898).
  + roles: EXTENDED roles are deprecated (bgo#720123).</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 2.23.90:
  + Fix an occasional crash when an application is closed
    (bgo#767074).</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.23.92:
  + Table cell API fixes (bgo#779835).</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + atspi_table_cell_get_position: Don't crash on error.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Attempt to fix an occasional crash when an application
    disappears (bgo#767074).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Fix -Wmisleading-indentation warnings.
  + Fix memory leak of at-spi-bus-launcher.
  + Add error-message, error-for, details, and details-for relation
    types.
  + Poll direct dbus connections in the main loop--fixes processes
    being marked hung and the hung flag never being removed.
  + Add Meson build system.
  + Various build fixes.
- Add pkgconfig(xkbcommon-x11) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Update to version 2.25.4:
  + Fix gir generation with autotools (bgo#783994).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 2.25.90:
  + Fix a couple of introspection issues (bgo#784481).
  + atspi_get_a11_bus: don't leak the DBusConnection.
  + Meson fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 2.25.91:
  + Meson build files should now be usable, with the exception of
    the dist target.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 2.25.92:
  + configure.ac: make xkb optional, as intended.
  + Optionally read the bus adddress from the ATSPI_BUS_ADDRESS
    environment variable (bgo#787126).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505131200">- Update to version 2.26.0:
  + m4/gettext.m4, m4/iconv.m4, m4/lib-ld.m4, m4/lib-link.m4,
    m4/lib-prefix.m4, m4/nls.m4, m4/po.m4 and m4/progtest.m4:
    Upgrade to gettext-0.19.8.1.
  + configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.8.</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries and old RPM macros.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 2.26.1:
  + Remove unused dependency on libxkbcommon.
  + Various meson build fixes.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1509537601">- Update to version 2.26.2:
  + dist po/meson.build (bgo#789666).
  + Generate correct sonname when building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to using meson buildsystem:
  + Add meson and gtk-doc BuildRequires.
  + Use meson, meson_build and meson_install macros instead of
    autotools macros.
  + Drop update-desktop-files BuildRequires and stop using
    suse_update_desktop_file macro, no longer needed.
  + Modernize spec, use spec-cleaner.</changelog>
  <changelog author="mgorse@suse.com" date="1512388800">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027, bgo#791124).
- Add at-spi2-core-bgo791167-reproducible-build.patch: use
  @basename@ in templates, rather than @filename@; fixes build
  reproducibility and multiarch conflict (bgo#791167).</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix a possible buffer overrun in the case of a very long
    dbus session address (bgo#791124).
  + Fix atspi_table_cell_get_(row|column)_header_cells (bsc#1127792)..
- Drop at-spi2-core-bgo791124-buffer-overflow.patch: fixed
  upstream.</changelog>
</package>
<package pkgid="85177fe916a022f2f26533d8b5d0f198c4d4535108dbacf33bd04cd50cf74c85" name="at-spi2-core-lang" arch="noarch">
  <version epoch="0" ver="2.26.3" rel="lp150.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474891200">- Update to version 2.22.0:
  + at-spi-bus-launcher: Fix uninitialized variable.
  + Fix return value error in session_manager_connect (bgo#768881).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1484654400">- Update to version 2.23.4:
  + Don't pull in X headers if x11 is disabled (bgo#773710).
  + at-spi-bus-launcher: session management fixes (bgo#774441).
  + events: add recently added page changed event (bgo#719898).
  + roles: EXTENDED roles are deprecated (bgo#720123).</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 2.23.90:
  + Fix an occasional crash when an application is closed
    (bgo#767074).</changelog>
  <changelog author="zaitor@opensuse.org" date="1489492800">- Update to version 2.23.92:
  + Table cell API fixes (bgo#779835).</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 2.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 2.24.1:
  + atspi_table_cell_get_position: Don't crash on error.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495281600">- Update to version 2.25.1:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 2.25.2:
  + Attempt to fix an occasional crash when an application
    disappears (bgo#767074).
  + Add some missing roles to correspond with atk (description
    list, description term, description value, and footnote).</changelog>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 2.25.3:
  + Fix -Wmisleading-indentation warnings.
  + Fix memory leak of at-spi-bus-launcher.
  + Add error-message, error-for, details, and details-for relation
    types.
  + Poll direct dbus connections in the main loop--fixes processes
    being marked hung and the hung flag never being removed.
  + Add Meson build system.
  + Various build fixes.
- Add pkgconfig(xkbcommon-x11) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Update to version 2.25.4:
  + Fix gir generation with autotools (bgo#783994).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 2.25.90:
  + Fix a couple of introspection issues (bgo#784481).
  + atspi_get_a11_bus: don't leak the DBusConnection.
  + Meson fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 2.25.91:
  + Meson build files should now be usable, with the exception of
    the dist target.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 2.25.92:
  + configure.ac: make xkb optional, as intended.
  + Optionally read the bus adddress from the ATSPI_BUS_ADDRESS
    environment variable (bgo#787126).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505131200">- Update to version 2.26.0:
  + m4/gettext.m4, m4/iconv.m4, m4/lib-ld.m4, m4/lib-link.m4,
    m4/lib-prefix.m4, m4/nls.m4, m4/po.m4 and m4/progtest.m4:
    Upgrade to gettext-0.19.8.1.
  + configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.8.</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries and old RPM macros.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 2.26.1:
  + Remove unused dependency on libxkbcommon.
  + Various meson build fixes.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1509537601">- Update to version 2.26.2:
  + dist po/meson.build (bgo#789666).
  + Generate correct sonname when building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Switch to using meson buildsystem:
  + Add meson and gtk-doc BuildRequires.
  + Use meson, meson_build and meson_install macros instead of
    autotools macros.
  + Drop update-desktop-files BuildRequires and stop using
    suse_update_desktop_file macro, no longer needed.
  + Modernize spec, use spec-cleaner.</changelog>
  <changelog author="mgorse@suse.com" date="1512388800">- Add at-spi2-core-bgo791124-buffer-overflow.patch: fix possible
  buffer overflow reading dbus address in at-spi-bus-launcher
  (boo#1073027, bgo#791124).
- Add at-spi2-core-bgo791167-reproducible-build.patch: use
  @basename@ in templates, rather than @filename@; fixes build
  reproducibility and multiarch conflict (bgo#791167).</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.26.3:
  + Fix a possible buffer overrun in the case of a very long
    dbus session address (bgo#791124).
  + Fix atspi_table_cell_get_(row|column)_header_cells (bsc#1127792)..
- Drop at-spi2-core-bgo791124-buffer-overflow.patch: fixed
  upstream.</changelog>
</package>
<package pkgid="5ea6d768de70ba48f45cb5568a2fcef2c5d9c9722b7eda205afb5e864d12dd6b" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.10.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="8d1975f9468a392d7a31915ccf795a9d1d90753d827930efa1cb68292b17598a" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.13.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823, CVE-2019-1010222, bsc#1142433,
  CVE-2019-1010223, bsc#1142436):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
  <changelog author="tiwai@suse.de" date="1563883200">- Fix security issue leading to buffer overflow (CVE-2019-1010224,
  bsc#1142435):
  CVE-2019-1010224-onset-safer-deletion-method.patch</changelog>
</package>
<package pkgid="38e9d6f4058757e4c0055bda1ab0c36261090ba32ccb348b6393cb477648d4c7" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="9d81eab4cff22223175f44a3ef33ffce8ffa7acde9201d0b6e736fd57e7c3997" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.7.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="445460f5205a203d997265d1987be2dec2189b4b5833b5661483cade786033b2" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
</package>
<package pkgid="e692c32b6cec9822763d57a11196d2318e83e65d05acc43bc929a490a3a71e90" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1560340800">- Fix security issues leading to buffer overflow or segfault
  (CVE-2018-19800, bsc#1137828, CVE-2018-19801, bsc#1137822,
  CVE-2018-19802, bsc#1137823, CVE-2019-1010222, bsc#1142433,
  CVE-2019-1010223, bsc#1142436):
  CVE-2018-19800-tempo-fix-buffer-overflow-in-method-parser.patch
  CVE-2018-19801-filterbank-validate-input-parameters.patch
  CVE-2018-19802-notes-prevent-null-pointer-dereference.patch</changelog>
  <changelog author="tiwai@suse.de" date="1563883200">- Fix security issue leading to buffer overflow (CVE-2019-1010224,
  bsc#1142435):
  CVE-2019-1010224-onset-safer-deletion-method.patch</changelog>
</package>
<package pkgid="8ad37f478b555e48606a209c4f7983d70aa727bc15dd3e02fe61447c1c620b30" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="a495eac68747634547f0568d1780344f58219a0ff7c0f205adcbc45d839e91ec" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.7.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="52d0dfa55d8bbab2f056798bef924210dcfc4c84c0d6f635320dff84f7be6e33" name="audiofile" arch="src">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="mboman@suse.de" date="1235304000">- Don't use -fno-strict-aliasing for build. Not needed
- Remove CFLAGS, CXXFLAGS and FFLAGS since it only contains
  $RPM_OPT_FLAGS which is default</changelog>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="fe8ac897c1e2446d8b9cabcf5670d986ed4961fa39280bd9468584d19e566cc4" name="audiofile" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="a88784d5f5a25e16f3c2794426776af2407a4a897bbf6d329e8f17abd118c5f1" name="audiofile" arch="src">
  <version epoch="0" ver="0.3.6" rel="lp150.7.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="qzheng@suse.com" date="1541073600">- Add 0008-CVE-2018-13440.patch to return AF_FAIL
  in that case instead of causing NULL pointer
  dereferences later (bsc#1100523, CVE-2018-13440).</changelog>
</package>
<package pkgid="d6ebc11718103cb33fb0212a79c75baad331530a67404da2f7a063ec078b5f33" name="audiofile" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.7.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="qzheng@suse.com" date="1541073600">- Add 0008-CVE-2018-13440.patch to return AF_FAIL
  in that case instead of causing NULL pointer
  dereferences later (bsc#1100523, CVE-2018-13440).</changelog>
</package>
<package pkgid="e9798db10ec9b6a5b2faaa67f9ed7722d9e99151c456c9584b39e22e1106882f" name="audiofile-devel" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="dc76c45e84a904ed0d25ff3418a377eda17b55360b0661f2d81a9da53d4eb62a" name="audiofile-devel" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.7.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="qzheng@suse.com" date="1541073600">- Add 0008-CVE-2018-13440.patch to return AF_FAIL
  in that case instead of causing NULL pointer
  dereferences later (bsc#1100523, CVE-2018-13440).</changelog>
</package>
<package pkgid="d277147e382e05392dcdad69d1e7eed8801cc5664a62b3d1a8e88a5f2aacaea8" name="audiofile-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="d040c2055262d74a83db6ea9aef7c8ba604dac3f4c31977815f212466336c5fb" name="audiofile-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.7.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="qzheng@suse.com" date="1541073600">- Add 0008-CVE-2018-13440.patch to return AF_FAIL
  in that case instead of causing NULL pointer
  dereferences later (bsc#1100523, CVE-2018-13440).</changelog>
</package>
<package pkgid="a73c219e8d69d07a91e8736642752df2e1375d548c603d4a2d837b64b7255872" name="audiofile-doc" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
</package>
<package pkgid="a1ef48ad3714303fcbf9e3f8bf7a427593e914199bfc689ae1e84a5838737a24" name="audiofile-doc" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp150.7.1"/>
  <changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
  <changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
  <changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
  <changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
  <changelog author="avvissu@yandex.ru" date="1395748800">- Fix unresolvable dependencies for SLE11:
  + add RPM conditional tests for sles_version
- Fix compilation error on SLE11: permission denied:
  + add $DESTDIR to make install</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Add Obsoletes audiofiles-32bit to baselibs.conf</changelog>
  <changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>
  <changelog author="rguenther@suse.com" date="1454068800">- Add audiofile-gcc6.patch to fix compile errors with GCC 6.</changelog>
  <changelog author="alarrosa@suse.com" date="1489060800">- Add 0001-Always-check-the-number-of-coefficients.patch to put in code
  an assert that was removed when building the code for a release
  which checks the number of coeficients in WAVE.cpp .
- Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
  to check for a multiplication overflow in MSADPCM.cpp .
- Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
  check that a multiplication doesn't overflow when calculating a
  buffer size and reduce it if necessary.
- Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
  to clamp index values to fix an index overflow in IMA.cpp .
- Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
  so when there's an unsupported number of bits per sample or an invalid
  number of samples per block, don't only print an error message using
  the error handler, but actually stop parsing the file.
- Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
  check for division by zero in BlockCodec::runPull
- These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
  CVE-2017-6839), boo#1026979 (CVE-2017-6827),
  boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
  boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
  boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
  boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
  boo#1026988 (CVE-2017-6835).</changelog>
  <changelog author="qzheng@suse.com" date="1539864000">- Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
  set the output chunk to the amount of frames we pulled so that
  the next module in the chain has the correct frame count (
  boo#1111586, CVE-2018-17095 ).</changelog>
  <changelog author="qzheng@suse.com" date="1541073600">- Add 0008-CVE-2018-13440.patch to return AF_FAIL
  in that case instead of causing NULL pointer
  dereferences later (bsc#1100523, CVE-2018-13440).</changelog>
</package>
<package pkgid="e6e71d20e5663898a33fea88d95939bd091cf4fa41f28f210f2aff74b6f08f5b" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.3" rel="lp150.6.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1422964800">- Fix autofs.service so that multiple options passed through
  sysconfig AUTOFS_OPTIONS work correctly (bsc#909472)</changelog>
  <changelog author="mszeredi@suse.cz" date="1424174400">- add autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  (bsc#911720)</changelog>
  <changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>
  <changelog author="dmueller@suse.com" date="1430913600">- add autofs-5.1.0-gcc5-fixes.patch: Fix build against gcc 5.x</changelog>
  <changelog author="lchiquitto@suse.com" date="1431864000">- update to version 5.1.1:
  * fix compile error in defaults.c
  * add serialization to sasl init
  * dont allocate dev_ctl_ops too early
  * fix incorrect round robin host detection
  * fix race accessing qdn in get_query_dn()
  * fix leak in cache_push_mapent()
  * fix config entry read buffer not checked
  * fix FILE pointer check in defaults_read_config()
  * fix memory leak in conf_amd_get_log_options()
  * fix signed comparison in inet_fill_net()
  * fix buffer size checks in get_network_proximity()
  * fix leak in get_network_proximity()
  * fix buffer size checks in merge_options()
  * check amd lex buffer len before copy
  * add return check in ldap check_map_indirect()
  * check host macro is set before use
  * check options length before use in parse_amd.c
  * fix some out of order evaluations in parse_amd.c
  * fix copy and paste error in dup_defaults_entry()
  * fix leak in parse_mount()
  * add mutex call return check in defaults.c
  * force disable browse mode for amd format maps
  * fix hosts map options check in lookup_amd_instance()
  * fix memory leak in create_client()
  * fix memory leak in get_exports()
  * fix memory leak in get_defaults_entry()
  * fix out of order clearing of options buffer
  * fix reset amd lexer scan buffer
  * ignore multiple commas in options strings
  * fix typo in flagdir configure option
  * clarify multiple mounts description
  * gaurd against incorrect umount return
  * update man page autofs(8) for systemd
  * dont pass sloppy option for other than nfs mounts
  * make service want network-online
  * fix fix master map type check
  * init qdn before use in get_query_dn()
  * fix typo in update_hosts_mounts()
  * fix hosts map update on reload
  * make negative cache update consistent for all lookup modules
  * ensure negative cache isn't updated on remount
  * dont add wildcard to negative cache
  * add a prefix to program map stdvars
  * add config option to force use of program map stdvars
  * fix incorrect check in parse_mount()
  * handle duplicates in multi mounts
  * revert special case cifs escapes
  * fix map option parsing for 'strictatime'
  * fix showmount search in auto.net
  * remove obsolete comment in auto.net
  * fix macro usage in lookup_program.c
  * fix gcc5 complaints
  * remove unused offset handling code
  * fix mount as you go offset selection
  * link daemon with pthread library (Debian patch)
  * manpage corrections (Debian patch)
  * fix manpages hyphenation (Debian patch).
- ported patches:
  * autofs-5.1.0-dbus-udisks-monitor.patch -&gt;
    autofs-5.1.1-dbus-udisks-monitor.patch
  * autofs-debuginfo-fix.patch -&gt; autofs-5.1.1-debuginfo-fix.patch
  * autofs-5.0.9-suse-auto_master_default.patch -&gt;
    autofs-5.1.1-suse-auto_master_default.patch
  * autofs-5.0.9-task-use-after-free.patch -&gt;
    autofs-5.1.1-task-use-after-free.patch
- remove patches that are now upstream:
  * autofs-5.1.0-dont-pass-sloppy-option-for-other-than-nfs-mounts.patch
  * autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  * autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  * autofs-5.1.0-gcc5-fixes.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233600">- autofs.service: Use KillMode=mixed so "KillSignal" (SIGTERM) is
  only sent to the main process and if still does not exit after
  "TimeoutStopSec" then "SendSIGKILL" is sent to all remaining
  processes of the unit's control group.
  This is the desired behaviour for almost all daemons that
  execute foreign programs.</changelog>
  <changelog author="ro@suse.de" date="1449576000">- add patch autofs-5.1.1-leave_auth_destroy.patch (bnc#958410)
  do not redefined auth_destroy, the reason for this has long
  been fixed in libtirpc (version 0.2.1 is already fine)</changelog>
  <changelog author="jeffm@suse.com" date="1458820800">- improve scalability of direct mount path component creation (bsc#966573).
  * Added autofs-improve-scalability-of-direct-mount-path-comp.patch
  * Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Use libldap_r instead of libldap for thread safety (bsc#955477).
  * Added autofs-use-libldap_r-instead-of-libldap-for-thread-safety.patch</changelog>
  <changelog author="jeffm@suse.com" date="1470830400">- Fix spurious ELOOP on certain kinds of failures (bsc#968918):
  * autofs: fix yp map age not updated in s/_/./g case
  * autofs: properly handle errors in lookup_nss_mount
  * Added patches:
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- remove rpmlintrc, review was boo#782691</changelog>
  <changelog author="jeffm@suse.com" date="1502280000">- update to version 5.1.3:
  * limit getgrgid_r() buffer size
  * increase worker thread per-thread stack size
  * fix offset mount location multiple expansion
  * use malloc for expanded map location
  * fix invalid reference in remount_active_mount()
  * fix work around sss startup delay
  * fix possible NULL derefernce
  * use autofs_point to store expire timeout where possibe
  * add config option to use mount request log id
  * factor out set_thread_mount_request_log_id()
  * log functions to prefix messages with attempt_id if available
  * create thread-local ID for mount attempts
  * add the mount requestor's pid to pending_args
  * delay submount exit for amd submounts
  * fix bogus check in expire_cleanup()
  * handle amd cache option all in amd type auto mounts
  * handle map_option cache for top level mounts
  * capture cache option and its settings during parsing
  * add function conf_amd_get_map_options()
  * check for conflicting amd section mounts
  * include amd mount section mounts in master mounts list
  * add function conf_amd_get_mount_paths()
  * add function conf_amd_get_map_name()
  * add support for amd browsable option
  * add ref counting to struct map_source
  * fix typos in README.amd-maps
  * honor last rw in mount options when doing a bind mount
  * set autofs mounts catatonic at exit
  * make set_direct_mount_catatonic() more general
  * check NFS server availability on local mount fallback
  * make lookup_nss_read_master() return nss status
  * don't return until after master map retry read
  * set sane default master read wait timeout
  * dont exit on master map read fail timeout
  * fix included master map not found return
  * fix quoted key handling in sanitize_path()
  * add sss master map wait config option
  * work around sss startup delay
  * add master read wait option
  * wait for master map available at start
  * update and add README for old autofs schema
  * fix create_client() RPC client handling
  * fix _strncmp() usage
  * fix argc off by one in mount_autofs.c
  * fix cachefs parse message not being logged
  * fix typo in MOUNT_FLAG_GHOST comment
  * Avoid local variable name shadowing another
  * configure: add cache variable for Linux proc filesystem check
  * fix count_mounts() function
  * fix short memory allocation in lookup_amd_instance()
  * Fix fgets(3) size argument (another one)
  * Fix typos in error messages
  * Remove unused local 2KB buffer
  * fix file map changed check
  * Change .requestor to .requester for consistency
  * Fix a typo in CREDITS
  * fix libtirpc detection with -Wl,--as-needed
  * Fix size arg of fgets(3)
  * Drop redundant \n in logerr()
  * Fix compiler warning in try_remount()
  * build: check for clock_gettime in librt
  * fix possible memory leak in nfs mount
  * add config option to suppress not found log message
  * properly handle errors in lookup_nss_mount
  * fix yp map age not updated during map lookup
  * fix 'nameing' typo in autofs.conf
  * add remote-fs.target systemd dependency
  * add autofs(5) note of IPv6 libtirpc requirement
  * fix autofs(5) description of supported map sources
  * fix modules make clean target
  * fix Makefile linking dependencies
  * fix handle_mounts() termination condition check
  * log pipe read errors
  * fix use-after-free in st_queue_handler()
  * always set direct mounts catatonic at exit
  * improve scalability of direct mount path component
  * fix use after free in match_my_name()
  * fix memory leak in get_network_proximity()
  * fix typo in autofs_sasl_bind()
  * fix use after free in open_lookup()
  * fix use after free in sun parser parse_init()
  * fix memory leak in ldap do_init()
  * fix memory leak in nisplus lookup_reinit()
  * fix sasl connection concurrancy problem
  * fix unbind sasl external mech
  * remove unused function elapsed()
  * change time() to use monotonic_clock()
  * change remaining gettimeofday() to use clock_gettime()
  * use monotonic clock for indirect mount condition
  * use monotonic clock for direct mount condition
  * define pending condition init helper function
  * use monotonic clock for alarm thread condition wait
  * define monotonic clock helper functions
  * Add a mode option for master map entries
  * fix error handling of is_mounted()
  * fix out of order call in program map lookup
  * add configuration option to use fqdn in mounts
  * update map_hash_table_size description
  * change lookup to use reinit instead of reopen
  * implement reinit in multi lookup module
  * fix map format check in nss_open_lookup() multi map module
  * factor out alloc multi map context
  * factor out free multi map context
  * add type to struct lookup_mod
  * implement reinit in yp lookup module
  * implement reinit in sss lookup module
  * implement reinit in program lookup module
  * implement reinit in nisplus lookup module
  * implement reinit in ldap lookup module
  * implement reinit in hosts lookup module
  * implement reinit in hesiod lookup module
  * implement reinit in file lookup module
  * implement reinit in dir lookup module
  * implement reinit in parse modules
  * add reinit entry point to modules
  * fix nsswitch handling when opening multi map
  * make open_lookup() return nss status
  * move check_nss_result() to nsswitchr.c
  * fix update_hosts_mounts() return
  * fix missing source sss in multi map lookup
  * fix direct map expire not set for initial empty map
  * fix direct mount stale instance flag reset
  * fix error handling on ldap bind fail
  * fix config old name lookup
  * fix rwlock unlock crash
  * fix return handling of do_reconnect() in ldap module
  * make find_server() return a status
  * make find_dc_server() return a status
  * make connect_to_server() return a status
  * make do_connect() return a status
  * move query dn calculation from do_bind() to do_connect()
  * fix return handling in sss lookup module
  * fix left mount count return from umount_multi_triggers()
  * revert fix libtirpc name clash
  * update libtirpc workaround for new soname
  * fix fix gcc5 complaints
  * Removed patches:
    autofs-5.1.1-task-use-after-free.patch
    autofs-improve-scalability-of-direct-mount-path-comp.patch
    autofs-5.1.1-properly-handle-errors-in-lookup_nss_mount.patch
    autofs-5.1.1-fix-yp-map-age-not-updated-during-map-lookup.patch
    autofs-5.1.1-leave_auth_destroy.patch
  * Updated patches for context:
    autofs-5.1.1-dbus-udisks-monitor.patch</changelog>
  <changelog author="jeffm@suse.com" date="1502280001">- Update URL to use www.kernel.org now that ftp is gone.</changelog>
  <changelog author="jeffm@suse.com" date="1502798400">- Add gpg signature</changelog>
  <changelog author="kukuk@suse.de" date="1502798401">- Add libnsl-devel as build require in preparation of libnsl
  removal from glibc</changelog>
  <changelog author="jeffm@suse.com" date="1508328000">- fix ordering of seteuid/setegid in do_spawn (bsc#1062482).
- fix unset tsd group name handling (bsc#1062482).
- fix possible map instance memory leak (bsc#1038198).
- check map instances for staleness on map update (bsc#1038198).
- Added patches:
  - autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  - autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  - autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  - autofs-5-1-3-fix-unset-tsd-group-name-handling.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510488000">- Add build require for rpcgen (preparation for removing it from
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="nfbrown@suse.com" date="1517745600">- 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  Fix handling of replicated NFS server so that
  selection between servers still works sensibly when
  use_hostname_for_mounts is in effect.
  (bsc#1066720)
- 0002-Fix-monotonic_elapsed.patch
  Fix bug introduced with monotonic-time patches which
  causes nanoseconds to be ignored and effectively
  disables sorting based on response time and/or weight.
  (bsc#1066720)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- BuildRequire pkgconfig(udisks2) instead of udisks2-devel: let's
  be flexible on possible package name changes.
- Package COPYRIGHT as %license instead of %doc.</changelog>
  <changelog author="nfbrown@suse.com" date="1526472000">- 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch
  Fix filedescriptor leak (bsc#1093436)</changelog>
</package>
<package pkgid="6fdef10d97de9bec8dc8c11383ae2d275ef9f2dab0ccfb2d354d1df2ffae49cc" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="cbb786f324cbeb9b0d9a75a0d82ef03a54b822fe05b9a9629634db73de5a42b8" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="fb1b0f1c2544064a6c58d25d3f98574ddf24baf86548a4647c8ca14650501bc5" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="9827a2341770fabe2da28a5b777c57e37082c9f56e6dc67caf5b28bbb11d37a3" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="a7b2bbed2b0966dfbc39d6f23f394b67673ef98548d465013c712a98e080507b" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.63" rel="lp150.2.9.1"/>
  <changelog author="jlopez@suse.com" date="1521806400">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
</package>
<package pkgid="88467573c522515922e5cc36e05791bcc2517d2480382af03673b1b91feaa0d4" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.63" rel="lp150.2.9.1"/>
  <changelog author="jlopez@suse.com" date="1521806400">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
</package>
<package pkgid="02c874d72f4c690460a72dacfcea5aabc6020e84644b1a792156b84d74bf7441" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.66" rel="lp150.2.12.1"/>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
</package>
<package pkgid="13ba972468afd9feb05b587390cb344872a623605600e86200ea4ef0f52dce2a" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.66" rel="lp150.2.12.1"/>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
</package>
<package pkgid="0abe89d8df63e2b67e46e309dfcb39ecdac166d1104fedee6b6649106d68846b" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.67" rel="lp150.2.15.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1523880000">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.0.67</changelog>
</package>
<package pkgid="c17023a93e3f8fd9b01a10c579635da0ed83efb5c7343d3f2af79d1ee095123a" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.67" rel="lp150.2.15.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1523880000">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.0.67</changelog>
</package>
<package pkgid="b8cdca4149797b4ff39a76e42d95fd4e94766954d77cc2adddd6d29780438434" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.69" rel="lp150.2.19.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.0.67</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1556107200">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.0.69</changelog>
</package>
<package pkgid="e2657e515c24298599360b8f6f7ed250b13462cc9c8ca3ebadab4405746a272c" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.69" rel="lp150.2.19.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.0.67</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1556107200">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.0.69</changelog>
</package>
<package pkgid="205fe9906008a617bb90b9e73850ba4bf737d7d0ffa2c7928345b214198cb40a" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="c375d835e200a7bcbfb1c6a42d292487b098280218eb12af177c878be0fa8aa1" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="71c7e332e1d50f02581e9c7ae471d214010d1a54341b1fecead752ac0a0b86e7" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.63" rel="lp150.2.9.1"/>
  <changelog author="jlopez@suse.com" date="1521806400">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
</package>
<package pkgid="429603e0dd4841c368eacb8e787316a50237bd3844d12253bd283179b95e6ddd" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.66" rel="lp150.2.12.1"/>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
</package>
<package pkgid="19b30be4a0bff24f9e74c06871f26dd3e623f2f50af4da2136edbff86c7c4e77" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.67" rel="lp150.2.15.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1523880000">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.0.67</changelog>
</package>
<package pkgid="9be5d94341fec01901e2f04a25afa26b2e664be08568f990d6ab7d9c7248e3ca" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.69" rel="lp150.2.19.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
  <changelog author="knut.anderssen@suse.com" date="1538136000">- AutoYaST configuration module: Enable edit action for firewall
  module (fate#324662).
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1539259200">- AutoInstallRules:  Do a cleanup of the profile being merged with
  (bsc#1108933).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1540209600">- Adapt schema to support the new way of defining a software
  RAID (fate#326573).
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1541160000">- Writing security settings in first AY installation stage.
  So other modules (e.g. users) can rely on these settings now.
  (bnc#1112769)
- 4.0.64</changelog>
  <changelog author="schubi@suse.de" date="1542110400">- Removed unneeded flag network_needed in script section.
  (bsc#1094822)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1548849600">- Fixed conflicting items in rule dialogs (bsc#1123091).
- 4.0.67</changelog>
  <changelog author="Jos&#xE9; Iv&#xE1;n L&#xF3;pez Gonz&#xE1;lez &lt;jlopez@suse.com&gt;" date="1554206400">- Removed check for available devices. When there are no devices,
  the proposal issues will be shown (needed for bsc#1130256).
- 4.0.68</changelog>
  <changelog author="schubi@suse.de" date="1556107200">- Reading IPv6 setting in order to initialize it correctly.
  (bsc#1122660)
- 4.0.69</changelog>
</package>
<package pkgid="3131b2102900d99a5d61d982ea683dd4063f060a8aee1c3fbacc669534040bf6" name="avahi" arch="src">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="2434623837bedfddab8d038c47d18dcecb2ca505fd647682265c9c62e95a8bb2" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="8c15fae36b59bd00741b1d9ee2429cab28ec0d204a7f658f81dd30ea74e34419" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="48e7d61baf34c24823c833a584725ce2a47468a85494790ce1d91444c0c1a3ad" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="f853bb6672adace260acb6643f2d287e4a5f79b09d39aee9442ae24a8a86480a" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="b618860ac35618366fdbb230e57738bb23ebb45a654c2d2bca43ee1190120af5" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="f7ea4b0772bfc6439b78fe4792c284236f05881bb1c0536396ce434666640f54" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="d131cb4334fbd42161480a3ad6f003ebc9045c44e792290224a59815d12ecd30" name="avahi-mono" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="bwiedemann@suse.com" date="1492776000">- use strip-nondeterminism to make build fully reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="8c6805459600887d0fc2a9713bedf0a771a2ac50b5ccda56675e466d8b0325b3" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
  <changelog author="mt@suse.com" date="1393502400">- Do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845, bnc#851953).</changelog>
  <changelog author="aj@suse.com" date="1397563200">- We've moved everything to /run, adjust file list as well.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
</package>
<package pkgid="0906c97436f3d7f676e6e6d30bbb0590c8a0ce84d80382cbd77fae87dcdbe682" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="lp150.4.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b208daf65f990138cee2cc36898893a7a966761e598b068a316135efe4dd2556" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.16.223" rel="lp150.8.1"/>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1532260800">- Update to version 1.15.63
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.63/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1534075200">- Be less strict with the YAML version requirement
- Switch the license file to %license</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1534161600">- Update to version 1.15.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.76/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1536840000">- Update to version 1.16.1 (bsc#1105988, bsc#1092493)
  + Fix CVE-2018-15869
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.1/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Replace vendored version of six from botocore with upstream version
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1541505600">- Update to version 1.16.48
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.48/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1546776000">- Update to version 1.16.84
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548331200">- Update to version 1.16.94
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="3b1deeb916d25259fe7b32bc465036fdc5704383a9d37c62e6a8caa4fa9e6d03" name="aws-cli" arch="src">
  <version epoch="0" ver="1.16.223" rel="lp150.8.1"/>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1532260800">- Update to version 1.15.63
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.63/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1534075200">- Be less strict with the YAML version requirement
- Switch the license file to %license</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1534161600">- Update to version 1.15.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.76/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1536840000">- Update to version 1.16.1 (bsc#1105988, bsc#1092493)
  + Fix CVE-2018-15869
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.1/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Replace vendored version of six from botocore with upstream version
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1541505600">- Update to version 1.16.48
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.48/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1546776000">- Update to version 1.16.84
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.84/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548331200">- Update to version 1.16.94
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.94/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1550059200">- Update to version 1.16.103
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.103/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1560340800">- Update to version 1.16.176
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.176/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version constraints for python-PyYAML and python-rsa
- Run fdupes to hardlink duplicate files
  + Add fdupes to BuildRequires
  + Add %fdupes invocation to %install
- Run recursive find with chmod to remove executable bit for
  REST files in example folder to fix rpmlint warning</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561032000">- Update to version 1.16.182
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.182/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1561723200">- Update to version 1.16.189
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.189/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566475200">- Update to version 1.16.223
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.223/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="58f9d91f8040b61aa65c4057192a137a701a56f9cf1ac8c282ab28b8d0a11db2" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.16.61" rel="lp150.3.3.1"/>
  <changelog author="rjschwei@suse.com" date="1432641600">- update to version 1.7.29 (bnc#905354)
  + Follow up to previous update to address compatibility with latest
    amazon-ecs-agent
  + From 1.7.28
  - feature:aws ec2: Add support for Spot Fleet.
  - feature:aws opsworks: Add support for custom AutoScaling.
  - feature:aws elasticbeanstalk: Update model to latest version.
  + From 1.7.27
  - feature:aws ds: Add support for AWS Directory Service.
  - feature:aws ec2: Add support for VPC endpoints for Amazon S3.
  - feature:aws ec2: Add support for EIP Migration.
  - feature:aws logs: Add support for filtering log events.
  + From 1.7.26
  - feature:aws glacier: Add support for vault policies.
  - bugfix:aws iam create-open-id-connect-provider: Fix issue where the
  - -url parameter would try to retrieve the contents from the url instead
    of use the url as its value. (issue 1317)
  - bugfix:aws workspaces: Fix issue where throttling errors were not
    being retried (botocore issue 529)
  + From 1.7.25
  - feature:aws dynamodb query: Add support for KeyConditonExpression.
  + From 1.7.24
  - feature:aws help topics: Add support for listing available help topics.
  - feature:aws help config-vars: Add help topic for configuration variables.
  - feature:aws help return-codes: Add help topic for return codes.
  - feature:aws help s3-config: Add help topic for configuration of s3
    commands.
  - bugfix:aws lambda create-function/update-function-code: Improve
    error message when invalid --zip-file values are provided (issue 1296)
  - feature:aws ec2: Add support for new VM Import APIs, including
    import-image. The new APIs provide support for importing multi-volume
    VMs to Amazon EC2 and other enhancements.
  - feature:aws iam: Update AWS IAM command to latest version
  + From 1.7.23
  - feature:aws cognito-sync: Add support for Amazon Cognito Events.
  - bugfix:Parsing: Treat empty XML nodes in a response as an empty
    string instead of None if the underlying structure member is a string.
    This fixes the broken password-data-available Amazon EC2 waiter. Note:
    this changes the output of the CLI and may affect filtering with the
  - -query parameter. (issue 1252, botocore issue 506)
  + From 1.7.22
  - bugfix:aws ecs: Minor documentation fixes.
  + From 1.7.21
  - feature:aws workspaces: Add support for Amazon WorkSpaces.
  - feature:aws machinelearning: Add support for Amazon Machine Learning.
  - feature:aws s3api: Add support for specifying Lambda bucket
    notifications without needing to specify an invocation role.
  - feature:aws lambda: Update to latest api.
  - feature:aws ecs: Add support for Amazon ECS Service scheduler.
  + From 1.7.20
  - feature:aws datapipeline: Add support for deactivating pipelines.
  - feature:aws elasticbeanstalk: Add support for cancelling in-progress
    environment updates or application version deployment.
  + From 1.7.19
  - feature:aws codedeploy: Add register, deregister, install, and
    uninstall commands and update to the latest AWS CodeDeploy API.
  - feature:aws rds: Add support for describe-certificates.
  - feature:aws elastictranscoder: Add support for PlayReady DRM.
  - feature:aws ec2: Add support for D2 instances.
  + From 1.7.18
  - bugfix:Pagination: Fix issue where disabling pagination did not work
    when shadowing arguments. Affects commands such as aws route53
    list-resource-record-sets.
  - feature:aws elastictranscoder: Add support for job timing and
    input/output metadata
  - feature:aws iam: Add NamedPolicy to GetAccountAuthorization details
  - feature:aws opsworks: Allow for BlockDeviceMapping on EC2 instances
    launched through OpsWorks
  + From 1.7.17
  - feature:aws emr: Adds support for Amazon S3 client-side encryption
    in Amazon EMR and setting configuration values for several variables
    in the create-cluster and ssh commands. Also, the create-default-roles
    command will now auto-populate the Service Role and Instance Profile
    variables in the configuration file with the default roles after they
    are created.
  + From 1.7.16
  - feature:aws ec2 wait image-available: Add support for polling until
    an EC2 image is available (issue 1105)
  - feature:aws ec2 wait: Add support for additional EC2 waiters including
    instance-status-ok, password-data-available,
    spot-instance-request-fulfilled, and system-status-ok
  - feature:aws s3api: Add support for Amazon S3 cross region replication
  - feature:aws s3api: Add support for Amazon S3 requester pays (issue 797)
  - bugfix:Tab Completion: Fix issue where tab completion could not handle
    an LC_CTYPE of UTF-8 (issue 1233)
  - bugfix:aws s3api put-bucket-notification: Fix issue where an empty
    notification configuration could not be specified (botocore issue 495)
  - bugfix:aws cloudfront: Fix issue when calling cloudfront commands
    (issue 1234)
  - bugfix:aws ec2 copy-snapshot: Fix issue with the aws ec2 copy-snapshot
    command not correctly generating the presigned url argument
    (botocore issue 498)
  + From 1.7.15
  - feature:aws elastictranscoder: Add support for Applied Color
    SpaceConversion.
  - bugfix:aws --profile: Fix issue where explicitly specifying profile
    did not override credential environment variables. (botocore issue 486)
  - bugfix:aws datapipeline list-runs: Fix issue with --schedule-interval
    parameter. (issue 1225)
  - bugfix:aws configservice subscribe: Fix issue where users could not
    subscribe to a s3 bucket that they had no HeadBucket permissions to.
    (issue 1223)
  - bugfix:aws cloudtrail create-subscription: Fix issue where command
    would try to fetch the contents at a url using the contents of the
    custom policy as the url. (issue 1216)
  + From 1.7.14
  - feature:aws logs: Update aws logs command to the latest model.
  - feature:aws ec2: Add paginators for the describe-snapshots sub-command.
  - feature:aws cloudtrail: Add support for the new lookup-events
    sub-command.
  - bugfix:aws configure set: Fix issue when setting nested configuration
    values
  - feature:aws s3: Add support for --metadata-directive that allows
    metadata to be copied or replaced for single part copies. (issue 1188)
  + From 1.7.13
  - feature:aws cloudsearch: Update aws cloudsearch command to the latest
    model
  - feature:aws cognito-sync: Update aws cognito-sync command to allow
    customers to receive near-realtime updates as their data changes as
    well as exporting historical data. Customers configure an Amazon
    Kinesis stream to receive the data which can then be processed and
    exported to other data stores such as Amazon Redshift.
  - bugfix:aws opsworks: Fix issue with platform detection on linux
    systems with python3.3 and higher (issue 1199)
  - feature:Help Paging: Support paging through more when running help
    commands on windows (issue 1195)
  - bugfix:aws s3: Fix issue where read timeouts were not retried.
    (issue 1191)
  - feature:aws cloudtrail: Add support for regionalized policy templates
    for the create-subscription and update-subscription commands.
    (issue 1167)
  - bugfix:parsing: Fix issue where if there is a square bracket inside
    one of the values of a list, the end character would get removed.
    (issue 1183)
  + From 1.7.12
  - feature:aws datapipeline: Add support for tagging.
  - feature:aws route53: Add support for listing hosted zones by name
    and getting the hosted zone count.
  - bugfix:aws s3 sync: Remove --recursive parameter. The sync command is
    always a recursive operation meaning the inclusion or exclusion of
  - -recursive had no effect on the sync command. (issue 1171)
  - bugfix:aws s3: Fix issue where --endpoint-url was being ignored
    (issue 1142)
  + From 1.7.11
  - bugfix:aws sts: Allow calling assume-role-with-saml without credentials.
  - bugfix:aws sts: Allow users to make regionalized STS calls by
    specifying the STS endpoint with --endpoint-url and the region with
  - -region. (botocore issue 464)
  + From 1.7.10
  - bugfix:aws sts: Fix regression where if a region was not activated
    for STS it would raise an error if call was made to that region.
  + From 1.7.9
  - feature:aws cloudfront: Update to latest API
  - feature:aws sts: Add support for STS regionalized calls
  - feature:aws ssm: Add support for Amazon Simple Systems Management
    Service (SSM)
  + From 1.7.8
  - bugfix:aws s3: Fix auth errors when uploading large files to the
    eu-central-1 and cn-north-1 regions (botocore issue 462)
  + From 1.7.7
  - bugfix:aws ec2 revoke-security-group-ingress: Fix parsing of a
  - -port value of ICMP echo request (issue 1075)
  - feature:aws iam: Add support for managed policies
  - feature:aws elasticache: Add support for tagging
  - feature:aws route53domains: Add support for tagging of domains
  + From 1.7.6
  - feature:aws dynamodb: Add support for index scan
  - bugfix:aws s3: Fix issue where literal value for --website-redirect
    was not being used. (issue 1137)
  - bugfix:aws sqs purge-queue: Fix issue with the processing of the
  - -queue-url parameter (issue 1126)
  - feature:aws s3: Add support for config variable for changing S3 runtime
    values (issue 1122)
  - bugfix:Proxies: Fix issue with SSL certificate validation when using
    proxies and python 2.7.9 (botocore issue 451)
  + From 1.7.5
  - bugfix:aws datapipeline list-runs: Fix issue where --status values
    where not being serialized correctly (issue 1110)
  - bugfix:Output Formatting: Handle broken pipe errors when piping the
    output to another program (issue 1113)
  - bugfix:HTTP Proxy: Fix issue where aws s3/s3api commands would hang
    when using an HTTP proxy (issue 1116)
  - feature:aws elasticache wait: Add waiters for the aws elasticache
    wait (botocore issue 443)
  - bugfix:Locale Settings: Fix issue when Mac OS X has an LC_CTYPE value
    of UTF-8 (issue 945)
  + From 1.7.4
  - feature:aws dynamodb: Add support for online indexing.
  - feature:aws importexport get-shipping-label: Add support for
    get-shipping-label.
  - feature:aws s3 ls: Add --human-readable and --summarize options
    (issue 1103)
  - bugfix:aws kinesis put-records: Fix issue with base64 encoding for
    blob types (botocore issue 413)
  + From 1.7.3
  - feature:aws emr: Add support for security groups.
  - feature:aws cognitio-identity: Enhance authentication flow by beingi
    able to save associations of IAM roles with identity pools.
  + From 1.7.2
  - feature:aws autoscaling: Add ClassicLink support.
  - bugfix:aws s3: Fix issue where mtime was set before file was finished
    downloading. (issue 1102)</changelog>
  <changelog author="rjschwei@suse.com" date="1433160000">- update to version 1.7.31 (bnc#905354)
  - Follow up to previous update to address API compatibility issues
    with botocore
  - Improved lambda support
  - Add support for uploading code using Amazon S3
  - Preview services are now documented
    and will also show up in the list of available services
  + From 1.7.30
  - Add support for ``aws efs``
  - Add paginators and waiters for ``aws ecs``</changelog>
  <changelog author="ms@suse.com" date="1438344000">- update to version 1.7.42 (fate#318337)
  - feature:``aws opsworks``: Add support for managing Amazon ECS
  - feature:``aws rds``: Add support for Amazon Aurora
  - feature:``aws s3api``: Add support for more types of event notifications.
  - feature:``aws s3api``: Add support for GET/HEAD storage class response
  - feature:``aws logs``: Add destination API support.
  - feature:``aws glacier``: Add support for Vault Lock.
  - feature:``aws emr``: Add support for release-based clusters.
  - feature:``aws ecs``: Update API</changelog>
  <changelog author="rjschwei@suse.com" date="1444478400">- Update to version 1.8.12 (bsc#949877)
  + feature:aws iot: Add support for AWS IoT
  + feature:aws iot-data: Add support for AWS IoT Data Plane
  + feature:aws lambda: Add support for aliasing and function versioning
  + feature:aws ecs: Update commands
  + feature:aws marketplacecommerceanalytics: Add support for AWS
    Marketplace Commerce Analytics
  + feature:aws firehose: Add support for Amazon Kinesis Firehose
  + feature:aws inspector: Add support for Amazon Inspector
  + feature:aws kinesis: Add support for updating stream retention periods
  + feature:aws configservice: Add support for config rules
  + feature:aws waf: Add support for AWS WAF
  + feature:aws ec2: Add support for spot blocks
  + feature:aws cloudfront: Add support for adding Web ACLs to CloudFront
    distributions
  + feature:aws es: Adds support for the new Amazon Elasticsearch
  + feature:aws cloudtrail: Adds support for log file integrity validation,
    log encryption with AWS KMS-Managed Keys (SSE-KMS), and trail tagging.
  + feature:aws rds create-db-instance: --db-instance-class has a new value
    as db.t2.large
  + feature:aws workspaces: Adds support for volume encryption in Amazon
    WorkSpaces.
  + feature:aws ses: Adds 17 new operations for accepting incoming emails.
  + feature:aws cloudformation describe-account-limits: This is a new API.
  + feature:aws ec2 modify-spot-fleet-request: This is a new API.
  + bugfix:aws elasticbeanstalk: Documentation update.
  + feature:aws cognito-sync: Update API to latest version
  + feature:aws cognito-identity: Update API to latest version
  + bugfix:Assume Role Provider: Fix issue where profile does not exist
    errors were not being propogated back to the user (issue 1515)
  + bugfix:Shorthand Syntax: Fix parser regression when a key name has an
    underscore character (issue 1510)
  + feature:aws s3: Add support for STANDARD_IA storage class to the aws s3
    commands (issue 1511)
  + feature:aws logs: Add support for create-export-task, cancel-export-task,
    and describe-export-tasks.
  + bugfix:Output: Only omit printing response to stdout if the response is
    an empty dictionary (issue 1496)
  + feature:aws s3/s3api: Update Amazon S3 commands to the latest version
  + feature:aws ec2 request-spot-fleet: Add new Diversified bidding strategy
    parameter
  + feature:aws ec2 describe-snapshots: Add new dataEncryptionKeyId and
    StateMessage parameters
  + feature:aws efs describe-mount-targets: Add new optional MountTargetId
    parameter
  + feature:aws route53: Add calculated health checks and latency health checks
  + bugfix:StreamingBody: File-like object for HTTP response can now be
    properly closed
  + feature:aws iam: Add two new APIs that enable programmatic access to
    the IAM policy simulator
  + feature:aws importexport: Documentation update
  + bugfix:aws machinelearning: Remove a constraint
  + feature:aws kinesis get-records: Add a timestamp field to all Records
  + bugfix:aws cloudfront: Add paginators and waiters
  + feature:aws storagegateway: Add support for resource tagging.
  + feature:aws ec2 request-spot-fleet: Add support for new request config
    parameters
  + bugfix:Shorthand Parser: Fix regression where '-' character was not
    accepted as a key name in a shorthand value (issue 1470)
  + bugfix:Shorthand Parser: Fix regression where spaces in unquoted
    values were not being accepted (issue 1471)
  + feature:aws configservice: Add support for listing discovered resources
  + bugfix:aws emr create-default-roles: Fix the issue where the command
    would fail to honor an existing AWS_CA_BUNDLE environment setting and
    end up with "SSLError: object has no attribute" (issue 1468)
  + feature:Shorthand Syntax: Add support for nested hashes when using
    shorthand syntax (issue 1444)
  + feature:aws codepipeline: Add support for specification of an encryption
    key to use with the artifact bucket, when creating and updating a pipeline
  + feature:aws s3: Add support for event notification filters
  + bugfix:aws iam create-virtual-mfa-device: Fix issue when an error
    response is received from the create-virtual-mfa-device command (issue 1447)
  + feature:aws elasticbeanstalk: Add support for enhanced health reporting
    in aws elasticbeanstalk commands
  + feature:Shared Credentials File: Add support for changing the shared
    credentials file from the default location of ~/.aws/credentials
    by setting the AWS_SHARED_CREDENTIALS_FILE environment variable
    (botocore issue 623)
  + feature:Waiters: Add aws iam wait instance-profile-exists and aws
    iam wait user-exists commands (botocore issue)
  + feature:aws swf: Add support for Added support for invoking AWS
    Lambda tasks from an Amazon SWF workflow.
  + feature:aws devicefarm: Add support for testing iOS applications
    with AWS Device Farm.</changelog>
  <changelog author="rjschwei@suse.com" date="1449748800">- Update to version 1.9.12 (bsc#958686)
  + feature:aws configure add-model: Added command for updating commands
    in the CLI and clients in boto3. (issue 1664)
  + feature:aws cloudfront create-invalidation: Add a new --paths option.
    (issue 1662)
  + feature:aws cloudfront sign: Add a new command to create a signed url.
    (issue 1668)
  + feature:aws autoscaling: Added support for protecting instances from
    scale-in events.
  + feature:aws rds: Added support for Aurora encryption at rest.
- From version 1.9.11
  + feature:aws rds: Added support for specifying port number.
  + feature:aws ds: Added support for Microsoft ActiveDirctory.
  + feature:aws route53: Added support for TrafficFlow, a new management
    and modeling layer for Route53.
  + feature:Timeouts: Added additonal options for configuring socket timeouts.
- From version 1.9.10
  + feature:aws config: Added support for dedicated hosts.
  + feature:aws s3: Added support for custom metadata in cp, mv, and sync.
- From version 1.9.9
  + feature:aws s3api: Added support for the aws-exec-read canned ACL on
    objects.
  + feature:aws elasticbeanstalk: Added support for composable web applications.
  + feature:aws ec2: Added support for EC2 dedicated hosts.
  + feature:aws ecs: Added support for task stopped reasons and task start
    and stop times.
- From version 1.9.8
  + feature:Read Timeouts: Add --cli-read-timeout to specify the number of
    seconds until a read times out.
  + bugfix:aws s3: Fix regression when downloading a restored Glacier object
    (issue 1650 &lt;https://github.com/aws/aws-cli/pull/1650&gt;__)
  + bugfix:aws s3: Fix issue when encountering "out of disk space" errors as
    well as permissions errors when downloading large files (issue 1645,
    issue 1442)
  + bugfix:aws opsworks register: Support --no-verify-ssl argument for the
    aws opsworks register command (issue 1632)
  + feature:s3: Add support for Server-Side Encryption with KMS and
    Server-Side Encryption with Customer-Provided Keys. (issue 1623)
- From version 1.9.7
  + feature:aws rds: Cross account snapshot sharing and Modify DB Instance
    Visibility features
  + bugfix:memory management: Resolve a potential memory leak when creating
    lots of clients on Python 2.6 and Linux 2.6
  + bugfix:presign url: Now generate_presigned_url() works correctly with
    different expiry time
- From version 1.9.6
  + bugfix:shorthand: Allow . as a valid key character. (issue 1628)
  + feature:aws apigateway: Support for stage variables to configure
    the different deployment stages
- From version 1.9.5
  + bugfix:aws help: Gracefully handle Ctrl-C interrupts. (issue 1619)
  + bugfix:aws datapipeline create-default-roles: Fix issue with error
    handling. (issue 1618)
  + bugfix:aws s3: Skip glacier objects when downloading from S3. (issue 1581)
  + feature:aws s3api: Auto-populate --copy-source-sse-customer-key-md5
    (botocore issue 709)
- From version 1.9.4
  + feature:aws datapipeline create-default-roles: Creates default IAM
    roles for creating EMR clusters. (issue 1616)
  + feature:aws devicefarm: Add commands for updating and deleting projects,
    device pools, uploads, and runs.
- From version 1.9.3
  + feature:aws iam: Add support for resource-level policy simulation
- From version 1.9.2
  + bugfix:aws s3: Fix some local path validation issues (issue 1575)
  + bugfix:aws storagegateway: Fix --tape-ar-ns, --volume-ar-ns, and
  - -vtl-device-ar-ns to --tape-arns, --volume-arns, and --vtl-device-arns,
    respectively. The old arguments are still supported for backwards
    compatibility, but are no longer documented. (issue 1599)
  + bugfix:aws configservice subscribe: Fix an issue when creating a new
    S3 bucket (issue 1593)
  + bugfix:aws apigateway put-integration: Fix issue with --uri and
  - -integration-http-method parameters (issue 1605)
- From version 1.9.1
  + feature:aws ssm: Add support for Amazon EC2 Run Command
  + feature:aws apigateway: Add support for Amazon API Gateway
- From version 1.9.0
  + feature:aws iam: Add policy simulator support
  + feature:aws autoscaling: Add support for launch configurations
    that include encrypted Amazon Elastic Block Store (EBS) volumes
  + feature:configure: Add support for ca_bundle config variable
  + feature:Assume Role: Add role_session_name config variable to control
    the RoleSessionName when assuming roles (issue 1389)
  + bug:Argument Parsing: Handle case when empty list parameter was
    specified with no value (issue 838)
- From version 1.8.13
  + feature:aws deploy: Compress zip files when using aws deploy push
    (issue 1534 &lt;https://github.com/aws/aws-cli/pull/1534&gt;--)
  + bugfix:Shorthand Parser: Fix issue when display error message for
    multiline shorthand syntax values (issue 1543)
  + bugfix:aws route53: Automatically retry Throttling and
    PriorRequestNotComplete errors (botocore issue 682)
  + feature:aws s3/s3api: Add support for changing the bucket addressing
    style (botocore issue 673)
  + bugfix:aws s3api: Add missing --server-side-encryption option to
    upload-part command
  + feature:aws kms: Add ability to delete customer master keys (CMKs)</changelog>
  <changelog author="rjschwei@suse.com" date="1460376000">- Update to version 1.10.19 (bsc#974993)
  + forward port hide_py_pckgmgmt.patch
  + feature:lambda: Added support for setting the function runtime as
    nodejs4.3, as well as updating function configuration to set the runtime.
  + feature:ds: Added support for Directory Service Conditional Forwarder APIs.
  + feature:elasticbeanstalk: Adds support for three additional elements in
    AWS Elasticbeanstalk's DescribeInstancesHealthResponse: Deployment,
    AvailabilityZone, and InstanceType. Additionally adds support for
    increased EnvironmentName length from 23 to 40.
  + bugfix:Paginator: Allow non-specified input tokens in old starting token
    format.
- From 1.10.18
  + feature:apigateway: Added support for API Import
  + feature:route53: Added support for metric-based health checks and
    regional health checks.
  + feature:sts: Added support for GetCallerIdentity, which returns details
    about the credentials used to make the API call. The details include name
    and account, as well as the type of entity making the call, such as an
    IAM user vs. federated user.
  + feature:s3api: Added support for VersionId in PutObjectAcl (issue 856)
  + bugfix:s3api: Add validation to enforce S3 metadata only contains ASCII.
    (issue 861)
  + bugfix:Exceptions: Consistently parse errors with no body (issue 859)
  + bugfix:Config: Handle case where S3 config key is not a dict (issue 858)
- From 1.10.17
  + feature:acm: Update command to latest version
  + feature:cloudformation: Update command to latest version
  + feature:codedeploy: Update command to latest version
  + feature:dms: Update command to latest version
  + feature:elasticache: Update command to latest version
  + feature:elasticbeanstalk: Update command to latest version
  + feature:redshift: Update command to latest version
  + feature:waf: Update command to latest version
  + bugfix:Pagintor: Fix regression when providing a starting token for a
    paginated command (botocore issue 849)
  + bugfix:Response Parsing: Handle case when generic HTML error response
    is received (botocore issue 850)
  + bugfix:Request serialization: Handle case when non str values are
    provided for header values when using signature version 4
    (botocore issue 852)
  + bugfix:Retry: Retry HTTP responses with status code 502
    (botocore issue 853)
  + bugfix:ec2 run-instances: Fix issue when providing
  - -secondary-private-ip-address-count argument (issue 1874)
- From 1.10.16
  + feature:elasticache: Update command to latest version
  + feature:rds: Update command to latest version
  + feature:storagegateway: Update command to latest version
- from 1.10.15
  + feature:aws devicefarm: Add support to pay a flat monthly fee for
    unlimited testing of your Android and iOS apps with AWS Device Farm
    device slots
  + feature:aws rds: Add support for customizing the order in which Aurora
    Replicas are promoted to primary instance during a failover
- From 1.10.14
  + feature:meteringmarketplace: The AWS Marketplace Metering Service
    enables sellers to price their products along new pricing dimensions.
    After a integrating their product with the AWS Marketplace Metering
    Service, that product will emit an hourly record capturing the usage of
    any single pricing dimension. Buyers can easily subscribe to software
    priced by this new dimension on the AWS Marketplace website and only
    pay for what they use.
  + feature:s3api: Added support for delete marker and abort multipart
    upload lifecycle configuration.
  + feature:iot: Added support for Amazon Elasticsearch Service and
    Amazon Cloudwatch actions for the AWS IoT rules engine.
  + feature:cloudhsm: Added support for tagging resources.
- From 1.10.13
  + feature:DMS: Added support for AWS Database Migration Service
  + feature:SES: Added support for white-labeling
  + feature:CodeDeploy: Added support for BatchGetDeploymentGroups
  + feature:endpoints: Updated endpoints to latest version
  + bugfix:groff: Fix groff command which was causing issues on some systems
  + bugfix:shorthand: Allow # in keys in the shorthand parser
- From 1.10.12
  + feature:gamelift: Update command to latest version
  + feature:iam: Update command to latest version
  + feature:redshift: Update command to latest version
- From 1.10.11
  + feature:acm: Update acm command to latest version
  + feature:codecommit: Update codecommit model to latest version
  + feature:config: Update config command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:events: Update events command to latest version
  + bugfix:aws s3 cp: Add error checking when attempting recursive copies
    or syncs with streaming output (issue 1771)
- From 1.10.10
  + feature:aws ec2: Add support for VPC peering with security groups.
  + feature:aws ds: Add support for SNS event notifications.
  + bugfix:aws s3 rb: Fix issue where bucket is still attempted to be
    removed when the preceding delete requests failed. (issue 1827)
  + bugfix:aws storagegateway: Fix issue in aliasing required args.
    (issue 1790)
- From 1.10.9
  + bugfix:aws s3: Avoid MD5 checksumming if unavailable. (issue 1812)
  + feature:aws dynamodb: Add support for describing limits.
  + feature:aws apigateway: Add support for testing invoke authorizers
    and flushing stage authorizers cache.
  + feature:aws cloudsearchdomain: Add support for new stat fields.
- From 1.10.8
  + bugfix:aws s3: Disable use of MD5 when SHA256 checksum is already
    calculated for the body (botocore issue 804)
  + bugfix:FIPS: Handle case where MD5 cipher is not available on FIPS
    compliant systems (botocore issue 807)
  + feature:aws cloudformation: Update AWS CloudFormation command to the
    latest version
  + feature:aws logs: Update Amazon CloudWatch Logs command to the latest
    version
  + feature:aws ses: Update Amazon SES to the latest version
  + feature:aws autoscaling: Update Auto Scaling to the latest version
- From 1.10.7
  + bug:aws configure set: Fix issue when adding entries to an empty
    profile section (issue 1806)
  + feature:aws route53: Add suport for SNI health checks
- From 1.10.6
  + feature:aws storagegateway: Added support for user-supplied barcodes.
  + feature:aws codedeploy: Added support for setting up triggers for a
    deployment group.
  + bugfix:aws emr: Fix missing dns name issue with private clusters.
    (issue 1749)
  + bugfix:aws emr: Fix issue where impala args were not joined with commas.
    (issue 1802)
- From 1.10.5
  + feature:aws rds: Added support for Cross-account Encrypted (KMS) snapshot
    sharing.
  + feature:aws emr: Added support for adding EBS storage to EMR instances.
  + bugfix:pagination: Fixed a bug that was causing non-string service
    tokens to fail on serialization
- From 1.10.4
  + feature:aws lambda: Add support for accessing resources in your VPC.
  + feature:aws apigateway: Add support for custom request authorizers.
- From 1.10.3
  + feature:aws cloudfront: Add support for new ACMCertificateARN parameter
  + feature:aws marketplacecommerceanalytics generate-data-set: Add support
    for --customer-defined-values parameter
- From 1.10.2
  + feature:aws gamelift: Add support for AWS GameLift
  + bugfix:Assume Role: Fix issue where temporary credentials from assuming
    a role were not being properly cached (issue 1684)
- From 1.10.1
  + feature:aws waf: Add support for blocking, allowing, or monitoring
    (count) requests based on the content in HTTP request bodies.
  + bugfix:aws ssm: Remove constraint on Amazon EC2 instance id's.
    (issue 1729)
- From 1.10.0
  + feature:aws acm: adds support for AWS Certificate Manager
  + feature:aws cloudfront: adds support for AWS Certificate Manager
    certificates
  + feature:aws cloudfront create-distribution: Adds support for
  - -origin-domain-name and --default-root-object
  + feature:aws cloudfront update-distribution: Adds support for
  - -default-root-object
  + feature:aws iot: adds support for topic rules
  + feature:aws cloudformation: adds suport for ContinueUpdateRollback
- From 1.9.21
  + feature:aws sts: now returns RegionDisabledException instead of
    AccessDenied when a user sends an API request to an STS regional
    endpoint that is not activated for that AWS account. This enables
    customers to more easily decide how to respond, such as by trying to
    call a different region instead of simply failing the call.
  + feature:aws opsworks: adds support for new enums.
  + feature:aws devicefarm: adds support running Appium tests written in
    Python against your native, hybrid and browser-based apps on AWS Device
    Farm.
- From 1.9.20
  + bugfix:aws cloudfront: Fix regression in waiters.
- From 1.9.19
  + feature:aws events: Initial support for Amazon CloudWatch Events.
    CloudWatch Events allows you to track changes to your AWS resources
    with less overhead and greater efficiency.
  + feature:aws ec2: Adds support for purchasing reserved capacity for
    specific blocks of time on a one-time of recurring basis.
  + feature:aws cloudfront: Adds support for HTTPS-only connections, and
    control of edge-to-origin request headers.
  + bugfix:aws s3: Gracefully handle encoding errors when printing S3
    keys (issue 1719)
- From 1.9.18
  + feature:aws ec2: Enables support for DNS resolution of public hostnames
    to private IP addresses when queried over ClassicLink. Additionally, you
    can now access private hosted zones associated with your VPC from a
    linked EC2-Classic instance. ClassicLink DNS support makes it easier
    for EC2-Classic instances to communicate with VPC resources using public
    DNS hostnames.
  + feature:aws ec2: Add support for the new 63-bit EC2 Instance and
    Reservation IDs.
- From 1.9.17
  + bugfix:aws ssm: Documentation update.
- From 1.9.16
  + feature:aws ec2: Add new EC2 instance type: t2.nano
  + feature:aws datapipeline list-runs: Add support for output format
- From 1.9.15
  + feature:aws ecr: Add aws ecr commands
  + feature:aws emr: Update aws emr create-cluster to accept Amazon EC2
    security group
  + feature:aws ecs: Update ecs command to include a new deployment option
- From 1.9.14
  + feature:aws rds: Adds Enhanced Monitoring support so that you can
    monitor operating system metrics for your RDS DB instances
  + feature:aws configservice: Support for IAM resource types
  + feature:aws cloudtrail: Adds isMultiRegion to some of the commands
  + feature:aws cloudfront: Adds support for gzip
  + feature:aws ec2: Adds new commands for VPC Managed NAT
- From 1.9.13
  + feature:aws ec2 copy-image: Adds two optional parameters to support
    launching EC2 instances with EBS encrypted boot volumes.
  + bugfix:aws: Fix regression when using AWS_DATA_PATH environment
    variable (issue 736)</changelog>
  <changelog author="rjschwei@suse.com" date="1466510400">- Update to version 1.10.38 (bsc#985858)
  + forward port hide_py_pckgmgmt.patch
  + feature:acm: Update acm command to latest version
  + feature:ses: Update ses command to latest version
  + feature:rds: Update rds command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.37
  + feature:s3: Update s3 command to latest version
- From 1.10.36
  + feature:dynamodbstreams: Update dynamodbstreams command to latest version
  + feature:machinelearning: Update machinelearning command to latest version
  + feature:iot: Update iot command to latest version
  + bugfix:Pagination: Fix regression with --no-paginate introduced in
    [#1958] (fixes #1993)
- From 1.10.35
  + feature:ec2: Update ec2 command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.10.34
  + feature:elasticache: Update elasticache command to latest version
- From 1.10.33
  + feature:rds: Update rds command to latest version
  + feature:ec2: Update ec2 command to latest version
  + bugfix:help: Write help content to stdout if less is not installed.
    Fixes #1957
- From 1.10.32
  + feature:firehose: Update firehose command to latest version
  + bugfix:Table: Fix rendering of tables with double-width characters.
  + feature:ec2: Update ec2 command to latest version
  + feature:ecs: Update ecs command to latest version
- From 1.10.31
  + feature:application-autoscaling: Adds support for Application Auto Scaling.
    Application Auto Scaling is a general purpose Auto Scaling service for
    supported elastic AWS resources. With Application Auto Scaling, you can
    automatically scale your AWS resources, with an experience similar to
    that of Auto Scaling.
- From 1.10.29
  + feature:dynamodb: Update dynamodb command to latest version
  + bugfix:Shorthand: Remove back-compat shorthand features from new services.
  + bugfix:Paginator: Print a better error when pagination params are
    supplied along with no-paginate.
  + bugfix:ec2: Sets MaxResults to default value of 1000.
  + feature:workspaces: Update workspaces command to latest version
  + feature:discovery: Update discovery command to latest version
- From 1.10.28
  + feature:ec2: Update ec2 command to latest version
  + feature:ssm: Update ssm command to latest version
  + feature:discovery: Update discovery command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.10.27
  + feature:storagegateway: Update storagegateway command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:emr: Update emr command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:iam: Update iam command to latest version
- From 1.10.26
  + feature:kms: Update kms command to latest version
  + feature:sts: Update sts command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:ecs: Update ecs command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.10.25
  + feature:inspector: Update inspector command to latest version
  + feature:codepipeline: Update codepipeline command to latest version
  + bugfix:Configure: Fix issue causing prompts not to display on mintty.
    Fixes #1925
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
- From 1.10.24
  + feature:route53domains: Update route53domains command to latest version
  + feature:opsworks: Update opsworks command to latest version
- From 1.10.23
  + feature:ecr: Update ecr command to latest version
  + feature:acm: Update acm command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:sts: Update sts command to latest version
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.10.22
  + feature:emr: Add support for smart targeted resize feature
  + feature:iot: Add SQL RulesEngine version support
  + feature:acm: Add tagging support for ACM
- From 1.10.21
  + feature:aws ec2: Add support for two new EBS volume types
  + feature:aws cognito-idp: Add support for new service, aws cognito-idp
  + feature:aws kinesis: Update aws kinesis command to latest version
  + feature:aws elasticbeanstalk: Add support for automatic platform
    version upgrades with managed updates
  + feature:aws devicefarm: Update aws devicefarm command to latest version
  + feature:aws s3: Add support for Amazon S3 Transfer Acceleration
  + feature:aws firehose: Update firehose command to latest version
- From 1.10.20
  + feature:iot: Add commands for managing CA certificates.
  + bugfix:ec2 wait: Fix issues with waiting on incorrect error code.
  + bugfix:s3: Fix issue where multipart uploads were not being properly
    aborted after Cntrl-C. (issue 1905)</changelog>
  <changelog author="dmueller@suse.com" date="1479384000">- update to 1.10.67
  * more than 500 changes, have a look at
  https://github.com/aws/aws-cli/compare/1.10.38...1.10.67</changelog>
  <changelog author="rjschwei@suse.com" date="1481803200">- Update to 1.11.29 (bsc#1015776)
  + forward port hide_py_pckgmgmt.patch
  + feature:batch: Update batch command to latest version
  + feature:logs: Update logs command to latest version
  + feature:rds: Update rds command to latest version
  + feature:dms: Update dms command to latest version
  + feature:marketplacecommerceanalytics: Update marketplacecommerceanalytics
    command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:sts: Update sts command to latest version
- From 1.11.28
  + feature:cloudfront: Add lambda function associations to cache behaviors.
  + feature:rds: Add cluster create data to DBCluster APIs.
  + bugfix:opsworks: This fixes an issue with opsworks register --local and
    python3 on some versions of linux.
  + feature:waf-regional: With this new feature, customers can use AWS WAF
    directly on Application Load Balancers in a VPC within available regions
    to protect their websites and web services from malicious attacks such
    as SQL injection, Cross Site Scripting, bad bots, etc.
- From 1.11.27
  + feature:config: Update config command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:s3: Update s3 command to latest version
- From 1.11.26
  + feature:sts: Update sts command to latest version
  + feature:config: Update config command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:pinpoint: Update pinpoint command to latest version
- From 1.11.25
  + bugfix:opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support
    for opsworkscm.
- From 1.11.24
  + feature:pinpoint: Update pinpoint command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:directconnect: Update directconnect command to latest version
  + feature:alias: Add ability to alias commands in the CLI
  + feature:xray: Update xray command to latest version
  + feature:s3: Display transfer speed for s3 commands
  + feature:ssm: Update ssm command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:codebuild: Update codebuild command to latest version
  + feature:opsworkscm: Update opsworkscm command to latest version
  + feature:shield: Update shield command to latest version
  + feature:stepfunctions: Update stepfunctions command to latest version
  + feature:appstream: Update appstream command to latest version
  + feature:health: Update health command to latest version
  + feature:ec2: Update ec2 command to latest version
- From 1.11.23
  + feature:polly: Update polly command to latest version
  + feature:snowball: Update snowball command to latest version
  + feature:rekognition: Update rekognition command to latest version
  + feature:lightsail: Update lightsail command to latest version
  + feature:--generate-cli-skeleton output: Add support for generating
    sample output for command
- From 1.11.22
  + feature:s3: Update s3 command to latest version
- From 1.11.21
  + feature:s3: Update s3 command to latest version
  + feature:glacier: Update glacier command to latest version
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:route53: Update route53 command to latest version
- From 1.11.20
  + feature:ecs: Update ecs command to latest version
  + feature:cloudtrail: Update cloudtrail command to latest version
- From 1.11.19
  + feature:cloudformation deploy: Add command to simplify deployments
    of cloudformation stack changes.
  + feature:emr: Update emr command to latest version
  + feature:lambda: Update lambda command to latest version
  + feature:elastictranscoder: Update elastictranscoder command to latest
    version
  + feature:cloudformation package: Add command to package source code for
    cloudfromation template.
  + feature:gamelift: Update gamelift command to latest version
  + feature:application-autoscaling: Update application-autoscaling
    command to latest version
- From 1.11.18
  + bugfix:Powershell: Properly set return code on Powershell.
  + feature:cloudwatch: Update cloudwatch command to latest version
  + feature:sqs: Update sqs command to latest version
  + feature:apigateway: Update apigateway command to latest version
  + feature:meteringmarketplace: Update meteringmarketplace command to
    latest version
- From 1.11.17
  + feature:route53: Update route53 command to latest version
  + feature:servicecatalog: Update servicecatalog command to latest version
- From 1.11.16
  + feature:kinesis: Update kinesis command to latest version
  + feature:ds: Update ds command to latest version
  + feature:elasticache: Update elasticache command to latest version
- From 1.11.15
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.14
  + feature:cloudformation: Update cloudformation command to latest version
  + feature:logs: Update logs command to latest version
- From 1.11.13
  + feature:directconnect: Update directconnect command to latest version
- From 1.11.12
  + feature:ses: Update ses command to latest version
- From 1.11.11
  + bugfix:cloudtrail: Use STS instead of IAM in CreateSubscription
  + feature:cloudformation: Update cloudformation command to latest version
- From 1.11.10
  + feature:autoscaling: Update autoscaling command to latest version
  + feature:elbv2: Update elbv2 command to latest version
- From 1.11.9
  + feature:ecs: Update ecs command to latest version
  + feature:sms: Update sms command to latest version
- From 1.11.8
  + feature:waf: Update waf command to latest version
  + feature:s3: Port mv to s3transfer.
  + feature:budgets: Update budgets command to latest version
- From 1.11.7
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:iot: Update iot command to latest version
  + feature:config: Update config command to latest version
  + feature:kinesisanalytics: Update kinesisanalytics command to latest version
  + feature:rds: Update rds command to latest version
- From 1.11.6
  + feature:route53: Update route53 command to latest version
  + feature:--region: Add support for us-east-2
- From 1.11.5
  + bugfix:s3 sync --delete: Fix regression where --delete would not delete
    local files
- From 1.11.4
  + feature:elasticbeanstalk: Update elasticbeanstalk command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:s3: Integrate sync command with s3transfer
  + feature:acm: Update acm command to latest version
  + feature:s3: Output progress even when discovering new files to transfer
- From 1.11.3
  + bugfix:Pagination: Fix validation error when providing --no-paginate
    with normalized paging argument.
  + feature:apigateway: Update apigateway command to latest version
  + feature:cloudfront: Update cloudfront command to latest version
  + feature:gamelift: Update gamelift command to latest version
  + feature:rds: Update rds command to latest version
  + feature:codedeploy: Update codedeploy command to latest version
  + feature:sns: Update sns command to latest version
  + feature:kms: Update kms command to latest version
  + feature:elasticache: Update elasticache command to latest version
  + feature:ecr: Update ecr command to latest version
- From 1.11.2
  + feature:s3: Update s3 command to latest version
  + feature:waf: Update waf command to latest version
  + feature:devicefarm: Update devicefarm command to latest version
  + feature:kms: Update kms command to latest version
  + feature:opsworks: Update opsworks command to latest version
  + bugfix:s3: Refactor rb into its own command. In addition, validate that
    no key is supplied regardless of whether or not the force argument is
    supplied.
  + bugfix:route53domains: Rename --end to --end-time to fix a bug relating
    to argparse prefix expansion. Alias --start to --start-time to maintain
    a consistent interface while keeping the old parameter.
  + feature:cognito-idp: Update cognito-idp command to latest version
- From 1.11.1
  + bugfix:s3: Fix regression when downloading empty files.
- From 1.11.0
  + feature:snowball: Update snowball command to latest version
  + feature:s3: Update s3 command to latest version
  + feature:ec2: Update ec2 command to latest version
  + feature:s3: Port cp and rm to s3transfer. Improve progress for those
    commands, showing byte progress.
- Upstream version jump from 1.10.67 to 1.11.0</changelog>
  <changelog author="rjschwei@suse.com" date="1497441600">- Update to version 1.11.104 (bsc#1044370)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.104/CHANGELOG.rst</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Update to version 1.11.151
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.151/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
- Remove build capability for SLE 11
- Set up for Python 3 build distro &gt; SLE 12 openSUSE Leap 42.x</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 1.11.185 (boo#1066528)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.11.185/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch</changelog>
  <changelog author="jengelh@inai.de" date="1510315200">- Do not have description assume any particular user.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529409600">- Update to version 1.15.40 (boo#1088310)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.40/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1532260800">- Update to version 1.15.63
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.63/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="rjschwei@suse.com" date="1534075200">- Be less strict with the YAML version requirement
- Switch the license file to %license</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1534161600">- Update to version 1.15.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.15.76/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1536840000">- Update to version 1.16.1 (bsc#1105988, bsc#1092493)
  + Fix CVE-2018-15869
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.1/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Replace vendored version of six from botocore with upstream version
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1541505600">- Update to version 1.16.48
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.48/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1543924800">- Update to version 1.16.61 (bsc#1118021, bsc#1118024)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.16.61/CHANGELOG.rst
  + Forward port hide_py_pckgmgmt.patch
  + Update Requires in spec file from setup.py
- Relax version dependency on colorama to &lt;= 0.4.1 (boo#1118099)</changelog>
</package>
<package pkgid="075e99542a8395e9d9f0ffda27a6ad8f03220b6ac71b6b9540b7c167a45f6a08" name="aws-vpc-move-ip" arch="noarch">
  <version epoch="0" ver="0.2.20171113" rel="lp150.2.10.1"/>
  <changelog author="ro@suse.de" date="1443787200">- created package, version 0.1</changelog>
  <changelog author="hguo@suse.com" date="1454414400">- Catch up with the latest progress from upstream repository and
  Introduce manual page ofc_suse_aws-vpc-move-ip.8
  Implements fate#319009</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Do not compress the manpage manualy, the rpm does it for us</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version from resource-agents#ac94d575 (bsc#1059165)
  * Monitoring via AWS API call can be turned on/off
  * New parameter monapi (bool ? true/false) enables
    or disables Enhanced monitoring using AWS API
    call to check route table content
  * ocf_log / debugger: only relevant output for
    each level is sent to log
  * now correctly checks return code of ?ip addr delete? (bsc#1053193)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1536840000">- Included the latest fixes available Upstream (bsc#1106707)
  * Enforces the awscli text output call
  * Includes the address param backward compatibility
  * Includes the new ip param.
  * Improves the monitor action when is on probe.</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1550232000">- Add support for multiple VPC routing tables in routing_tables
  parameter (bsc#1125138)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556798400">- Fixed the error when updating the route table in case VM has
  multiple network interfaces (bsc#1133962)</changelog>
</package>
<package pkgid="e439991e7474851b20d3259c5232e64735460697dc4109c394c8013bc1c92c33" name="aws-vpc-move-ip" arch="src">
  <version epoch="0" ver="0.2.20171113" rel="lp150.2.10.1"/>
  <changelog author="ro@suse.de" date="1443787200">- created package, version 0.1</changelog>
  <changelog author="hguo@suse.com" date="1454414400">- Catch up with the latest progress from upstream repository and
  Introduce manual page ofc_suse_aws-vpc-move-ip.8
  Implements fate#319009</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Do not compress the manpage manualy, the rpm does it for us</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version from resource-agents#ac94d575 (bsc#1059165)
  * Monitoring via AWS API call can be turned on/off
  * New parameter monapi (bool ? true/false) enables
    or disables Enhanced monitoring using AWS API
    call to check route table content
  * ocf_log / debugger: only relevant output for
    each level is sent to log
  * now correctly checks return code of ?ip addr delete? (bsc#1053193)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1536840000">- Included the latest fixes available Upstream (bsc#1106707)
  * Enforces the awscli text output call
  * Includes the address param backward compatibility
  * Includes the new ip param.
  * Improves the monitor action when is on probe.</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1550232000">- Add support for multiple VPC routing tables in routing_tables
  parameter (bsc#1125138)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556798400">- Fixed the error when updating the route table in case VM has
  multiple network interfaces (bsc#1133962)</changelog>
</package>
<package pkgid="e1771e14d6f9c8a48ccdd3745a30a81e523395f306c68f75c9aebea3ee5dbcc9" name="aws-vpc-move-ip" arch="noarch">
  <version epoch="0" ver="0.2.20171113" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1443787200">- created package, version 0.1</changelog>
  <changelog author="hguo@suse.com" date="1454414400">- Catch up with the latest progress from upstream repository and
  Introduce manual page ofc_suse_aws-vpc-move-ip.8
  Implements fate#319009</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Do not compress the manpage manualy, the rpm does it for us</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version from resource-agents#ac94d575 (bsc#1059165)
  * Monitoring via AWS API call can be turned on/off
  * New parameter monapi (bool ? true/false) enables
    or disables Enhanced monitoring using AWS API
    call to check route table content
  * ocf_log / debugger: only relevant output for
    each level is sent to log
  * now correctly checks return code of ?ip addr delete? (bsc#1053193)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1536840000">- Included the latest fixes available Upstream (bsc#1106707)
  * Enforces the awscli text output call
  * Includes the address param backward compatibility
  * Includes the new ip param.
  * Improves the monitor action when is on probe.</changelog>
</package>
<package pkgid="305ad4ca4f2517fdc7bd368f8d2713efee2a451a568b46863cc35b236de006dc" name="aws-vpc-move-ip" arch="noarch">
  <version epoch="0" ver="0.2.20171113" rel="lp150.2.6.1"/>
  <changelog author="ro@suse.de" date="1443787200">- created package, version 0.1</changelog>
  <changelog author="hguo@suse.com" date="1454414400">- Catch up with the latest progress from upstream repository and
  Introduce manual page ofc_suse_aws-vpc-move-ip.8
  Implements fate#319009</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Do not compress the manpage manualy, the rpm does it for us</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version from resource-agents#ac94d575 (bsc#1059165)
  * Monitoring via AWS API call can be turned on/off
  * New parameter monapi (bool ? true/false) enables
    or disables Enhanced monitoring using AWS API
    call to check route table content
  * ocf_log / debugger: only relevant output for
    each level is sent to log
  * now correctly checks return code of ?ip addr delete? (bsc#1053193)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1536840000">- Included the latest fixes available Upstream (bsc#1106707)
  * Enforces the awscli text output call
  * Includes the address param backward compatibility
  * Includes the new ip param.
  * Improves the monitor action when is on probe.</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1550232000">- Add support for multiple VPC routing tables in routing_tables
  parameter (bsc#1125138)</changelog>
</package>
<package pkgid="5d55c90fe647bc3c50a9bb736effd2c0e0935af24b5ec5f658d0e5677598c2b5" name="axis" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.6.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="bbe6e7f1448fa94bd4ef7dfb2ca8cf1740e3bdcde6d4913740ec5d818811def0" name="axis" arch="src">
  <version epoch="0" ver="1.4" rel="lp150.6.1"/>
  <changelog author="dbornkessel@suse.de" date="1136462400">- Current version 1.2.3 from JPackage.org</changelog>
  <changelog author="dbornkessel@suse.de" date="1178107200">- added unzip to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="a9c9e4b1324a4f64888aee7d3cfcca1c5cedd9fc0eaf95dd60a8e23a07b1f706" name="axis" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.9.1"/>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557403200">- Security fix [bsc#1134598, CVE-2012-5784, CVE-2014-3596]
  Missing connection hostname check against X.509 certificate name
  * Added axis-CVE-2014-3596.patch</changelog>
</package>
<package pkgid="a87bf06ad975da67fba0ed3698b7451afbddb7088183302081eafa62e788ab76" name="axis" arch="src">
  <version epoch="0" ver="1.4" rel="lp150.9.1"/>
  <changelog author="dbornkessel@suse.de" date="1178107200">- added unzip to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1200571200">- remove glibj from build-classpath call as we don't have classpath
  packages</changelog>
  <changelog author="mvyskocil@suse.cz" date="1208865600">- fixed build with new gcj (memory consupmtion limit)</changelog>
  <changelog author="coolo@suse.de" date="1216209600">- avoid another build cycle</changelog>
  <changelog author="mvyskocil@suse.cz" date="1217505600">- replace gnu-javamail dependency to classpathx-mail [bnc#411839]
  - the classpathx-foo is consistent with jpackage.org project</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557403200">- Security fix [bsc#1134598, CVE-2012-5784, CVE-2014-3596]
  Missing connection hostname check against X.509 certificate name
  * Added axis-CVE-2014-3596.patch</changelog>
</package>
<package pkgid="2a27093886619ff44c282e834d7674f577ca015894ccf1ca21b99648217ac4b1" name="axis-manual" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.6.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build with new gcj44</changelog>
  <changelog author="mvyskocil@suse.cz" date="1299844800">- build using openjdk, use ant.build.javac.target and source 1.4
  to prevent javadoc fail, clean up BuildRequires</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mvyskocil@suse.cz" date="1330430400">- strip the jakarta- from classpath to be ready for jakarta-&gt;apache-commons
  renaming
- added some pms and manifest files</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
</package>
<package pkgid="30656d0276ae98c6c56ca5bc9fd51dd663e71776cd8da6f263bec68c7fc0bd4a" name="axis-manual" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.9.1"/>
  <changelog author="tchvatal@suse.com" date="1403870400">- Depend on proper apache pkgs</changelog>
  <changelog author="tchvatal@suse.com" date="1403870401">- Fix back javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Disable javadoc
- Fix build with new ant 1.9.8+
  * axis-ant-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build with new javapackages-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Requires for build java-devel = 1.8.0 since it is the last
  version able to build with source and target levels 1.3</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- BuildRequires: java-devel &gt;= 1.6
- BuildConflicts: java-devel &gt;= 1.9
  * Allow building with wider range of java compilers
- Clean spec file</changelog>
  <changelog author="fstrba@suse.com" date="1507204800">- Remove the 3 deprecated classes from package org.apache.axis.enum
  * allows building with java source and target &gt;= 1.5
- Added patches:
  * axis-encoding.patch
    + Specify file encoding ISO-8859-1 in order to avoid compiler
    errors with characters unmappable in ASCII
  * axis-enum.patch
    + Rename variable enum to emun to avoid clash with reserved
    word in java5+
  * axis-compareto.patch
    + Rewrite the UnsignedInt::compareTo and
    UnsignedLong::compareTo to check first that the Object we
    compare with is instance of the respective class</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536321600">- Security fix: [bsc#1103658, CVE-2018-8032]
  * Apache Axis 1.x up to and including 1.4 is vulnerable to a
    cross-site scripting (XSS) attack in the default
    servlet/services.
  * Added axis-CVE-2018-8032.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1557403200">- Security fix [bsc#1134598, CVE-2012-5784, CVE-2014-3596]
  Missing connection hostname check against X.509 certificate name
  * Added axis-CVE-2014-3596.patch</changelog>
</package>
<package pkgid="c8edd1b74d598f7fcf6bc25b29eaaa91be202a6000ffbdecc4328084a94f9212" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="lp150.13.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="12eb626ed468cc74605c485b213147dcfcee28406f7e47e0c8af92e0ad265208" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.13.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="e4562164d93dd04a4983b7f7f864d3e7c10f67d195034594f82e75ccef375593" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="58b8c6c54d802871414a9648f7e56d42019c71c5a445ce6bf9d628945f328a21" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="ecdbb46a89fff9876fe215c544c7642df7d174e1ff3c75994a6a38bd9859ba21" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
</package>
<package pkgid="dbcd197cc83a5f2d8083d3e2be48aa5491aabbcc99c0b6b2fc46596e25366b15" name="bash-completion" arch="src">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
</package>
<package pkgid="1b246b3da35ee80fee0659a59f6638683cf4c9be2d41a4181e8c5a516754e5d8" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
</package>
<package pkgid="1b4469ca5809fb0e158cdfa8f02ada4a2e4f5077381270843ac47818c19c3b42" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.7" rel="lp150.3.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="ccdc10f2d234c1e2dac63e1eff1571af80ef0792fe1544c32974142a853b61d1" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.13.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="83b604b1cc0d720ee539fe8575a8cb44babab889bd4a3b37adfb313e45189f8a" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="13293bc2d6eedad4d849fe53ca2991b13e0f5999e4b1a2bcab5bab71a33ffcbc" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp150.13.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="74b1e6b07359ef69a344beadedc3f7d09c8a1152ca69a5b52818a3bf580388d2" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="351b9f79f86100d6230653d46ce324ed8812897fd7f0277e72b2dd4f5f646ffb" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp150.13.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="c341ec9d49c2ed80b0045dbe2ab78562d2403eb0a4a7b2024facd68100280c9a" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="d3b675e6fd31d187ae5781fe9f2862b51f062c72cdc6f5d9af95566c529a2bcc" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.13.1"/>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
</package>
<package pkgid="2827ff8de6abd2786bc8921c7995811a25c381c44e8576a7a03ea196b3de73d4" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp150.8.3.1"/>
  <changelog author="werner@suse.de" date="1485518400">- Add upstream patch bash44-006
  Out-of-range negative offsets to popd can cause the shell to crash
  attempting to free an invalid memory block.
- Remove patch popd-offset-overflow.patch to use bash44-006
- Add upstream patch bash44-007
  When performing filename completion, bash dequotes the directory
  name being completed, which can result in match failures and
  potential unwanted expansion.
- Duplicate bash44-007 as readline70-002 as it seems to be missed
- Add upstream patch bash44-008
  Under certain circumstances, bash will evaluate arithmetic
  expressions as part of reading an expression token even when
  evaluation is suppressed. This happens while evaluating a
  conditional expression and skipping over the failed branch of the
  expression.
- Add upstream patch bash44-009
  There is a race condition in add_history() that can be triggered
  by a fatal signal arriving between the time the history length
  is updated and the time the history list update is completed.
  A later attempt to reference an invalid history entry can cause
  a crash.
- Add upstream patch bash44-010
  Depending on compiler optimizations and behavior, the `read'
  builtin may not save partial input when a timeout occurs.
- Add upstream patch bash44-011
  Subshells begun to run command and process substitutions may
  attempt to set the terminal's process group to an incorrect
  value if they receive a fatal signal.  This depends on the
  behavior of the process that starts the shell.
- Add upstream patch bash44-012
  When -N is used, the input is not supposed to be split using
  $IFS, but leading and trailing IFS whitespace was still removed.</changelog>
  <changelog author="werner@suse.de" date="1485777600">- Add upstream patch readline70-002 which replace old one
  There is a race condition in add_history() that can be triggered by a fatal
  signal arriving between the time the history length is updated and the time
  the history list update is completed. A later attempt to reference an
  invalid history entry can cause a crash.
- Add upstream patch readline70-003
  Readline-7.0 uses pselect(2) to allow readline to handle signals that do not
  interrupt read(2), such as SIGALRM, before reading another character.  The
  signal mask used in the pselect call did not take into account signals the
  calling application blocked before calling readline().</changelog>
  <changelog author="werner@suse.de" date="1487332800">- Remove bash-4.0-async-bnc523667.dif as this one is fixed (and
  was disabled and nobody had reported trouble)</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
</package>
<package pkgid="a8d8ca947267797a273c93f49affb54c979c165024107e0224b7e22e4888f796" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="bf677b37f6bc3c180633c800d782eba158ab0ce4c84659c632ee1aecb0b18082" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="3ff129bafc6e3622bebf8543041866c7e20fdccf6bbf1dc6f11cb2793f851e8c" name="bc" arch="src">
  <version epoch="0" ver="1.07.1" rel="lp150.2.3.2"/>
  <changelog author="postadal@suse.cz" date="1033992000">- removed recompilation of libmath.h [#20241]</changelog>
  <changelog author="postadal@suse.cz" date="1037793600">- returned the recompilation of libmath.h and fixed the problematic
  part which caused segmentation fault on 64bit archs [#21697]</changelog>
  <changelog author="kukuk@suse.de" date="1044532800">- Use install-info macros
- Fix bc.info (add dir entry)</changelog>
  <changelog author="ro@suse.de" date="1051185600">- fix install_info --delete call and move from preun to postun</changelog>
  <changelog author="schwab@suse.de" date="1058875200">- Fix unbalanced identifier tree.</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- build as user</changelog>
  <changelog author="postadal@suse.cz" date="1093867200">- fixed for new flex</changelog>
  <changelog author="mmj@suse.de" date="1120737600">- add missing decls</changelog>
  <changelog author="mmj@suse.de" date="1127131200">- fix strict aliasing issues</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rguenther@suse.de" date="1175169600">- add flex BuildRequires</changelog>
  <changelog author="pgajdos@suse.cz" date="1181649600">- repared acceptance of some long commandline options
  [#282747]</changelog>
  <changelog author="schwab@suse.de" date="1198756800">- Fix last change.
- Fix detection of empty opt_expression in the parser.</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
</package>
<package pkgid="44ad4d8ce43b3e2e603c85a56d0e14a7b8a4ac724bdde6d449bc18c4b0f69e23" name="bc" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="lp150.2.3.2"/>
  <changelog author="rguenther@suse.de" date="1175169600">- add flex BuildRequires</changelog>
  <changelog author="pgajdos@suse.cz" date="1181649600">- repared acceptance of some long commandline options
  [#282747]</changelog>
  <changelog author="schwab@suse.de" date="1198756800">- Fix last change.
- Fix detection of empty opt_expression in the parser.</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
</package>
<package pkgid="bcc0e7577add7e54945d1ee869edd306b243279b0d26a147a674a9250fb7f8df" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1298289600">- create package</changelog>
  <changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of another patch from 0001- to 1001- to indicate this
  is specific patch for SUSE,
  - 1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
</package>
<package pkgid="9183d057ac06163a9debdaaafe3d90ffda1fe3e9c5444086dabac5530be0d14b" name="bcm43xx-firmware" arch="noarch">
  <version epoch="0" ver="20180314" rel="lp150.2.3.1"/>
  <changelog author="fvogt@suse.com" date="1472126400">- Add initial package</changelog>
  <changelog author="fvogt@suse.com" date="1472472000">- Make Source: URLs absolute
- Update brcmfmac43430-sdio.bin to 7.45.41.26</changelog>
  <changelog author="afaerber@suse.de" date="1472558400">- Renamed package from brcm43430-firmware to bcm43430-firmware</changelog>
  <changelog author="afaerber@suse.de" date="1472904000">- Renamed package from bcm43430-firmware to bcm43xx-firmware (duwe)
- Renamed brcmfmac43430-sdio.txt to brcmfmac43430-sdio-rpi3.txt and
  added post-install script to symlink
  * Added brcmfmac43362-sdio-{cubietruck,bananapi-{m1+,m2}}.txt</changelog>
  <changelog author="afaerber@suse.de" date="1473249600">- Move %post script to install-brcmfmac.sh, add 50-brcmfmac.conf.
  This avoids workarounds for Kiwi images. (tiwai)</changelog>
  <changelog author="afaerber@suse.de" date="1476792000">- Dropped brcmfmac43430-sdio.bin (in kernel-firmware now)</changelog>
  <changelog author="tbechtold@suse.com" date="1483444800">- Add brcmfmac4329-sdio-cubox-i.txt and brcmfmac4330-sdio-cubox-i.txt.</changelog>
  <changelog author="afaerber@suse.de" date="1483876800">- Add vendor prefix for CuBox-i compatible string
- Reorder by board name</changelog>
  <changelog author="afaerber@suse.de" date="1484568000">- Add brcmfmac4339-sdio-vega-s95-telos.txt</changelog>
  <changelog author="afaerber@suse.de" date="1491825600">- Require kernel-firmware, suggested by fvogt. (bsc#1033137)
  Don't require version 20161005 or later, to remain compatible
  with older distributions.
- Bump version to today's date. This will allow other packages
  such as kernel-firmware to conflict against our older version.</changelog>
  <changelog author="afaerber@suse.de" date="1497268800">- Add Supplements for Raspberry Pi 3 (bsc#1041823)
- Resolve NUL char warning on modprobe for Tumbleweed by properly
  iterating over zero-separated DT compatible strings</changelog>
  <changelog author="agraf@suse.com" date="1521028800">- Add support for RPi 3 B+ (bcm43455, bsc#1085262)</changelog>
  <changelog author="tiwai@suse.de" date="1530014400">- Add brcmfmac4356-pcie.txt for BCM 4356 PCI (bsc#1099149)</changelog>
</package>
<package pkgid="efe0713a55b938697d311979aa9c00ddb84b8cbde4dcae552774d52de53f00fe" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="ee9fbdf7e013bf329011610619de77de01fab64aa3c40fc86914988962dbee84" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="a29b7b57262f39ce3132033c3f5dfe3999f3a6689b989a1ae06fb415672779a1" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="e90c0c896bb529d26c611c4b4c8996b41bbc154803d091f5e3c4b81cd9dbf4e3" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="ee126c2137dc4185e7e9644e56dda19696faeefcbbaf30d859aea9431b7077c1" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="8af796b6650fc1ec30bd95c97e236c9b4894ed293ac5ec200a36a0a7fb04d084" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="2ff3c23abdeef2e2cafb4e93c64d25342022d0418c60f5071d013ac30dacf5a1" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="3036171dd9fb66d0b58b35c5ccb63fce9b7bd6062919cbd0b42e235862ff55a7" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="78f14eca7fed13b12de1fd5d475be4b966add65e44ec7863d5f0bbe487d9a108" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="a0e1ecceba94fecf96e874510d78dc376decb8426ab764bb076815cb80f5eab0" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="81dec0b136dde40bb190459323bd8c4dc340460003f791533ab24b6efd7d52c7" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="bc384e70aea81380dda05162c6b1efb531fc229c94a88234f4ac392d4a26e44b" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="5fb6dab135b2ea8cfb5deefea6f91566a0660f4c203db57b150bca213020fa62" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="35068629b7875fd4425766286a14eff55b2309d421e42d171fe1500897d4ef9d" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="7bc9507858124740cb2872dbd4a76da122cfc15e2e4e605e096914838a948202" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="c318aced5d49a3c8af3fb8b64db5917a316eab7904a37536e95690d4c3e57069" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="d5f8aaeccf2009e91f1b2ebf500d98db7d7e384568887f1eee6e6f8daf9b57dd" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="6f5f95f8c65602e36bccf9e1948733449330508ed8005647bd19d7a43ac58286" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="1796e116dba6f3f088ed44624da4aa9d0fe9e12891aae63750ad55f1acee5d37" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="cd9b3c28e0d50e2fa6ff1fe7c49ec45123fdce9fbd7f5d2b5626cef99265b683" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="8bee499fc7e48483e31ce1c65e7e5e83161b8ff309e5945d3c75b7ce8119da6a" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="3b0b7559a77287dfd5de4c3892d46ea10d80acda6f6580110d953ee063894c7f" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="d3fc5e0638463a9ad4452c5ba0c951a20fc93bb4acb272ce99fef6458edfe41e" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="0dd54b60cf16a3f53f9b0d554fa6eebd4e17c432c78e660bb2010c5699713206" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="48ec73052ad2baa5247b4911436c0bda27b5b5974f9b2554e37395987ef8ba9b" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="d9d4c12f89bbc24598a021c2b944a04122c8cdc1e6e08eb0268926af47775fbc" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="9c744de02aca5d5781ccf47a4930d3e474ff536b25238b115bb962d658a7b9be" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="a2e7370292061d5ea40e5c2def92f8b9c53fd8e5649e5fbfdf42ecac3c927961" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="b0790e85520f0ea02607a4fa8a18d3ee86af29565152d4302b4caead314eece1" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="93d47234f6ca12622e4187ba23d9293561d4991916ee3604c3d0a6d961109336" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="bcd7e4b9eb963819d4d8de13afd823aa036d68864cba89d27489ca0b63fe64ee" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="8f93a472719e5cf6bb210a32443743e47e5589ee88012b46b9122ada7b6a8550" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="17c95d5e21c306083e99a755c2278f10ebf5821ca73e251c737fbfa7b7088288" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="309449156ccc32ffa955bf4029974461defedfae7519437de8f5011e11bf5196" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="42cdd00d9d9b05633722de6134f6d5240f706bf179f242b0c59b4ceb495fea44" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="a504f221444297d3efa0ec4ea46f2e3207176555fc10a2a0d7aed7a1a346ad8d" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.13.1"/>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
</package>
<package pkgid="fe38e43b56b8007d1e39a6ed80470e7086eaa8f111803df8e0ba400846f6fed3" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.16.1"/>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1558353600">- CVE-2018-5740, bsc#1104129, bind-CVE-2018-5740.patch:
  A flaw in the "deny-answer-aliases" feature can cause an INSIST
  assertion failure in named.
- CVE-2018-5745, bsc#1126068, bind-CVE-2018-5745.patch:
  An assertion failure can occur if a trust anchor rolls over to
  an unsupported key algorithm when using managed-keys.
- CVE-2019-6465, bsc#1126069, bind-CVE-2019-6465.patch:
  Controls for zone transfers may not be properly applied to
  Dynamically Loadable Zones (DLZs) if the zones are writable.
- CVE-2018-5743, bsc#1133185, bind-CVE-2018-5743.patch:
  Limiting simultaneous TCP clients is ineffective.</changelog>
  <changelog author="Navin Kukreja &lt;navin.kukreja@suse.com&gt;" date="1562587200">- Don't rely on /etc/insserv.conf anymore for proper dependencies
  against nss-lookup.target in named.service and lwresd.service
  (bsc#1118367 bsc#1118368)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1568635200">- CVE-2019-6471, bsc#1138687, bind-CVE-2019-6471.patch:
  reachable assert in dispatch.c</changelog>
</package>
<package pkgid="7ba4296fa72a547140c801c5e239b7b3af9bb0778d51550f560efb456ef2e126" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="7f8cb5ab46fa888978a957146bca24f3c2f3a1da287eaca60f944d193bd45573" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="a20d54031ab4497457e9e1ee26e19fabd1d8825b6f8e2c3a70b67668e9ba051d" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.9.1"/>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550232000">- Add bug-4697-Restore-workaround-for-Microsoft-Windows-T.patch
  Fixes dynamic DNS updates against samba and Microsoft DNS servers
  (bsc#1094236).</changelog>
</package>
<package pkgid="abf41de0e2d4825ca10b912dac46b95ade1e573406333518d62f96adc372a121" name="binutils" arch="src">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="f44a326c3a93c9b33e22769a743a9835cb8bf5f08c23abfa78918254a6ae7275" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="d713c7e8f36c45d9d1f64e65903905f9e355911408631d9c0ddccae7db58725a" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="4109922051be913017ee331e329200c2147fb1174c33c0c8e075d0b0507ac42e" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="dbc08e8efcd0f89fb2ad37e430c74e8ec19fdeb61fd20b0ff10f0fce6043b3c1" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="d5b5e2bd5803228cce97a8fbafb02ef5ca638d2b7b1f33b2a186b30f6af56ea0" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3" rel="lp150.3.3.1"/>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1528113600">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="525abf7ccaabcb90ef6e9b549097ab34b9c69a136c2d0b50d2cdab219ee69585" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp150.3.3.1"/>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1528113600">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="83ab04873a64028018dac97ea8f9fcd7dbf9c6ecef80873273a5018b0f7961e9" name="bitcoin-qt5" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="02c10fd25f6b626611b699383a7dcce1af433ad0b63ea1237f5c993abb0307ba" name="bitcoin-test" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="bfd9614ed950bd91858fa4288689166b69bc75584ae893033bbc9a7c6273918d" name="bitcoin-utils" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="cf6d88351d85865fffe8f161855863ae4905e137d83e9f191e27ce212b52c9b0" name="bitcoind" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1456056000">- Update to 0.12.0
  * For a complete list of changes see provided release-notes
- Small spec file cleanups
  * remove old obsole/provides
  * move icon handling scriplets to correct subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Use pretty name for tarball
- Update describtion in .firewall</changelog>
  <changelog author="mpluskal@suse.com" date="1462017600">- Update to 0.12.1
  * For a complete list of changes see provided release-notes
- Drop no longer needed patch
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Small spec file polishing</changelog>
  <changelog author="mpluskal@suse.com" date="1464350400">- Remove unnecessary build dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1466251200">- Update test dependencies
- Build with safer ldflags</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466424000">- put back still need patch for ppc64le
  bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
  (subset of upstream commit id cf5c786)</changelog>
  <changelog author="mpluskal@suse.com" date="1472040000">- Update to version 0.13.0:
  * For a complete list of changes see provided release-notes
- Drop upstreamed patch:
  * bitcoin_missing_ppc64le_in_ax_boost_base.m4.patch
- Fail build on testsuite failure</changelog>
  <changelog author="mpluskal@suse.com" date="1474200000">- Speedup build/reduce it's memory consumption by using gold linker</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 0.13.1:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Update to version 0.14.0:
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 0.14.1:
  * For a complete list of changes see provided release-notes
- Update unit file</changelog>
  <changelog author="mpluskal@suse.com" date="1497873600">- Update to version 0.14.2
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1505217600">- Update to version 0.15.0
  * For a complete list of changes see provided release-notes</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.15.0.1:
  * Some clients may have crashed at startup because a custom fee
    setting was configured that no longer exists in the GUI
  * Small translation updates
  * update manpages, forgotten in 0.15.0
- Small specfile cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1514808000">- Update to version 0.15.1:
  * Network fork safety enhancements
  * Miner block size limiting deprecated
  * GUI settings backed up on reset
  * Duplicate wallets disallowed
  * Debug -minimumchainwork argument added
  * Low-level RPC changes
- Fix building with current boost:
  * bitcoin-boost_1_66.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Trim redundant wording from description.</changelog>
  <changelog author="develop7@develop7.info" date="1520596800">- Update to version 0.16.0
  * Segwit Wallet
  * BIP173 (Bech32) Address support ("bc1..." addresses)
  * HD-wallets by default
  * Replace-By-Fee by default in GUI
  * Wallets directory configuration (`-walletdir`)
  * Build: Minimum GCC bumped to 4.8.x
  * Support for signalling pruned nodes (BIP159)
  * Performance: SHA256 assembly enabled by default
  * GUI changes
  * RPC changes
- Remove bitcoin-boost_1_66.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 0.16.1:
  * For complete list of changes see release-notes-0.16.1.md</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.16.3:
  * For complete list of changes see:
    + release-notes-0.16.3.md
    + release-notes-0.16.2.md
- Resolves bsc#1108992 CVE-2018-17144</changelog>
</package>
<package pkgid="4f019e88b81a450a0ef71711122be75f4e4cf37675f6869c9244aaf70ccae603" name="blas-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="d8863e950ffeabd6b09474ec5ac33100ff923f33d42009376974cda0e40249da" name="blas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="d65760d5a3f2b5468b2810e24626cae242e4645a92a9f7f1fad52ca7c9055ea7" name="blas-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="49be6613cd44c3a18283dfe1d5057095497db2b5caf8ea60d406cc4476624b9d" name="blas-man" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="261f4f590e6388900428884de368a130fc083521c32452ef395c932bac433223" name="bleachbit" arch="noarch">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="e0717a7d817998f7ef9740ced4a33191497d31c2ba4deaf4c93c1f05d65361ed" name="bleachbit-lang" arch="noarch">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="1b9238eeb3661213ddf280bcc5633ff6c3a7c419087d6567bdc9f771d50b35a0" name="blender" arch="x86_64">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences  Themes  User Interface  Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="0371a8f050342eaeb2ac846f7b0123f0fb4d4770cb07aea7dfcbbd2fb8f175f1" name="blender-devel" arch="noarch">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences  Themes  User Interface  Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="37eae4337426387bcbff11e2963ed71a4048e78723bca5b7ef67a7d94c9e9c9e" name="blender-lang" arch="noarch">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences  Themes  User Interface  Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="05bb4f8c7ab688c252eca47936af48eecdd9b6c1c168ef2681758ce12b0d8e5d" name="blktrace" arch="src">
  <version epoch="0" ver="1.1.0+git.20170126" rel="lp150.2.3.1"/>
  <changelog author="jblunck@suse.de" date="1228824000">- blkparse: Track smallest sequence read per device</changelog>
  <changelog author="jblunck@suse.de" date="1234267200">- Added missing pdf documentation for btt and btreplay (bnc #465134).</changelog>
  <changelog author="jblunck@suse.de" date="1241092800">- Build with docs by default.</changelog>
  <changelog author="jblunck@suse.de" date="1243598400">- Update to version 1.0.1:
  * blkrawverify: warn and return error if no traces are found
  * blkiomon manpage and usage reference invalid "msg-queue-name" option
  * fix up btrace options &amp; manpage
  * more manpage fixups
  * fix max-pkts option inconsistencies
  * Converted to using the correct remap entries
  * blkiomon: fix unaligned accesses on ia64
  * fix off-by-one issues in blkiomon.h
  * fix include statement in stats.h
  * handle race to mkdir at startup
  * Fixed plug/unplug logic in btt
  * Working on fixing % time q plugged
  * fix trivial typo in manpage
  * Add NOTIFY to activity mask
  * Blktrace failed to lock reader threads on the cpu used by the
    corresponding writer. This resulted in stale data being consumed when
    blktrace accidently read at a position that was being written to at the
    same time. This issue surfaced as "bad trace magic" warnings emitted by
    blktrace tools.
  * Generate matplotlib plots for btt generated data
  * Update Jenkins hash to lookup3() variant
  * Fixed EAGAIN handling in blktrace.c
  * O_NOATIME isn't always present
  * btt: Added no remap option
  * btt general cleanup plus valgrind clean
  * btt: Missed fopen conversion to my_fopen
  * Code review updates
  * Reworked blktrace master/thread interface
  * Cleaned up devs that have no data
  * Moved starting of tracing after tracers are going
  * btt: fixed open in setup_ifile
  * Synchronized trace gathering
  * Invoke gethostbyname once, handle errors better
  * Added accept as a system call needing resource increases
  * Rewrote blktrace to have a single thread per CPU
  * Fix btt to handle large numbers of output files
  * Increased limits to allow for large system runs
  * A couple of min-counters weren't initialised correctly (thrput_r,
    thrput_w). We have got a perfectly working init function for this
    purpose. Removing partially duplicated code.
  * The git commit 11914a53d2ec2974a565311af327b8983d8c820d added
    __BLK_TA_ABORT to blktrace_api.h. A corresponding addition to the blktrace
    tools repository has been missing, breaking the API. Blkparse complained:
    "Bad fs action 40010011"
  * Added no messages option to blkparse.c
  * gcc 4.3.2 has started to warn about:
  * Added -P to create a data file w/ Q, D and C per line
  * Fixed 'M' displays on per-io output and added in I/O separator
  * Fixed segfault in aqd.c : need to check for NULL (not requested)
  * Added in -z to provide running waiting-for-issue latencies
  * Moved btrecord/btreplay to version 1.0.0</changelog>
  <changelog author="jblunck@suse.de" date="1245153600">- Fix typo in btt (bnc #511264).</changelog>
  <changelog author="jblunck@suse.de" date="1248177600">- Fix memory leak in btrecord (bnc #523444).</changelog>
  <changelog author="marek.belisko@open-nandra.com" date="1255608000">- Fix memory leak (bnc #546035)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed (missing -pthread)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1316606400">- disable parallel build again</changelog>
  <changelog author="jeffm@suse.de" date="1319716800">- Update to v1.0.3 (bnc#720300 and others).
  - Updated documentation
  - Fixed multiple output errors
  - Added FLUSH/FUA support
  - Misc bug fixes</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="werner@suse.de" date="1343044800">- Add some missed fonts</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.0.5 version:
  * Fix compiler warnings
  * avoid string overflows
- Some improvements like using macro instead of RPM variables</changelog>
  <changelog author="dsterba@suse.cz" date="1412337600">- Update to 1.1.0:
  - merge iowatcher</changelog>
  <changelog author="jeffm@suse.com" date="1461672000">- Add _service for automatic git syncing
  + exclude .git when generating tarball
  + enable automatic changelog updating</changelog>
  <changelog author="jeffm@suse.com" date="1461672001">- Update to version 1.1.0+git.20160425:
  * Refer to sda instead of hda in man pages
  * btreplay: Fix typo in scaling up the dynamic cpu set size.
  * include sys/types.h for dev_t definition
  * Fix warnings on newer gcc
  * Add the "-a discard" filter option to the blktrace.8 man page
  * blktrace: Use number of online CPUs
  * btreplay: fix memory corruption caused by CPU_ZERO_S
  * btreplay: fix sched_{set|get}affinity
  * btreplay: make Ctrl-C work
  * btreplay: remove timestamps</changelog>
  <changelog author="mpluskal@suse.com" date="1480075200">- Update to version 1.1.0+git.20160823:
  * Use maximum over all traces for queue depth
  * Process notify events outside of given interval
  * iowatcher: Use queue events if issue not available
  * btt: Replace overlapping IO
  * Zero sectors are strange
  * Don't prepend blktrace destination dir if we didn't run blktrace
  * Separate prefix in legend with space
  * Fixup graph name in help text
  * blktrace: remove -k from manpage synopsis
  * iowatcher: link with -lrt</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Update to version 1.1.0+git.20170126:
  * blktrace: Add support for sparse CPU numbers
  * blktrace: Reorganize creation of output file name
  * blktrace: Create empty output files for non-existent cpus</changelog>
  <changelog author="jeffm@suse.com" date="1528200000">- btt: make device/devno use PATH_MAX to avoid overflow
  (CVE-2018-10689 bsc#1091942).
  - Added btt-make-device-devno-use-path_max-to-avoid-overflow.patch</changelog>
</package>
<package pkgid="4156aa58b62487014d88786527e898c8fa03163480b4bb0be08022ec4b5178aa" name="blktrace" arch="x86_64">
  <version epoch="0" ver="1.1.0+git.20170126" rel="lp150.2.3.1"/>
  <changelog author="jblunck@suse.de" date="1241092800">- Build with docs by default.</changelog>
  <changelog author="jblunck@suse.de" date="1243598400">- Update to version 1.0.1:
  * blkrawverify: warn and return error if no traces are found
  * blkiomon manpage and usage reference invalid "msg-queue-name" option
  * fix up btrace options &amp; manpage
  * more manpage fixups
  * fix max-pkts option inconsistencies
  * Converted to using the correct remap entries
  * blkiomon: fix unaligned accesses on ia64
  * fix off-by-one issues in blkiomon.h
  * fix include statement in stats.h
  * handle race to mkdir at startup
  * Fixed plug/unplug logic in btt
  * Working on fixing % time q plugged
  * fix trivial typo in manpage
  * Add NOTIFY to activity mask
  * Blktrace failed to lock reader threads on the cpu used by the
    corresponding writer. This resulted in stale data being consumed when
    blktrace accidently read at a position that was being written to at the
    same time. This issue surfaced as "bad trace magic" warnings emitted by
    blktrace tools.
  * Generate matplotlib plots for btt generated data
  * Update Jenkins hash to lookup3() variant
  * Fixed EAGAIN handling in blktrace.c
  * O_NOATIME isn't always present
  * btt: Added no remap option
  * btt general cleanup plus valgrind clean
  * btt: Missed fopen conversion to my_fopen
  * Code review updates
  * Reworked blktrace master/thread interface
  * Cleaned up devs that have no data
  * Moved starting of tracing after tracers are going
  * btt: fixed open in setup_ifile
  * Synchronized trace gathering
  * Invoke gethostbyname once, handle errors better
  * Added accept as a system call needing resource increases
  * Rewrote blktrace to have a single thread per CPU
  * Fix btt to handle large numbers of output files
  * Increased limits to allow for large system runs
  * A couple of min-counters weren't initialised correctly (thrput_r,
    thrput_w). We have got a perfectly working init function for this
    purpose. Removing partially duplicated code.
  * The git commit 11914a53d2ec2974a565311af327b8983d8c820d added
    __BLK_TA_ABORT to blktrace_api.h. A corresponding addition to the blktrace
    tools repository has been missing, breaking the API. Blkparse complained:
    "Bad fs action 40010011"
  * Added no messages option to blkparse.c
  * gcc 4.3.2 has started to warn about:
  * Added -P to create a data file w/ Q, D and C per line
  * Fixed 'M' displays on per-io output and added in I/O separator
  * Fixed segfault in aqd.c : need to check for NULL (not requested)
  * Added in -z to provide running waiting-for-issue latencies
  * Moved btrecord/btreplay to version 1.0.0</changelog>
  <changelog author="jblunck@suse.de" date="1245153600">- Fix typo in btt (bnc #511264).</changelog>
  <changelog author="jblunck@suse.de" date="1248177600">- Fix memory leak in btrecord (bnc #523444).</changelog>
  <changelog author="marek.belisko@open-nandra.com" date="1255608000">- Fix memory leak (bnc #546035)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1315051200">- Fix build with no-add-needed (missing -pthread)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1316606400">- disable parallel build again</changelog>
  <changelog author="jeffm@suse.de" date="1319716800">- Update to v1.0.3 (bnc#720300 and others).
  - Updated documentation
  - Fixed multiple output errors
  - Added FLUSH/FUA support
  - Misc bug fixes</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="werner@suse.de" date="1343044800">- Add some missed fonts</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.0.5 version:
  * Fix compiler warnings
  * avoid string overflows
- Some improvements like using macro instead of RPM variables</changelog>
  <changelog author="dsterba@suse.cz" date="1412337600">- Update to 1.1.0:
  - merge iowatcher</changelog>
  <changelog author="jeffm@suse.com" date="1461672000">- Add _service for automatic git syncing
  + exclude .git when generating tarball
  + enable automatic changelog updating</changelog>
  <changelog author="jeffm@suse.com" date="1461672001">- Update to version 1.1.0+git.20160425:
  * Refer to sda instead of hda in man pages
  * btreplay: Fix typo in scaling up the dynamic cpu set size.
  * include sys/types.h for dev_t definition
  * Fix warnings on newer gcc
  * Add the "-a discard" filter option to the blktrace.8 man page
  * blktrace: Use number of online CPUs
  * btreplay: fix memory corruption caused by CPU_ZERO_S
  * btreplay: fix sched_{set|get}affinity
  * btreplay: make Ctrl-C work
  * btreplay: remove timestamps</changelog>
  <changelog author="mpluskal@suse.com" date="1480075200">- Update to version 1.1.0+git.20160823:
  * Use maximum over all traces for queue depth
  * Process notify events outside of given interval
  * iowatcher: Use queue events if issue not available
  * btt: Replace overlapping IO
  * Zero sectors are strange
  * Don't prepend blktrace destination dir if we didn't run blktrace
  * Separate prefix in legend with space
  * Fixup graph name in help text
  * blktrace: remove -k from manpage synopsis
  * iowatcher: link with -lrt</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Update to version 1.1.0+git.20170126:
  * blktrace: Add support for sparse CPU numbers
  * blktrace: Reorganize creation of output file name
  * blktrace: Create empty output files for non-existent cpus</changelog>
  <changelog author="jeffm@suse.com" date="1528200000">- btt: make device/devno use PATH_MAX to avoid overflow
  (CVE-2018-10689 bsc#1091942).
  - Added btt-make-device-devno-use-path_max-to-avoid-overflow.patch</changelog>
</package>
<package pkgid="756bd709f31da86514cc63a654c8594003e5f616d024d6835ddb77a57ae6cc4d" name="blueman" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp150.5.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="23a76a3abc41ef84ac893769aeb67974958299cb1bbc7b2e7c50b7aaf79f558f" name="blueman" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp150.5.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="03995738f30beb5f23d7c4ef1b92523056d5ed5ef6f39cc0041cde82791f99be" name="blueman-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="lp150.5.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="c120f92f90d80a7031da3fc9c94fdf86a3d7ca5e86dcb092f49d54f2a9d5a4b8" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="8eba011b9453b52217a8af3ea5d53a0ea5da9edaa2f37d70252cb6ff54c5c33f" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="bc6a42238e4058adf7ceb3b11066109766368b990f38767022437475112bb389" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="2f124c8f0230f2d1e6adb4aaf3fb34ca44d65da72c9ba63f87a5e21317b45868" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="2b0888597596cb6f0e77b6e319693cc258966dba6e5ec6e90d9961c2c439d875" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="a5d0ea4e952e5559c96b9d16de30f138d387df2267c7f8f38cafa81159799277" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="efeb5d3fad37c9a2c62536f13d2311588e0d2aea3a42f6d96809b0de0ed4ba2d" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="4ec82bee568d012a1c0e82b1f1b2eb451cf9f55d64ab687b567bb0e2f84f0f09" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="f9065836d7a131fcfff826f1780b396534c5a7927cf11857d363d04510bf3368" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="85f04391e2dd095a561a73a98c4993b576b5938b4ab1cd324125a1f31d5c04b4" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="59534c5f330ccfccd9adca75f5494f4516a14d2e0e5d17fdcd255ff7d1ddd584" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="f83dce66a9e31f916675e402de3bb2a7546c87bf67b9853f26897c9c08b27e52" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="93bd8ec2d0833683e0b1544b66c704f613adca5e76732a7d873c4ab91b8f275f" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="33889fc96cdf333bc5dcbf1702bd6e5c5288b1ea116dbfac1f0b081b62d583ec" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="a2508a9d0c7f60c230aced5fc6cb52aacd60f3b8ec86311857eb44db5586152c" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="b135fe406deb2c45366c6ace52f666ec3ea33e065c29d5bf349ca346023f852c" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="c6fa9fe326c97b1d89c2139c427f9217fdd94ca3221ebdbd7eb8ca2ce83bfe24" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="2fc4033c8294dce2833d6599b28b91cb6629a756eedcd536444beeabb04fe3bd" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="ab0610e26beec31ed55f062c2645d2167cd3348219488044703805df929509bc" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="1cd2bf88546c7a453116f55933dcf8e18e55ff2a31bd8be43f9c3e73e3d61f26" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="620079aa281dee1f3ab598812ad3488ce675ce679879cbea82ab06eccd719435" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="611754b973696b7bfd6e0f2f426eee01c0c2477eb8ae11eafcf217e0110ee08f" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="7d42abe97c8cbf6b086be96b769b8bca2b34066073755b6215fa7f538b67d93a" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="7cf08e66484124e053a49d4673184bfbd57ade75277267a7570029d95d0a80c3" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="9172611c34b677183a37bc3fcd6f949162d3264291c152a91fb27aeb9ef9f2c8" name="bluez-qt" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.4.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="4c6297906c800d557c08d48c6f62ba85156c6bf96a7b61ebcd6697374511e4a8" name="bluez-qt-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.4.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="a840da28ba4f40352abdbbc5d4f47629efda039dd902eb47623582ab5f08dfd5" name="bluez-qt-imports" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.4.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="53b3e0399897622061a7f0b91b2737371473447b3ffa59036c648b59b6b4918a" name="bluez-qt-udev" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.4.1"/>
  <changelog author="alarrosa@suse.com" date="1479124800">- Specify the file to be included in bluez-qt-udev instead of
  owning the /lib/udev/ directory.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1479124801">- (Build)Require udev so udevrulesdir gets owned</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Provide device type for Low Energy devices
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Pass an explicit list of arguments. This prevents QProcess from trying to handle our space containing path through a shell
  * Fix property changes being missed immediately after an obejct is added (kde#377405)</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * API dox: note CamelCase includes by @class tag
  * API dox: add namespace to classes named in README.md
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Autotests: repair finding helper binary in current setup
  * autotests: fix running with CTEST_PARALLEL_LEVEL=8
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * autotests: remove now unnecessary compat code
  * autotests: fix failure to find fakebluez in the bin dir.
  * Autotests: Fix finding fakebluez binary (kde#383453)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Do not leak rfkill file descriptors. (kde#386886)</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Autogenerate debug file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * No need to initialize m_usableAdapterwith nullptr</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * None</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1539950400">- Fix install directory for udev rules (boo#1112598)</changelog>
</package>
<package pkgid="2fb064079bb15c52fdfd58986599082117418ac0af1c702d5c887f4b42501f32" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.10.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
</package>
<package pkgid="d434bcf2783f8bb72af02b02e8df254d4d5bdf85f5cb29735879874520636dd0" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
</package>
<package pkgid="5bf2c3bcbead9e6a48ba618eb5f28faba3fc58a59b6859598362b5edba5087e7" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="6a97396c1aed8c57b732c9a1aaa39f887f9dc5abe2c6daa4d2df891d8c710a3b" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
</package>
<package pkgid="de96827acf62bcc2173912a5ed8bcbaa1a8ba8828878cce2a06d15d0aaa27c6f" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="8b2eb26fee12687d74e7feda4ba18ea48e939c35d45a9cc89e235cf3fa80ef83" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="4c4511cbe384f9c2c460a6a6dc03479b68f9e9acf1f707e39c4ad2cbfbdc1124" name="breeze" arch="src">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="ddaa6b042d55df0afc5750ea73378ea37213b5745ab01ea058470fbea0ad4731" name="breeze" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="a496d9413a98d8ad065e17699794b9670ffcd93b0a5830b5703386f70361a431" name="breeze4-style" arch="src">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Recommend kdebase4-workspace-libs here instead of in patterns-kde
  to only install it with Qt4</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="1121f1aaf684a03acf7e546f661d7e123e60fd8b2a74d550f014795d9080ef60" name="breeze4-style" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Recommend kdebase4-workspace-libs here instead of in patterns-kde
  to only install it with Qt4</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="acda925762ebfd1ef192f135ea9c85385f356a8631041b0cc4d780a0b218c96c" name="breeze5-cursors" arch="noarch">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="13cf9f576ed032ff416c7d4dbd72717ccc67b79f20e6a3bc35d66dddefbd902f" name="breeze5-decoration" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="dcd7b52849b98e80bf0e3da1d511d16992c421c21a17bb17137ec15d70530b62" name="breeze5-style" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="306cb5da4fc6e384fc2443ec97a6b4617705e64947a49b5a443f3d188b280de6" name="breeze5-style-lang" arch="noarch">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="8cd489dd41253841a28990db9c68245c7c9799e285195ffc51b61c46a93ba3d9" name="breeze5-wallpapers" arch="noarch">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * - hide shadow when mask is empty - properly handle creating shadow when mdi window is already visible at registration - added some "auto" declarations CCBUG: 379790</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * [kstyle] Use KWindowSystem to determine on which platform we are</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Use combobox to choose shadow size and use more appropriate values for menu &amp; tooltip shadow sizes
  * Remove obsolete reviewboardrc file
  * Adjusted range and default value for shadowsize and shadowcolor, to match the decoration settings. CCMAIL: pointedstick@zoho.com
  * Horizontally center shadows and make them bigger
  * Make it obvious what "Display window borders for maximized windows" is for
  * Fix indentation of icon for left aligned toolbuttons
  * Fix indentation of icon for left aligned toolbuttons
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * fixed comments
  * fixed icon state
  * When an icon is set to a QMenuBar Item, render the icon only, and ignore the text, when set, as this is what qmenubar expects. BUG: 387539 (kde#387539)
  * [Breeze window decoration] Use intersects instead of contains
  * [Breeze window decoration] Don't repaint title bar if not damaged
  * Removed heuristics for not drawing separator between titlebar and window since there is now a user configurable settings to achieve this
  * Set bottom border to zero for shaded windows
  * Implement SH_Widget_Animation_Duration style hint
  * Cleanup merge conflict
  * Very slightly increase text contrast for the default Breeze color scheme (kde#381288)
  * Added setting to toggle drawing of title bar separator
  * Add space in front of spinbox suffix "ms"
  * better contrast for Complementary areas
  * add license to .desktop file
  * use proper color for toolbutton text in some edge cases (thanks Kay for reporting! )
  * fixed icon mode in some toolbutton corner cases (explicitly: sunken but not on and not mouse over)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix LnF theme data for window decoration</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Render application icon at paintdevice DPR (kde#390639)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * - Moved shadowSize from anonymous namespace to static member function - calculate proper shadow size for Mdi windows - fix mdi windows shadow renderning.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- Changes since 5.12.7:
  * Fix uncentered crosshairs
  * Improve contrast for crosshair cursors (kde#400110)</changelog>
</package>
<package pkgid="9f0b473199a2b6316b60038d47cbaa25fe1259e29cd6a30fbaeccf469194cb3d" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp150.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
</package>
<package pkgid="dc599866637f65ad75ee91054805f65ac0cdc8c854eefcce4327130e9f95ee89" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp150.7.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1385294400">- add optional -static-devel library package, intended to publish pixz
  for CentOS / RHEL, default off
- skip some dependencies not required for pixz on CentOS / RHEL</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- libarchive-xattr.patch, fix subtle wrong library check
  that causes this package to depend on libattr when it should
  be using glibc.</changelog>
  <changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
  <changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870)
  directory-traversal-fix.patch CVE-2015-2304</changelog>
  <changelog author="astieger@suse.com" date="1426420800">- add CVE for previous change</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- RHEL/CentOS build fix, skipping autoreconf</changelog>
  <changelog author="astieger@suse.com" date="1442664000">- build static lib on RHEL 7</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462536000">- add _constraints memory 4096MB to avoid ppc64le build failure</changelog>
  <changelog author="adrian@suse.de" date="1462795200">- 4GB _constraints for ppc64le only, it would break other archs
- update to version 3.2.0
  * Fixes CVE-2016-1541
  * Fixes CVE-2015-8928
  * changes are only documented in git history
  * updated openssl patch
  * new bsdcat utility
- removed obsolete patches for:
  * CVE-2013-0211.patch
  * directory-traversal-fix.patch
  * libarchive-xattr.patch</changelog>
  <changelog author="adrian@suse.de" date="1466078400">- limit size of symlinks in cpio archives (CVE-2016-4809, boo#984990)
  CVE-2016-4809.patch</changelog>
  <changelog author="adrian@suse.de" date="1466424000">- update to version 3.2.1
  Fixes a number of security issues:
    CVE-2015-8934, CVE-2015-8933, CVE-2015-8917, CVE-2016-4301, CVE-2016-4300
- and fixing the build (fix-build.patch)</changelog>
  <changelog author="dmueller@suse.com" date="1469275200">- make bsdtar require a matching libarchive version to avoid
  missing symbol errors</changelog>
  <changelog author="adrian@suse.com" date="1477483200">- update to version 3.2.2
  Unspecified security fixes, but at least:
  * CVE-2016-8687
  * CVE-2016-8689
  * CVE-2016-8688
  * CVE-2016-5844
  * CVE-2016-6250
  * CVE-2016-5418
- obsoletes fix-build.patch</changelog>
  <changelog author="adrian@suse.com" date="1480680000">- fix extracting over symlinks: fix-extract-over-links.patch
  the problem is solved upstream different, but git master
  is too different atm.</changelog>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1539172800">- CVE-2017-14502.patch: bsc#1059100
  CVE-2017-14501.patch: CVE-2017-14503 bsc#1057514 bsc#1059139</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
</package>
<package pkgid="b6746c0654031a545b4b13687244a783e03ae9bd376c6fab75cdd893a313257a" name="btrfsprogs" arch="src">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="dsterba@suse.cz" date="1476705600">- update to 4.8.1
  * 32bit builds fixed
  * build without backtrace support fixed
- update to 4.8
  * error handling improvements all over the place
  * new fuzzed images, test updates
  * doc fixups
  * minor cleanups and improvements
  * kernel library helpers moved to own directory
  * qgroup: fix regression leading to incorrect status after check,
    introduced in 4.7</changelog>
  <changelog author="jeffm@suse.com" date="1477396800">- Add ability to provide site specific defaults for mkfs (FATE#320615).
  * Only used for SLES11 defaults.
- Added patch mkfs-default-features.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1477828800">- update to 4.8.2
  * convert: also convert file attributes
  * convert: fix wrong tree block alignment for unalianged block group
  * check: quota verify fixes, handle reloc tree
  * build: add stub for FIEMAP_EXTENT_SHARED, compiles on ancient kernels
  * build: add stub for BUILD_ASSERT when ioctl.h is included
  * dump-tree: don't crash on unrecognized tree id for -t
  * tests:
  * add more ioctl tests
  * convert: more symlink tests, attribute tests
  * quota verify for reloc tree
  * other cleanups</changelog>
  <changelog author="dsterba@suse.cz" date="1483444800">- update to 4.9
  * check: many lowmem mode updates
  * send: use splice syscall to copy buffer from kernel
  * receive: new option to dump the stream in textual form
  * convert:
  * move sources to own directory
  * prevent accounting of blocks beyond end of the device
  * make it work with 64k sectorsize
  * mkfs: move sources to own directory
  * defrag: warns if directory used without -r
  * dev stats:
  * new option to check stats for non-zero values
  * add long option for -z
  * library: version bump to 0.1.2, added subvol_uuid_search2
  * other:
  * cleanups
  * docs updates
- update to 4.8.5
  * receive: fix detection of end of stream (error reported even for valid
    streams)
  * other:
  * added test for the receive bug
  * fix linking of library-test
- update to 4.8.4
  * check: support for clearing space cache v2 (free-space-tree)
  * send:
  * more sanity checks (with tests), cleanups
  * fix for fstests/btrfs/038 and btrfs/117 failures
  * build:
  * fix compilation of standalone ioctl.h, pull NULL definition
  * fix library link errors introduced in 4.8.3
  * tests:
  * add more fuzzed images from bugzilla
  * add bogus send stream checks
  * fixups and enhancements for CI environment builds
  * misc refinements and updates of testing framework
  * other:
  * move sources for btrfs-image to own directory
  * deprecated and not build by default: btrfs-calc-size, btrfs-show-super
  * docs updates
- update to 4.8.3
  * check:
  * support for clearing space cache (v1)
  * size reduction of inode backref structure
  * send:
  * fix handling of multiple snapshots (-p and -c options)
  * transfer buffer increased (should reduce number of context switches)
  * reuse existing file for output (-f), eg. when root cannot create files (NFS)
  * dump-tree:
  * print missing items for various structures
  * new: dev stats, balance status item
  * sync key names with kernel (the persistent items)
  * subvol show: now able to print the toplevel subvolume -- the creation time
    might be wrong though
  * mkfs:
  * store the creation time of toplevel root inode
  * print UUID in the summary
  * build: travis CI for devel
  * other:
  * lots of cleanups and refactoring
  * switched to on-stack path structure
  * fixes from coverity, asan, ubsan
  * new tests
  * updates in testing infrastructure
  * fixed convert test 005</changelog>
  <changelog author="dsterba@suse.cz" date="1491393600">- update to 4.10.2
  * check: lowmem mode fix for false alert about lost backrefs
  * convert: minor bugfix
  * library: fix build, misisng symbols, added tests
- update to 4.10.1
  * receive: handle subvolume in path clone
  * convert: rollback fixed (rewrite was needed to address previous design issues)
  * build: fix build of 3rd party tools, missing &lt;linux/sizes.h&gt;
  * dump-tree: print log trees
  * other: new and updated tests
- update to 4.10
  * send: dump output fixes: missing newlies
  * check: several fixes for the lowmem mode, improved error reporting
  * build
  * removed some library deps for binaries that not use them
  * ctags, cscope
  * split Makefile to the autotool generated part and the rest, not needed
    to autogen.sh after adding a file
  * shared code: sync easy parts with kernel sources
  * other
  * lots of cleanups
  * source file reorganization: convert, mkfs, utils
  * lots of spelling fixes in docs, other updates
  * more tests
- update to 4.9.1
  * check:
  * use correct inode number for lost+found files
  * lowmem mode: fix false alert on dropped leaf
  * size reports: negative numbers might appear in size reports during device
    deletes (previously in EiB units)
  * mkfs: print device being trimmed
  * defrag: v1 ioctl support dropped
  * quota: print message before starting to wait for rescan
  * qgroup show: new option to sync before printing the stats
  * other:
  * corrupt-block enhancements
  * backtrace and co. cleanups
  * doc fixes</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- btrfs-support-pie.patch: remove CFLAGS usage from linker lines,
  this will allow the default PIE support to work.</changelog>
  <changelog author="dsterba@suse.cz" date="1503921600">- update to 4.12.1
  * build:
  * fix cross-compilation
  * use gnu90 explicitly
  * dump-tree: more relaxed checks so -b can print block on a damaged fs
  * convert: fix the 1MB range exclusion
  * check: more dir_item hash checks
  * other
  * added missing getopt spec for some options
  * doc fixes
  * cleanups
  * test updates
- update to 4.12
  * subvol show: new options --rootid, --uuid to show subvol by the given spec
  * convert: progress report fixes, found by tsan
  * image: progress report fixes, found by tsan
  * fix infinite looping in find-root, or when looking for free extents
  * other:
  * code refactoring
  * docs updates
  * build: ThreadSanitizer support
  * tests: stricter checks for mounted filesystem
- update to -4.11.1
  * image: restoring from multiple devices
  * dev stats: make --check option work
  * check: fix false alert with extent hole on a NO_HOLE filesystem
  * check: lowmem mode, fix false alert in case of mixed inline and compressed
    extent
  * convert: work with large filesystems (many TB)
  * convert: fix overwriting of eb header flags
  * convert: do not clear NODATASUM flag in inodes when run with --no-datasum
  * docs updates
  * build: sync Android.mk with Makefile
  * tests:
  * new tests
  * fix 008 and 009, shell quotation mistake
- update to 4.11
  * receive: fix handling empty stream with -e (multi-stream)
  * send dump: fix printing long file names
  * stability fixes for: dump-super, print-tree, check
  * option parser updates: global options are parsed before the subcommand name
    (old xfstests will fail)
  * new and updated tests
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1503921601">- Removed patches:
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1505304000">- update to version 4.13:
  * convert: reiserfs support
  * check: new option --force to allow check of a mounted filesystem (no repair)
  * mkfs: --rootdir will now copy special files
  * dump-tree: minor output changes
  * inspect rootid: accept file as arugment
  * dev usage: don't calculate slack space for missing devices
  * fi du: don't print error on EMPTY_SUBVOL (inode number 2)
  * build:
  * fixed support for sanitization features on gcc (tsan, asan, ubsan)
  * fix PIE build
  * other:
  * misc cleanups and stability fixes
  * travis CI enhancements
  * new tests, fuzzed images
  * testsuite cleanups
- Removed patches:
  - 0163-btrfs-progs-fsck-fix-segfault.patch - will be upstreamed
  - local-version-override.patch - not needed anymore
  - btrfs-support-pie.patch - upstremed</changelog>
  <changelog author="dsterba@suse.cz" date="1506513600">- update to version 4.13.1:
  * image: speed up generating the sanitized names, do not generate unprintable chars
  * completion: add missing commands, better mount point detection
  * restore: add zstd support; libzstd detected automatically, will be
    requested by default in the future, or can be configured out
  * other:
  * misc fixes found by sparse
  * doc enhancements, ioctl manual page started
  * updated and new tests
  * build fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1507204800">- update to version 4.13.2:
  * subvol list:
  * don't list toplevel subvolume among deleted (broken since 4.8.3)
  * minor adjustments of uuid print format
  * subvol delete:
  * fix swapped behaviour of --commit-each and --commit-after
  * fix potentially lost sync if subvolumes are from different filesystems
  * check: add cache for metadata blocks, should improve performance
  * other:
  * new tests, testsuite updates
  * doc updates
  * cleanups</changelog>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1548936000">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1554724800">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
</package>
<package pkgid="c0fa9cdedd4c2dceaf3f8978d83cec24bb1e2e28d3f9e67fdb9f8929357ef397" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="dsterba@suse.cz" date="1476705600">- update to 4.8.1
  * 32bit builds fixed
  * build without backtrace support fixed
- update to 4.8
  * error handling improvements all over the place
  * new fuzzed images, test updates
  * doc fixups
  * minor cleanups and improvements
  * kernel library helpers moved to own directory
  * qgroup: fix regression leading to incorrect status after check,
    introduced in 4.7</changelog>
  <changelog author="jeffm@suse.com" date="1477396800">- Add ability to provide site specific defaults for mkfs (FATE#320615).
  * Only used for SLES11 defaults.
- Added patch mkfs-default-features.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1477828800">- update to 4.8.2
  * convert: also convert file attributes
  * convert: fix wrong tree block alignment for unalianged block group
  * check: quota verify fixes, handle reloc tree
  * build: add stub for FIEMAP_EXTENT_SHARED, compiles on ancient kernels
  * build: add stub for BUILD_ASSERT when ioctl.h is included
  * dump-tree: don't crash on unrecognized tree id for -t
  * tests:
  * add more ioctl tests
  * convert: more symlink tests, attribute tests
  * quota verify for reloc tree
  * other cleanups</changelog>
  <changelog author="dsterba@suse.cz" date="1483444800">- update to 4.9
  * check: many lowmem mode updates
  * send: use splice syscall to copy buffer from kernel
  * receive: new option to dump the stream in textual form
  * convert:
  * move sources to own directory
  * prevent accounting of blocks beyond end of the device
  * make it work with 64k sectorsize
  * mkfs: move sources to own directory
  * defrag: warns if directory used without -r
  * dev stats:
  * new option to check stats for non-zero values
  * add long option for -z
  * library: version bump to 0.1.2, added subvol_uuid_search2
  * other:
  * cleanups
  * docs updates
- update to 4.8.5
  * receive: fix detection of end of stream (error reported even for valid
    streams)
  * other:
  * added test for the receive bug
  * fix linking of library-test
- update to 4.8.4
  * check: support for clearing space cache v2 (free-space-tree)
  * send:
  * more sanity checks (with tests), cleanups
  * fix for fstests/btrfs/038 and btrfs/117 failures
  * build:
  * fix compilation of standalone ioctl.h, pull NULL definition
  * fix library link errors introduced in 4.8.3
  * tests:
  * add more fuzzed images from bugzilla
  * add bogus send stream checks
  * fixups and enhancements for CI environment builds
  * misc refinements and updates of testing framework
  * other:
  * move sources for btrfs-image to own directory
  * deprecated and not build by default: btrfs-calc-size, btrfs-show-super
  * docs updates
- update to 4.8.3
  * check:
  * support for clearing space cache (v1)
  * size reduction of inode backref structure
  * send:
  * fix handling of multiple snapshots (-p and -c options)
  * transfer buffer increased (should reduce number of context switches)
  * reuse existing file for output (-f), eg. when root cannot create files (NFS)
  * dump-tree:
  * print missing items for various structures
  * new: dev stats, balance status item
  * sync key names with kernel (the persistent items)
  * subvol show: now able to print the toplevel subvolume -- the creation time
    might be wrong though
  * mkfs:
  * store the creation time of toplevel root inode
  * print UUID in the summary
  * build: travis CI for devel
  * other:
  * lots of cleanups and refactoring
  * switched to on-stack path structure
  * fixes from coverity, asan, ubsan
  * new tests
  * updates in testing infrastructure
  * fixed convert test 005</changelog>
  <changelog author="dsterba@suse.cz" date="1491393600">- update to 4.10.2
  * check: lowmem mode fix for false alert about lost backrefs
  * convert: minor bugfix
  * library: fix build, misisng symbols, added tests
- update to 4.10.1
  * receive: handle subvolume in path clone
  * convert: rollback fixed (rewrite was needed to address previous design issues)
  * build: fix build of 3rd party tools, missing &lt;linux/sizes.h&gt;
  * dump-tree: print log trees
  * other: new and updated tests
- update to 4.10
  * send: dump output fixes: missing newlies
  * check: several fixes for the lowmem mode, improved error reporting
  * build
  * removed some library deps for binaries that not use them
  * ctags, cscope
  * split Makefile to the autotool generated part and the rest, not needed
    to autogen.sh after adding a file
  * shared code: sync easy parts with kernel sources
  * other
  * lots of cleanups
  * source file reorganization: convert, mkfs, utils
  * lots of spelling fixes in docs, other updates
  * more tests
- update to 4.9.1
  * check:
  * use correct inode number for lost+found files
  * lowmem mode: fix false alert on dropped leaf
  * size reports: negative numbers might appear in size reports during device
    deletes (previously in EiB units)
  * mkfs: print device being trimmed
  * defrag: v1 ioctl support dropped
  * quota: print message before starting to wait for rescan
  * qgroup show: new option to sync before printing the stats
  * other:
  * corrupt-block enhancements
  * backtrace and co. cleanups
  * doc fixes</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- btrfs-support-pie.patch: remove CFLAGS usage from linker lines,
  this will allow the default PIE support to work.</changelog>
  <changelog author="dsterba@suse.cz" date="1503921600">- update to 4.12.1
  * build:
  * fix cross-compilation
  * use gnu90 explicitly
  * dump-tree: more relaxed checks so -b can print block on a damaged fs
  * convert: fix the 1MB range exclusion
  * check: more dir_item hash checks
  * other
  * added missing getopt spec for some options
  * doc fixes
  * cleanups
  * test updates
- update to 4.12
  * subvol show: new options --rootid, --uuid to show subvol by the given spec
  * convert: progress report fixes, found by tsan
  * image: progress report fixes, found by tsan
  * fix infinite looping in find-root, or when looking for free extents
  * other:
  * code refactoring
  * docs updates
  * build: ThreadSanitizer support
  * tests: stricter checks for mounted filesystem
- update to -4.11.1
  * image: restoring from multiple devices
  * dev stats: make --check option work
  * check: fix false alert with extent hole on a NO_HOLE filesystem
  * check: lowmem mode, fix false alert in case of mixed inline and compressed
    extent
  * convert: work with large filesystems (many TB)
  * convert: fix overwriting of eb header flags
  * convert: do not clear NODATASUM flag in inodes when run with --no-datasum
  * docs updates
  * build: sync Android.mk with Makefile
  * tests:
  * new tests
  * fix 008 and 009, shell quotation mistake
- update to 4.11
  * receive: fix handling empty stream with -e (multi-stream)
  * send dump: fix printing long file names
  * stability fixes for: dump-super, print-tree, check
  * option parser updates: global options are parsed before the subcommand name
    (old xfstests will fail)
  * new and updated tests
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1503921601">- Removed patches:
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1505304000">- update to version 4.13:
  * convert: reiserfs support
  * check: new option --force to allow check of a mounted filesystem (no repair)
  * mkfs: --rootdir will now copy special files
  * dump-tree: minor output changes
  * inspect rootid: accept file as arugment
  * dev usage: don't calculate slack space for missing devices
  * fi du: don't print error on EMPTY_SUBVOL (inode number 2)
  * build:
  * fixed support for sanitization features on gcc (tsan, asan, ubsan)
  * fix PIE build
  * other:
  * misc cleanups and stability fixes
  * travis CI enhancements
  * new tests, fuzzed images
  * testsuite cleanups
- Removed patches:
  - 0163-btrfs-progs-fsck-fix-segfault.patch - will be upstreamed
  - local-version-override.patch - not needed anymore
  - btrfs-support-pie.patch - upstremed</changelog>
  <changelog author="dsterba@suse.cz" date="1506513600">- update to version 4.13.1:
  * image: speed up generating the sanitized names, do not generate unprintable chars
  * completion: add missing commands, better mount point detection
  * restore: add zstd support; libzstd detected automatically, will be
    requested by default in the future, or can be configured out
  * other:
  * misc fixes found by sparse
  * doc enhancements, ioctl manual page started
  * updated and new tests
  * build fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1507204800">- update to version 4.13.2:
  * subvol list:
  * don't list toplevel subvolume among deleted (broken since 4.8.3)
  * minor adjustments of uuid print format
  * subvol delete:
  * fix swapped behaviour of --commit-each and --commit-after
  * fix potentially lost sync if subvolumes are from different filesystems
  * check: add cache for metadata blocks, should improve performance
  * other:
  * new tests, testsuite updates
  * doc updates
  * cleanups</changelog>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1548936000">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1554724800">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
</package>
<package pkgid="c19832c2c0544b9625d8193fd97fac59cae386792c7e1e159e537d1790dceb50" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="dsterba@suse.cz" date="1476705600">- update to 4.8.1
  * 32bit builds fixed
  * build without backtrace support fixed
- update to 4.8
  * error handling improvements all over the place
  * new fuzzed images, test updates
  * doc fixups
  * minor cleanups and improvements
  * kernel library helpers moved to own directory
  * qgroup: fix regression leading to incorrect status after check,
    introduced in 4.7</changelog>
  <changelog author="jeffm@suse.com" date="1477396800">- Add ability to provide site specific defaults for mkfs (FATE#320615).
  * Only used for SLES11 defaults.
- Added patch mkfs-default-features.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1477828800">- update to 4.8.2
  * convert: also convert file attributes
  * convert: fix wrong tree block alignment for unalianged block group
  * check: quota verify fixes, handle reloc tree
  * build: add stub for FIEMAP_EXTENT_SHARED, compiles on ancient kernels
  * build: add stub for BUILD_ASSERT when ioctl.h is included
  * dump-tree: don't crash on unrecognized tree id for -t
  * tests:
  * add more ioctl tests
  * convert: more symlink tests, attribute tests
  * quota verify for reloc tree
  * other cleanups</changelog>
  <changelog author="dsterba@suse.cz" date="1483444800">- update to 4.9
  * check: many lowmem mode updates
  * send: use splice syscall to copy buffer from kernel
  * receive: new option to dump the stream in textual form
  * convert:
  * move sources to own directory
  * prevent accounting of blocks beyond end of the device
  * make it work with 64k sectorsize
  * mkfs: move sources to own directory
  * defrag: warns if directory used without -r
  * dev stats:
  * new option to check stats for non-zero values
  * add long option for -z
  * library: version bump to 0.1.2, added subvol_uuid_search2
  * other:
  * cleanups
  * docs updates
- update to 4.8.5
  * receive: fix detection of end of stream (error reported even for valid
    streams)
  * other:
  * added test for the receive bug
  * fix linking of library-test
- update to 4.8.4
  * check: support for clearing space cache v2 (free-space-tree)
  * send:
  * more sanity checks (with tests), cleanups
  * fix for fstests/btrfs/038 and btrfs/117 failures
  * build:
  * fix compilation of standalone ioctl.h, pull NULL definition
  * fix library link errors introduced in 4.8.3
  * tests:
  * add more fuzzed images from bugzilla
  * add bogus send stream checks
  * fixups and enhancements for CI environment builds
  * misc refinements and updates of testing framework
  * other:
  * move sources for btrfs-image to own directory
  * deprecated and not build by default: btrfs-calc-size, btrfs-show-super
  * docs updates
- update to 4.8.3
  * check:
  * support for clearing space cache (v1)
  * size reduction of inode backref structure
  * send:
  * fix handling of multiple snapshots (-p and -c options)
  * transfer buffer increased (should reduce number of context switches)
  * reuse existing file for output (-f), eg. when root cannot create files (NFS)
  * dump-tree:
  * print missing items for various structures
  * new: dev stats, balance status item
  * sync key names with kernel (the persistent items)
  * subvol show: now able to print the toplevel subvolume -- the creation time
    might be wrong though
  * mkfs:
  * store the creation time of toplevel root inode
  * print UUID in the summary
  * build: travis CI for devel
  * other:
  * lots of cleanups and refactoring
  * switched to on-stack path structure
  * fixes from coverity, asan, ubsan
  * new tests
  * updates in testing infrastructure
  * fixed convert test 005</changelog>
  <changelog author="dsterba@suse.cz" date="1491393600">- update to 4.10.2
  * check: lowmem mode fix for false alert about lost backrefs
  * convert: minor bugfix
  * library: fix build, misisng symbols, added tests
- update to 4.10.1
  * receive: handle subvolume in path clone
  * convert: rollback fixed (rewrite was needed to address previous design issues)
  * build: fix build of 3rd party tools, missing &lt;linux/sizes.h&gt;
  * dump-tree: print log trees
  * other: new and updated tests
- update to 4.10
  * send: dump output fixes: missing newlies
  * check: several fixes for the lowmem mode, improved error reporting
  * build
  * removed some library deps for binaries that not use them
  * ctags, cscope
  * split Makefile to the autotool generated part and the rest, not needed
    to autogen.sh after adding a file
  * shared code: sync easy parts with kernel sources
  * other
  * lots of cleanups
  * source file reorganization: convert, mkfs, utils
  * lots of spelling fixes in docs, other updates
  * more tests
- update to 4.9.1
  * check:
  * use correct inode number for lost+found files
  * lowmem mode: fix false alert on dropped leaf
  * size reports: negative numbers might appear in size reports during device
    deletes (previously in EiB units)
  * mkfs: print device being trimmed
  * defrag: v1 ioctl support dropped
  * quota: print message before starting to wait for rescan
  * qgroup show: new option to sync before printing the stats
  * other:
  * corrupt-block enhancements
  * backtrace and co. cleanups
  * doc fixes</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- btrfs-support-pie.patch: remove CFLAGS usage from linker lines,
  this will allow the default PIE support to work.</changelog>
  <changelog author="dsterba@suse.cz" date="1503921600">- update to 4.12.1
  * build:
  * fix cross-compilation
  * use gnu90 explicitly
  * dump-tree: more relaxed checks so -b can print block on a damaged fs
  * convert: fix the 1MB range exclusion
  * check: more dir_item hash checks
  * other
  * added missing getopt spec for some options
  * doc fixes
  * cleanups
  * test updates
- update to 4.12
  * subvol show: new options --rootid, --uuid to show subvol by the given spec
  * convert: progress report fixes, found by tsan
  * image: progress report fixes, found by tsan
  * fix infinite looping in find-root, or when looking for free extents
  * other:
  * code refactoring
  * docs updates
  * build: ThreadSanitizer support
  * tests: stricter checks for mounted filesystem
- update to -4.11.1
  * image: restoring from multiple devices
  * dev stats: make --check option work
  * check: fix false alert with extent hole on a NO_HOLE filesystem
  * check: lowmem mode, fix false alert in case of mixed inline and compressed
    extent
  * convert: work with large filesystems (many TB)
  * convert: fix overwriting of eb header flags
  * convert: do not clear NODATASUM flag in inodes when run with --no-datasum
  * docs updates
  * build: sync Android.mk with Makefile
  * tests:
  * new tests
  * fix 008 and 009, shell quotation mistake
- update to 4.11
  * receive: fix handling empty stream with -e (multi-stream)
  * send dump: fix printing long file names
  * stability fixes for: dump-super, print-tree, check
  * option parser updates: global options are parsed before the subcommand name
    (old xfstests will fail)
  * new and updated tests
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1503921601">- Removed patches:
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1505304000">- update to version 4.13:
  * convert: reiserfs support
  * check: new option --force to allow check of a mounted filesystem (no repair)
  * mkfs: --rootdir will now copy special files
  * dump-tree: minor output changes
  * inspect rootid: accept file as arugment
  * dev usage: don't calculate slack space for missing devices
  * fi du: don't print error on EMPTY_SUBVOL (inode number 2)
  * build:
  * fixed support for sanitization features on gcc (tsan, asan, ubsan)
  * fix PIE build
  * other:
  * misc cleanups and stability fixes
  * travis CI enhancements
  * new tests, fuzzed images
  * testsuite cleanups
- Removed patches:
  - 0163-btrfs-progs-fsck-fix-segfault.patch - will be upstreamed
  - local-version-override.patch - not needed anymore
  - btrfs-support-pie.patch - upstremed</changelog>
  <changelog author="dsterba@suse.cz" date="1506513600">- update to version 4.13.1:
  * image: speed up generating the sanitized names, do not generate unprintable chars
  * completion: add missing commands, better mount point detection
  * restore: add zstd support; libzstd detected automatically, will be
    requested by default in the future, or can be configured out
  * other:
  * misc fixes found by sparse
  * doc enhancements, ioctl manual page started
  * updated and new tests
  * build fixes</changelog>
  <changelog author="dsterba@suse.cz" date="1507204800">- update to version 4.13.2:
  * subvol list:
  * don't list toplevel subvolume among deleted (broken since 4.8.3)
  * minor adjustments of uuid print format
  * subvol delete:
  * fix swapped behaviour of --commit-each and --commit-after
  * fix potentially lost sync if subvolumes are from different filesystems
  * check: add cache for metadata blocks, should improve performance
  * other:
  * new tests, testsuite updates
  * doc updates
  * cleanups</changelog>
  <changelog author="dsterba@suse.cz" date="1509451200">- update to version 4.13.3:
  * check: fix --force, wrong check for a mounted block device
  * build: fix --with-convert parsing
  * subvol list: don't list TOPLEVEL
  * other: update tests</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1548936000">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1554724800">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
</package>
<package pkgid="f4401f7c741fb867a03b0c349d00a3b759e93d5bf10df9cf46d9dfc6746e9830" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.2.0" rel="lp150.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559822400">- add fix-cve-2019-12439.patch to fix boo#1136958 CVE-2019-12439</changelog>
</package>
<package pkgid="57be6b2a6d2d97c8c5a753100eec2852d94686886d06cdeb0dc6f1b3b8ccbff3" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="lp150.2.3.1"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.1" date="1467979200">- Initial package</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 0.1.1-2" date="1468324800">- Trivial fixes in packaging</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1473681600">- Update to 0.1.2</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.1.3-2" date="1476446400">- New upstream version</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1481889600">- upgrade to upstream version 0.1.4
- Build also for Leap 42.2</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559822400">- add fix-cve-2019-12439.patch to fix boo#1136958 CVE-2019-12439</changelog>
</package>
<package pkgid="f3634fcd09e9c20bcf12a28abb92ad24c405dff64a5b32e045e3c2c755071259" name="build" arch="noarch">
  <version epoch="0" ver="20190128" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="008e316aa78ea234d6326ef0bc0306a0652e2cca26707dceeece160617432828" name="build" arch="src">
  <version epoch="0" ver="20190128" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="e9da905a3fb7ab9d3163b9bd63bd828f20f695ba0acae680597614f4c37b6d47" name="build-initvm-i586" arch="noarch">
  <version epoch="0" ver="20190128" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="c6f7db02a1589264965d1f9e7cb89ed29e38368469ffe3d4677dc19161631498" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20190128" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="0700df27ec0131f82e569c8844bdc27bb5fcfdce24672888d52c45fbbf1bbc8a" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20190128" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="813623e62d08354ea799f8e37ac233d87668e2cb0db21c36d0f19e1ac1a74636" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20190128" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1500552000">- switch baselibs scheme for debuginfo packages from
  foo-debuginfo-32bit to foo-32bit-debuginfo [fate#323217]</changelog>
  <changelog author="lnussel@suse.de" date="1501675200">- Temporary hack to aid liblua5_3 -&gt; liblua5_3-5 rename</changelog>
  <changelog author="coolo@suse.com" date="1505995200">- Support getting the container tags from the Dockerfile
- Put the disturl in the .buildenv file
- Support rpm-buildroot-override buildflag
- Support kvm builds on Debian
- Support with/without/unless rich deps
- Added obs-docker-support script for docker images
- Initial SLE 15 config</changelog>
  <changelog author="adrian@suse.de" date="1507809600">- proper fix for for liblua, for factory and leap 15.0</changelog>
  <changelog author="adrian@suse.de" date="1510228800">- fixes syntax error fissile support
- various container handling improvements
- support new debian control.tar.xz files</changelog>
  <changelog author="adrian@suse.de" date="1510920000">- prepare for suse_version 1550 in factory (by Dominique)</changelog>
  <changelog author="coolo@suse.com" date="1511265600">- buildignore the sle flavor of mkbaselibs for sle</changelog>
  <changelog author="adrian@suse.de" date="1511870400">- Fixed Dockerfile repository parsing
- Improve file name check extractbuild (CVE-2017-14804, bsc#1069904)
- track release number of containers
- Define SOURCEURL and PATCHURL macros
- Keep preinstalled packages
- add libidn2 and libunistring to preinstall for archlinux</changelog>
  <changelog author="adrian@suse.de" date="1516795200">- Fix picking of right changes file for changelog generation (boo#1077145)</changelog>
  <changelog author="adrian@suse.de" date="1517400000">- add own baselibs config for SLE 11</changelog>
  <changelog author="adrian@suse.de" date="1518177600">- add sysrq functionality for KVM builds
- add initial SLES 15 config</changelog>
  <changelog author="adrian@suse.de" date="1522756800">- KIWI: Support OBS-Profiles kiwi annotation
    kiwi profile filtering
- Switch to a little perl http server to get rid of the python2 dependency
- Avoid Ubuntu 18.04 uncompress failure messages
- Don't rely on AppImage's auto-detection for architecture
- build-recipe-livebuild: count ONIE images as build results</changelog>
  <changelog author="FSchreiner@suse.com" date="1530273600">- docker:
  * use a correct prefixed label for disturl
  * Support building multiple image types containing a docker image
  * Set build user to root for docker/fissile builds
  * Compress containers so that old kiwi versions can handle them
  * Put obs-docker-support uninstall before the last user line
  * Also pass arch and buildflavor when creating the containerinfo
  * set disturl as container LABEL
  * Uncompress kiwi generated containers
  * build-vm-docker: type=bind instead of type=volume in --mount option
- computeblocklists/extractbuild:
  * Tweak verbose logging of directories in computeblocklists/extractbuild
  * add support for FIEMAP ioctl
  * don't use bare F for file
  * document and use alternate ioctl numbers
  * more tweaks and sanity checks
  * Fallback to encode/decode helpers if perl does not support 'Q' in pack/unpack
  * Use 'eval' when querying the blocklist
- Misc:
  * fix escaping in regexp
  * log toplevel KIWI directories in verbose mode
  * Split kiwi product parser in a separate function
  * Always add extra dependencies when doing sysdeps expansion
  * Fix REPOTYPE setting if the PKGCONFIG file is generated by a service
  * support zypper's handling of versioned deps
  * pam-modules got dropped on sles 15
  * testing for build specific filesystem, which are more important then worker defaults
  * mark lint option as obsolete
  * Make sure that we know all pre/vminstalls</changelog>
  <changelog author="adrian@suse.de" date="1534420800">- docker format: New podman/buildah build engine support
- Support for full names in changes files
- Set %url macro when seeing an Url:
- pacman CLI updates
- enable core dump generation in VM builds
- Disable kpti on guest kernel for performance and correctness
- support for e2fsprogs 1.43.1 with old kernels</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1535544000">- Fall back to $mailaddr if $VC_MAILADDR is unset/null
- don't crash with no rpm macros defined
- Kiwi: support parsing of repos where the .repo file got used
- package hostarch definition in preinstallimages
- avoid double creation of monitor fifo
- Debian:
  - debootstrap: ensure /etc/hosts exists
  - debootstrap: Add abuild shadow password entry
  - livebuild: publish source tarball
  - Adds Debian configurations for jessie and unstable
  - collect *.ddeb, *.udeb files</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1540209600">- require psmisc util for fuser
- Start debian support for kiwi images/containers
- Support building with unordered repositories for kiwi/docker builds
- Write the package list of the base container in kiwi container builds
- Support kiwi's "additionaltags" attribute (added in kiwi 9.15.3)
- Add some substitutes for the extra container tags
- Support "OBS-AddTag" directive to set multiple container tags in kiwi builds
- Archlinux updates
- SLE 12 SP4 config
- Appimage: support source file parsing</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1543233600">- Add Leap 15.1 config</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1544097600">- support jumping into KVM debug shells using "--vm-type=kvm --shell"
- adapt to new containerd CLI syntax
- Support a new 'UseOBSRepositories' flag
- lxc 3 support
- power9 fixes
- Generate a .milestone artifact for kiwi product builds
- Support rpm's new '^' separator in version comparison
- Allow to specify extra image repos with &lt;!-- OBS-Imagerepo: --&gt;
- Rework release handling of containers</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548072000">- update factory config for libreadline8 switch
- cleanup 15.1 config with OBS specific stuff
  * should not be used for plain build usage
  * workarounds for kiwi should be fixed in packages</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1548244800">- add initial SLE 15 SP1 config (bsc#1122895)</changelog>
</package>
<package pkgid="15ca2f998e35b7991612f83b6d462deff0735989dc253522ba65499df145f3ac" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp150.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1358769600">- Executing autoreconf requires autoconf
- Set RPM groups to the common ones we use for library and
  "-devel" packages</changelog>
  <changelog author="idonmez@suse.com" date="1358769601">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="e9732ee9e94543f549d21c3356d7c95300f149f1c7ba17a41e33acb64fc6861f" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp150.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="7681a274f3a76c9cba9151daf0f3678cb1b33433dca9260c5d3277246d8dcda9" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp150.4.6.1"/>
  <changelog author="idonmez@suse.com" date="1358769600">- Add %{version} to Obsoletes/Provides</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="ac8b76d5ed806c18a978d34490fb24f51ca07dd86b7bb8545759e89598a2f626" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp150.4.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="22c83e20acc660b30898a35861ce3fb92a37395d7686040c6ac83b6928522c51" name="bzip2" arch="src">
  <version epoch="0" ver="1.0.6" rel="lp150.4.9.1"/>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="vcizek@suse.com" date="1407240000">- handle pipe input with the -f option (bnc#884004)
  * added bzip2-handle_pipe_input_with-f_option.patch</changelog>
  <changelog author="idonmez@suse.com" date="1407326400">- Implement %check</changelog>
  <changelog author="vcizek@suse.com" date="1409659200">- revert the bzip2-handle_pipe_input_with-f_option.patch because it
  breaks other programs using the bzip2 library</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="83d22e93fdac4306663ee09db6f2ca0df4a2c1c7e1a6a643d2bdb84c4da00edc" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="lp150.4.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="26d7e03265ab36254538e705c356436a89e8559eed14d3064bfb268a32c7697a" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp150.4.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
</package>
<package pkgid="d1bc8e54fbb453a20fc32d665456dece36c74dcd7b2b33878f23045c43322098" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp150.4.6.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
</package>
<package pkgid="f22ae970ed3503a69c73b865e209c57cdae60791a81c3b8f1549401cce516964" name="bzip2-doc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="lp150.4.9.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415016000">- fix basisms in bzgrep and bznew
- add patches:
  * bzip2-1.0.6-fix-bashisms.patch</changelog>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1419854400">- Cleanup a bit.
- Remove the profiling stuff as it should not be used nowdays.
  At least even factory builds without it.
- Provide libbz2.so.1.0 as other distros do, so we can run tiny
  things like steam.
- Respect cflags again, borked by previous commit.</changelog>
  <changelog author="olaf@aepfle.de" date="1420718400">- Avoid noarch sub package in SLE_11</changelog>
  <changelog author="idonmez@suse.com" date="1452686400">- Remove bzip2-faster.patch, it causes a crash with libarchive and
  valgrind points out uninitialized memory. See
  https://github.com/libarchive/libarchive/issues/637#issuecomment-170612576</changelog>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="147e64099d502540af3b867aba8ab5219903c5fca695dbb4dfd4a8a3e3b77080" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20170807.10b2785" rel="lp150.6.3.1"/>
  <changelog author="lnussel@suse.de" date="1396612800">- package correct permissions of generated  directories (bnc#871639)</changelog>
  <changelog author="lnussel@suse.de" date="1396872000">- Fix typo in man page</changelog>
  <changelog author="lnussel@suse.de" date="1399550400">- copy custom pem files in /etc/ssl/certs to /etc/pki/anchors on
  update (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- don't keep certificates with marker (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1403524800">- fix directory permissions for real this time (bnc#871639)</changelog>
  <changelog author="meissner@suse.com" date="1405598400">- clarify the start order of the generators, as certbundle.run
  semi-depends on etc_ssl.run via a timestamp. (bnc#883386)</changelog>
  <changelog author="lnussel@suse.de" date="1406721600">- removed the version in the Obsoletes. The package in SLE11 got
  version updated (bnc#887099).</changelog>
  <changelog author="lnussel@suse.de" date="1407153600">- add p11 kit header to set label of migrated certificates to the
  file name of the previous one (bnc#890205)</changelog>
  <changelog author="lnussel@suse.de" date="1407240000">- use rpm -qf to determine if a ssl cert is owned by some other
  package and therefore doesn't need to be migrated (related to
  bnc#890205).</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="f98aaeb4ffba3c1492abbc168fc6525e81426db801bb294a157dbb776ae29d42" name="ca-certificates" arch="src">
  <version epoch="0" ver="2+git20170807.10b2785" rel="lp150.6.3.1"/>
  <changelog author="lnussel@suse.de" date="1396612800">- package correct permissions of generated  directories (bnc#871639)</changelog>
  <changelog author="lnussel@suse.de" date="1396872000">- Fix typo in man page</changelog>
  <changelog author="lnussel@suse.de" date="1399550400">- copy custom pem files in /etc/ssl/certs to /etc/pki/anchors on
  update (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- don't keep certificates with marker (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1403524800">- fix directory permissions for real this time (bnc#871639)</changelog>
  <changelog author="meissner@suse.com" date="1405598400">- clarify the start order of the generators, as certbundle.run
  semi-depends on etc_ssl.run via a timestamp. (bnc#883386)</changelog>
  <changelog author="lnussel@suse.de" date="1406721600">- removed the version in the Obsoletes. The package in SLE11 got
  version updated (bnc#887099).</changelog>
  <changelog author="lnussel@suse.de" date="1407153600">- add p11 kit header to set label of migrated certificates to the
  file name of the previous one (bnc#890205)</changelog>
  <changelog author="lnussel@suse.de" date="1407240000">- use rpm -qf to determine if a ssl cert is owned by some other
  package and therefore doesn't need to be migrated (related to
  bnc#890205).</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
</package>
<package pkgid="1a25171a45be0d8fcf4000637238848cadf87709d5474abacc0adbb98c72ed9c" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.24" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="29a82e21507ebe2cb1e9a8f1852dad31309d710bed93e8f9c665b9453d5f688d" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.24" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="16de2d2cc490b5bb7a7bda840de30b0d7caddf1e9623d3a6542a5d6c8aebe13a" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.3.6.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="de2460fee6fa7529656498039fdc08fe4e15b6ccce0032a8ef1a11074d487357" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.3.6.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="07064216b7252afad39e70b78ce84ba6ff53c256f04a28fe0010dee0303296f2" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.30" rel="lp150.3.9.1"/>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
</package>
<package pkgid="dd67d1595e9db5992ce0cf4a04291752509767fc7b3cc534449081ff0d93ec12" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.30" rel="lp150.3.9.1"/>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
</package>
<package pkgid="1d82d57011179e2165e016c4d9c14f1b2b2500757443bab8d43a8854a5877708" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.34" rel="lp150.3.13.1"/>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
</package>
<package pkgid="f35f5850aa5aca7aeb0fb6023c8632e2a2084911f9f29f3bf8dc04adb984954b" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.34" rel="lp150.3.13.1"/>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
</package>
<package pkgid="b3a458ed0208611ca7346aa12684e2716af0de1830df30c4385a46546568116d" name="caca-utils" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1336996800">- update to libcaca-0.99beta18
  - new "cacaclock" utility
  - improved FIGlet support
  - improved Python and Ruby bindings
  - numerous improvements and bugfixes
- fix build with ruby 1.9 and re-enable python support</changelog>
  <changelog author="jengelh@inai.de" date="1338292800">- Use autoreconf instead of ./bootstrap since (a) that works,
  (b) avoids the inflexible handcrafted automake version check</changelog>
  <changelog author="puzel@suse.com" date="1338292801">- fix build with automake-12.1</changelog>
  <changelog author="cfarrell@suse.com" date="1338984000">- license update: SUSE-WTFPL-2.0
  SPDX format (choose from http://www.spdx.org/licenses or the list linked
  at license.opensuse.org)</changelog>
  <changelog author="dmueller@suse.com" date="1363521600">- add buildconditional to build optionally without mono</changelog>
  <changelog author="mhrusecky@suse.cz" date="1369828800">- fix build with different versions of ruby</changelog>
  <changelog author="coolo@suse.com" date="1392897600">- remove SUSE prefix from license</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412164800">- Cleanup buildRequires, remove use of xorg-x11-*</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412337600">- Add baselibs.conf as source to make factory-auto bot happy</changelog>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1548158400">- Prevent overflow of arithmetic of large (unsigned) ints by
  * declaring fields as size_t
  * casting intermediate results to uint64_t
  [CVE-2018-20544, bsc#1120502,
  CVE-2018-20545, bsc#1120584,
  CVE-2018-20546, bsc#1120503,
  CVE-2018-20547, bsc#1120504,
  CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470,
  libcaca-prevent-overflow.patch]</changelog>
</package>
<package pkgid="5ff082aa89cdabd32c50f672196079552718a876e1cf7ea42184db31c03f26ba" name="cairo" arch="src">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="668984bba9974a193ab0b6f29b5333e56168e2c2d681b373dbda459dddbc5f50" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="d74fb56d25dc89053c60437f799980f2d60a0b820cfd543d209f95a0b30ff333" name="cairo-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="5a34c408b47efc5da9a3199ed16b53b8600e036fe19fa816dcf68127fd03f518" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="cea896dc72b5c6392fb7b1d9d10cbb7c9f96656f9c79c4214f8b16f4b4c61e08" name="calamares" arch="x86_64">
  <version epoch="0" ver="3.1.11" rel="lp150.2.3.2"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1496664000">- Provide branding package separately.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501416000">- Updated to Calamares 3.1.1:
  - Improved salting for user passwords.
  - Crash on startup when no installation-devices are found has
    been fixed.
  - Support for very small screens (800x600) is improved.
  - Hostnames may be up to 63 characters in length, conforming to
    RFC1123 and various LDAP schemas.
  - System language, locale settings and keyboard are now guessed
    based on installer language and location.
  - Crashreporter added to release tarball.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501761600">- Backport upstream patch to enable autologin configurations
  3.1.2-SUSE_DM_-_add_special_case_configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267200">- Updated to Calamares 3.1.2:
  - Translation updates.
  - Summary page now shows language and number-formats information.
  - The Quit and Done buttons now have a tooltip explaining what
    they will do.
  - At the end of the install process, a notification appears in
    the system notification area (generally a pop-up in the lower
    right-hand corner of the screen).
  - If installation fails, the system won?t reboot automatically on
    the last Calamares page.
  - Fat32 filesystems are now handled correctly even when misspelled.
  - Filesystem sizes are now shown with an MB suffix.
- Modify 3.1.2-SUSE_DM_-_add_special_case_configuring_autologin_in_sysconfig.patch
  and rename it to 3.1.2-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267201">- Updated to Calamares 3.1.3:
  - Python jobs without a pretty_name() function ? and that is the
    majority of them ? could no longer be run.
  - The installation-is-done notification could hang Calamares when
    the installation failed.
- Update 2.4-unpackfs.conf.patch and rename it to
  3.1.3-unpackfs.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267202">- Don't build calamares_crash_reporter for openSUSE Tumbleweed,
  otherwise entire building fails.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267203">- Drop 2.4-QT5.5-compat.patch: openSUSE Leap 42.1 no longer supported.
- Drop 3.1-users.conf.patch: no longer need to dissable autologin.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504440000">- Updated to Calamares 3.1.4 pre-release git version b22bd67:
  - Fix partitioning regressions in Calamares 3.1.2/3.1.3.
  - Drop calamares_crash_reporter.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
</package>
<package pkgid="e5123c8d8829fe6aaf7a6e04b798164942e2633a2d29386a58d29e7903068c27" name="calamares-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.1.11" rel="lp150.2.3.2"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1496664000">- Provide branding package separately.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501416000">- Updated to Calamares 3.1.1:
  - Improved salting for user passwords.
  - Crash on startup when no installation-devices are found has
    been fixed.
  - Support for very small screens (800x600) is improved.
  - Hostnames may be up to 63 characters in length, conforming to
    RFC1123 and various LDAP schemas.
  - System language, locale settings and keyboard are now guessed
    based on installer language and location.
  - Crashreporter added to release tarball.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501761600">- Backport upstream patch to enable autologin configurations
  3.1.2-SUSE_DM_-_add_special_case_configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267200">- Updated to Calamares 3.1.2:
  - Translation updates.
  - Summary page now shows language and number-formats information.
  - The Quit and Done buttons now have a tooltip explaining what
    they will do.
  - At the end of the install process, a notification appears in
    the system notification area (generally a pop-up in the lower
    right-hand corner of the screen).
  - If installation fails, the system won?t reboot automatically on
    the last Calamares page.
  - Fat32 filesystems are now handled correctly even when misspelled.
  - Filesystem sizes are now shown with an MB suffix.
- Modify 3.1.2-SUSE_DM_-_add_special_case_configuring_autologin_in_sysconfig.patch
  and rename it to 3.1.2-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267201">- Updated to Calamares 3.1.3:
  - Python jobs without a pretty_name() function ? and that is the
    majority of them ? could no longer be run.
  - The installation-is-done notification could hang Calamares when
    the installation failed.
- Update 2.4-unpackfs.conf.patch and rename it to
  3.1.3-unpackfs.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267202">- Don't build calamares_crash_reporter for openSUSE Tumbleweed,
  otherwise entire building fails.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267203">- Drop 2.4-QT5.5-compat.patch: openSUSE Leap 42.1 no longer supported.
- Drop 3.1-users.conf.patch: no longer need to dissable autologin.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504440000">- Updated to Calamares 3.1.4 pre-release git version b22bd67:
  - Fix partitioning regressions in Calamares 3.1.2/3.1.3.
  - Drop calamares_crash_reporter.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
</package>
<package pkgid="ffec64ffbee48064fad6a9b9a6713b74fed72ad361682fcc8825c833e43b1de3" name="calamares-webview" arch="x86_64">
  <version epoch="0" ver="3.1.11" rel="lp150.2.3.2"/>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1496664000">- Provide branding package separately.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501416000">- Updated to Calamares 3.1.1:
  - Improved salting for user passwords.
  - Crash on startup when no installation-devices are found has
    been fixed.
  - Support for very small screens (800x600) is improved.
  - Hostnames may be up to 63 characters in length, conforming to
    RFC1123 and various LDAP schemas.
  - System language, locale settings and keyboard are now guessed
    based on installer language and location.
  - Crashreporter added to release tarball.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1501761600">- Backport upstream patch to enable autologin configurations
  3.1.2-SUSE_DM_-_add_special_case_configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267200">- Updated to Calamares 3.1.2:
  - Translation updates.
  - Summary page now shows language and number-formats information.
  - The Quit and Done buttons now have a tooltip explaining what
    they will do.
  - At the end of the install process, a notification appears in
    the system notification area (generally a pop-up in the lower
    right-hand corner of the screen).
  - If installation fails, the system won?t reboot automatically on
    the last Calamares page.
  - Fat32 filesystems are now handled correctly even when misspelled.
  - Filesystem sizes are now shown with an MB suffix.
- Modify 3.1.2-SUSE_DM_-_add_special_case_configuring_autologin_in_sysconfig.patch
  and rename it to 3.1.2-configuring_autologin_in_sysconfig.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267201">- Updated to Calamares 3.1.3:
  - Python jobs without a pretty_name() function ? and that is the
    majority of them ? could no longer be run.
  - The installation-is-done notification could hang Calamares when
    the installation failed.
- Update 2.4-unpackfs.conf.patch and rename it to
  3.1.3-unpackfs.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267202">- Don't build calamares_crash_reporter for openSUSE Tumbleweed,
  otherwise entire building fails.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504267203">- Drop 2.4-QT5.5-compat.patch: openSUSE Leap 42.1 no longer supported.
- Drop 3.1-users.conf.patch: no longer need to dissable autologin.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504440000">- Updated to Calamares 3.1.4 pre-release git version b22bd67:
  - Fix partitioning regressions in Calamares 3.1.2/3.1.3.
  - Drop calamares_crash_reporter.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1504785600">- Update to Calamares 3.1.4:
  - A race condition leading to crashes when starting Calamares
    has been resolved.
  - Packages module has been seriously revamped; it is now also
    translatable.
  - Translations in the partitioning module have been improved.
  - Encrypted swap is now correctly configured.
  - Minor visual improvements.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1506513600">- Update to Calamares 3.1.5:
  - Python 3.4 is once again supported.
  - Improved reporting of dependencies in CMake.
  - Dozens of compilation warnings fixed up.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507032000">- Merge calamares and calamares-libs3 into one RPM package:
  Calamares' developers don't guarantee stable API or ABI,
  libraries are not intended to be used by other programs.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1507809600">- Remove -devel subpackage: libraries are not intended to be used
  by other programs.
- Fix Python shebang in main.py files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1508760000">- Update to Calamares 3.1.6:
  - fixes two regressions introduced in 3.1.5
  - improving timezone selection in northern locations.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438400">- Update to Calamares 3.1.7 fixes two regressions introduced
  earlier in the 3.1 series (3.1.5 or before):
  - Netinstall was no longer compatible with the packages module,
    which prevented any users of netinstall from installing
    packages from online repositories.
  - The bootloader installation for EFI systems used the wrong
    name for the bootx64.efi (or bootia32.efi) files.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1511438401">- Update to Calamares 3.1.8:
  - Fix Netinstall crash if the returned netinstall-groups
    data was empty.
  - Fix regression were GeoIP data had been read twice.
  - Use more support code from KPMCore, instead of doing it
    ourselves.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1512561600">- Update to Calamares 3.1.9:
  - Fix bug in Netinstall corner cases: a hidden subgroup would be
    installed even when its parent was not selected, and a hidden
    subgroup could cause its parent to default to unselected.
  - The branding element ProductLogo is used as the logo, instead
    of the product icon.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1513598400">- Update to Calamares 3.1.10:
  - fix bug then Python job-modules could not use pretty_name() for
    reporting the module status when the job was started.
  - The packages module can now be enabled, but then skipped if
    no internet is available (this is a preferred configuration for
    distro's which would like to install packages, but which are
    optional when there is no connection).</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1514548800">- Update to Calamares 3.1.11:
  - fix bug then some poorly-configured systems cannot reliably set
    the hardware clock (RTC). Previously this was an error which
    would abort the entire installation. Calamares now ignores the
    error.
  - 3.1.4-packages.conf.patch updated and renamed as
    3.1.11-packages.conf.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1531656000">- Fix building for openSUSE Leap 42.3 by switching to GCC7.</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1549454400">- Add patch 3.1.4-unpackfs.conf_Leap15.patch to reflect changed
  path to LiveOS read-only filesystem in KIWI-ng (KIWI 9)
  (bnc#1124451).
- BuildRequires libboost_python3-devel for Leap 15.0 and newer
  instead of boost-devel (bnc#1124423, upstream issue 817).</changelog>
</package>
<package pkgid="dde59002074c4358222e369136b7a8a26b852eb0885c331c28ae35a5f2fafc4d" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.25.0" rel="lp150.3.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1510401600">- update to 3.12.0
  New Features
  - Driver for the new Nook Glowlight 3
  - Allow configuring the metadata fields displayed in the popup
    book details window. To configure, simply click the 'Configure'
    link at the bottom of the window.
  - Wireless driver: Allow specifying extra file formats
    (unknown to calibre) to send
  Bug Fixes
  - Fix a regression that caused clicking the clear button in the
    main search bar to not unapply the current search until enter
    is pressed.
  - Linux: Fix a regression causing calibre to fail to start on
    systems with no DBUS session bus
  - Browser viewer: Fix body font being forced to sans-serif,
    overriding in book and user stylesheet settings
  - Fix sending email failing of the computer's FQDN is set
    to a single period.</changelog>
  <changelog author="ecsos@opensuse.org" date="1512129600">- update to 3.13.0
  New Features
  - Driver for the new Bq Cervantes 4
  - Edit book: Auto-generate links to existing stylesheets when
    adding a new HTML file.
  - Add a button to easily clear server logs in
    Preferences-&gt;Sharing over the net-&gt;Show server logs.
  - Catalog generation: Store the list of fields to be used in
    generating CSV/XML catalogs per library.
  - Bulk metadata edit: Make the custom series controls similar to
    the builtin series ones, with the same set of features
  - Edit book: Pre-select existing cover image (if any) in add
    cover dialog
  - Make the Manage saved searches dialog a little easier for new
    users.
  - Add a tweak to control behavior of Enter on the book list
  - Content server: Fix random book button on book details page
    multiplying.
  - Edit Book: Bulk file rename dialog: Remember last used prefix
    for renaming files
  Bug Fixes
  - Tag browser: Fix use of the tweak to control order of items in
    the Tag browser causing unexpected expansion of items after
    editing metadata.
  - Content server: Improve rendering of tags/categories with long
    words on small screens.
  - Fix first added saved search not appearing in Tag browser until
    calibre restart.
  - When checking added books for duplicates, also check on the
    language field. So books with the same title/authors but
    different languages are not considered duplicates.
  - Edit Book: Spell check should not fail if there are non-HTML
    files in the spine
  - Conversion: Fix an error when using the embed_all_fonts option
    with certain books
  - Save to disk: Dont error out if the user deletes all formats
    to be saved.
  - Linux binary: Fix calibre not starting on systems where
    QT_QPA_PLATFORM is set to use wayland</changelog>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
</package>
<package pkgid="270ead96a0cd383d33e4019b6cb2ec72cd597a2fb9559798ff85e7b00be0585d" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.12.1"/>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1539950400">- Add the following patches to add support for the Kobo Forma (boo#1112569):
  * kobo_forma.patch
  * remove_debugging_lines.patch
  * update_kokbo_driver_1.patch</changelog>
</package>
<package pkgid="cdb51a6a94682ec6885137590d1486eaf048c3c418581aa9a1c86678f188649a" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.15.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1539950400">- Add the following patches to add support for the Kobo Forma (boo#1112569):
  * kobo_forma.patch
  * remove_debugging_lines.patch
  * update_kokbo_driver_1.patch</changelog>
  <changelog author="Cor Blom &lt;cornelis@solcon.nl&gt;" date="1541764800">- Add Kindle-paperwhite-2018.patch to add support for the new Kindle
  Paperwhite 2018 (boo#1115506)</changelog>
</package>
<package pkgid="3ec17eb9213e386bea329bcc6837fa400f3ab47346d5f44bebbf9cc0e23d068f" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
</package>
<package pkgid="a18ad51732052145d033eb2e2d4a3f43771fa5f86b7c89c2e63b5333195c04f0" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
</package>
<package pkgid="a885e92342791a769693bec6b9a8a18340af9852135d0c7441a562ad6b44ad9a" name="cargo" arch="src">
  <version epoch="0" ver="0.26.0" rel="lp150.2.3.4"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525953600">- Update to version 0.26.0:
  + No longer removes rust or rs prefixs/suffixs.
  + Now defaults to creating a binary crate, instead of a library
    crate.</changelog>
  <changelog author="mmanu84@outlook.de" date="1526040000">- adapt cargo bootstrap version to 0.26.0
- adapt rustc bootstrap version to 1.25.0
- adapt rustc to 1.25.0</changelog>
</package>
<package pkgid="795442a2ff6c70935c645eb1313eba6973a4035cde4489ced288b2bd9278d53c" name="cargo" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="lp150.2.3.4"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525953600">- Update to version 0.26.0:
  + No longer removes rust or rs prefixs/suffixs.
  + Now defaults to creating a binary crate, instead of a library
    crate.</changelog>
  <changelog author="mmanu84@outlook.de" date="1526040000">- adapt cargo bootstrap version to 0.26.0
- adapt rustc bootstrap version to 1.25.0
- adapt rustc to 1.25.0</changelog>
</package>
<package pkgid="f2674a169fdde44253d2d41244c14167af8221aaa728358fa2a8075efe8f2c56" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.31.1" rel="lp150.11.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Format with spec-cleaner
- Use python3 to run the install/build script as python2 is being
  phased out
- State exclusivearch for all of ix86 and then specify we build as
  i686 which is bit more obvious</changelog>
  <changelog author="coolo@suse.com" date="1519041600">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519473600">- Update to 1.24.0
- Language changes:
  + External `sysv64` ffi is now available.
    eg. `extern "sysv64" fn foo () {}`
- Compiler changes:
  + rustc now uses 16 codegen units by default for release builds.
    For the fastest builds, utilize `codegen-units=1`.
- Libraries:
  + `str::find::&lt;char&gt;` now uses memchr. This should lead to a 10x
    improvement in performance in the majority of cases.
  + `time::{SystemTime, Instant}` now implement `Hash`.
  + impl `From&lt;bool&gt;` for `AtomicBool`
  + impl `From&lt;{CString, &amp;CStr}&gt;` for `{Arc&lt;CStr&gt;, Rc&lt;CStr&gt;}`
  + impl `From&lt;{OsString, &amp;OsStr}&gt;` for `{Arc&lt;OsStr&gt;, Rc&lt;OsStr&gt;}`
  + impl `From&lt;{PathBuf, &amp;Path}&gt;` for `{Arc&lt;Path&gt;, Rc&lt;Path&gt;}`
  + float::from_bits now just uses transmute. This provides some
    optimisations from LLVM.
  + Copied `AsciiExt` methods onto `char`
  + Remove `T: Sized` requirement on `ptr::is_null()`
  + impl `From&lt;RecvError&gt;` for `{TryRecvError, RecvTimeoutError}`
  + Optimised `f32::{min, max}` to generate more efficient x86
    assembly
  + `[u8]::contains` now uses memchr which provides a 3x speed
    improvement
- Compatibility Notes:
  + Floating point types `Debug` impl now always prints a decimal
    point.
  + `Ipv6Addr` now rejects superfluous `::`'s in IPv6 addresses
    This is in accordance with IETF RFC 4291 2.2.
  + Unwinding will no longer go past FFI boundaries, and will
    instead abort.
  + `Formatter::flags` method is now deprecated. The `sign_plus`,
    `sign_minus`, `alternate`, and `sign_aware_zero_pad` should be
    used instead.
  + Leading zeros in tuple struct members is now an error
  + `column!()` macro is one-based instead of zero-based
  + `fmt::Arguments` can no longer be shared across threads
  + Access to `#[repr(packed)]` struct fields is now unsafe
  + Cargo sets a different working directory for the compiler</changelog>
  <changelog author="mmanu84@outlook.de" date="1521720000">- Update to 1.24.1
  + Do not abort when unwinding through FFI
  + Make the error index generator work again
- Update Cargo to v0.25.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1525348800">- Patch disabled
  * update-config-guess.patch
- Update to 1.25.0
- Language changes:
  + Stabilised `#[repr(align(x))]`.[47006] [RFC 1358]
  + You can now use nested groups of imports.[47948]
    e.g. `use std::{fs::File, io::Read, path::{Path, PathBuf}};`
  + You can now have `|` at the start of a match arm.[47947] e.g.
- Compiler changes:
  + Upgraded to LLVM 6.[47828]
  + Added `-C lto=val` option.[47521]
  + Added `i586-unknown-linux-musl` target[47282]
- Library changes:
  + Impl Send for `process::Command` on Unix.[47760]
  + Impl PartialEq and Eq for `ParseCharError`.[47790]
  + `UnsafeCell::into_inner` is now safe.[47204]
  + Implement libstd for CloudABI.[47268]
  + `Float::{from_bits, to_bits}` is now available in libcore.[46931]
  + Implement `AsRef&lt;Path&gt;` for Component[46985]
  + Implemented `Write` for `Cursor&lt;&amp;mut Vec&lt;u8&gt;&gt;`[46830]
  + Moved `Duration` to libcore.[46666]
- Stabilized APIs
  + `Location::column`
  + `ptr::NonNull`
- Misc
  + Rust by example is now shipped with new releases[46196]
- Compatibility Notes:
  + Deprecated `net::lookup_host`.[47510]
  + `rustdoc` has switched to pulldown as the default markdown renderer.[47398]
  + The borrow checker was sometimes incorrectly permitting overlapping borrows
    around indexing operations (see [#47349][47349]). This has been fixed (which also
    enabled some correct code that used to cause errors (e.g. [#33903][33903] and [#46095][46095]).
  + Removed deprecated unstable attribute `#[simd]`.[47251]</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1526126400">- Update to version 1.26.0:
  + Language:
  - Closures now implement `Copy` and/or `Clone` if all captured
    variables implement either or both traits.
  - The inclusive range syntax is now stable.
  - Stablise `'_`. The underscore lifetime can be used anywhere
    where a lifetime can be elided.
  - `impl Trait` is now stable allowing you to have abstract
    types in returns or in function parameters.
  - Pattern matching will now automatically apply dereferences.
  - 128-bit integers in the form of `u128` and `i128` are now
    stable.
  - `main` can now return `Result&lt;(), E: Debug&gt;` in addition to
    `()`.
  - A lot of operations are now available in a const context.
  - Fixed entry slice patterns are now stable. e.g.
  + Compiler:
  - LLD is now used as the default linker for `wasm32-unknown-\
    unknown`.
  - Fixed exponential projection complexity on nested types.
    This can provide up to a ~12% reduction in compile times for
    certain crates.
  - Added the `--remap-path-prefix` option to rustc. Allowing you
    to remap path prefixes outputted by the compiler.
  + Libraries:
  - Implemented `From&lt;u16&gt; for usize &amp; From&lt;{u8, i16}&gt; for
    isize`.
  - Added hexadecimal formatting for integers with fmt::Debug.
  - Implemented `Default, Hash` for `cmp::Reverse`.
  - Optimized `str::repeat` being 8x faster in large cases.
  - `ascii::escape_default` is now available in libcore.
  - Trailing commas are now supported in std and core macros.
  - Implemented `Copy, Clone` for `cmp::Reverse`.
  - Implemented `Clone` for `char::{ToLowercase, ToUppercase}`.
  + Stabilized APIs: *const T::add,
  * const T::copy_to_nonoverlapping, *const T::copy_to,
  * const T::read_unaligned, *const T::read_volatile,
  * const T::read, *const T::sub, *const T::wrapping_add,
  * const T::wrapping_sub, *mut T::add, *mut T::copy_to,
  * mut T::copy_to_nonoverlapping, *mut T::read_unaligned,
  * mut T::read_volatile, *mut T::read, mut T::replace,
  * mut T::sub, *mut T::swap, *mut T::wrapping_add,
  * mut T::wrapping_sub, *mut T::write_bytes,
  * mut T::write_unaligned, *mut T::write_volatile,
  * mut T::write, Box::leak, FromUtf8Error::as_bytes,
    LocalKey::try_with, Option::cloned, iter::FusedIterator,
    btree_map::Entry::and_modify, s::read_to_string, fs::read,
    fs::write, hash_map::Entry::and_modify, String::retain,
    ops::RangeInclusive, ops::RangeToInclusive, process::id,
    slice::rotate_left, slice::rotate_right.
  + Compatibility Notes:
  - Aliasing a `Fn` trait as `dyn` no longer works.
  - The result of dereferences are no longer promoted to
    `'static`.
  - Deprecate `AsciiExt` trait in favor of inherent methods.
  - `".e0"` will now no longer parse as `0.0` and will instead
    cause an error.
  - Removed hoedown from rustdoc.
  - Bounds on higher-kinded lifetimes a hard error.
- Update cargo_version to 0.26.0.</changelog>
  <changelog author="mmanu84@outlook.de" date="1528286400">- Update to version 1.26.2:
  + Compatibility Notes
  - The borrow checker was fixed to avoid unsoundness when using match ergonomics
- Update to version 1.26.1:
  + Tools
  - RLS now works on Windows
  - Rustfmt stopped badly formatting text in some cases
  + Compatibility Notes
  - `fn main() -&gt; impl Trait` no longer works for non-Termination trait
    This reverts an accidental stabilization
  - `NaN &gt; NaN` no longer returns true in const-fn contexts
  - Prohibit using turbofish for `impl Trait` in method arguments</changelog>
  <changelog author="mschnitzer@suse.com" date="1533816000">- Ship rust-std on SLE-15 (bsc#1096945)
  No new changes came with this update of rust.</changelog>
  <changelog author="qkzhu@suse.com" date="1539259200">- Add CVE-2018-1000622-prevent-rustdoc-loads-uncontrolled-plugins-path.patch:
  + This patch consists of requiring `--plugin-path` to be passed
    whenever `--plugin` is passed
  + rustdoc plugins will be removed entirely on 1.28.0, we should
    drop this patch after 1.28.0(bsc#1100691, CVE-2018-1000622).</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541246400">- Jump from version 1.26.2 to 1.30.0 due to a build issue with using 1.26.x to
  compile 1.27.x. This package release requires %{rust_bootstrap} to be set.
- Enable extra rust tools to be built (cargo, rls, rustfmt, analysis)
    + cargo is now packaged with the same version number as the rust release, this
    may break any packages that relied on a cargo version number.
- Remove ccache and ninja from BuildRequires.
- Switch build configuration to use configure script, remove config.toml.
- Include all bootstraps in source rpm to make bootstrapping easier to manage
  within OBS.
- Remove unused patch: update-config-guess.patch
  Update to version 1.30.0 (2018-10-25)
  + Language
  - Procedural macros are now available.-  These kinds of macros allow for
    more powerful code generation. There is a new chapter available
    in the Rust Programming Language book that goes further in depth.
  - You can now use keywords as identifiers using the raw identifiers
    syntax (`r#`),-  e.g. `let r#for = true;`
  - Using anonymous parameters in traits is now deprecated with a warning and
    will be a hard error in the 2018 edition.-
  - You can now use `crate` in paths.-  This allows you to refer to the
    crate root in the path, e.g. `use crate::foo;` refers to `foo` in `src/lib.rs`.
  - Using a external crate no longer requires being prefixed with `::`.-
    Previously, using a external crate in a module without a use statement
    required `let json = ::serde_json::from_str(foo);` but can now be written
    as `let json = serde_json::from_str(foo);`.
  - You can now apply the `#[used]` attribute to static items to prevent the
    compiler from optimising them away, even if they appear to be unused,-
    e.g. `#[used] static FOO: u32 = 1;`
  - You can now import and reexport macros from other crates with the `use`
    syntax.-  Macros exported with `#[macro_export]` are now placed into
    the root module of the crate. If your macro relies on calling other local
    macros, it is recommended to export with the
    `#[macro_export(local_inner_macros)]` attribute so users won't have to import
    those macros.
  - You can now catch visibility keywords (e.g. `pub`, `pub(crate)`) in macros
    using the `vis` specifier.-
  - Non-macro attributes now allow all forms of literals, not just
    strings.-  Previously, you would write `#[attr("true")]`, and you can now
    write `#[attr(true)]`.
  - You can now specify a function to handle a panic in the Rust runtime with the
    `#[panic_handler]` attribute.-
  + Compiler
  - Added the `riscv32imc-unknown-none-elf` target.-
  - Added the `aarch64-unknown-netbsd` target-
  + Libraries
  - `ManuallyDrop` now allows the inner type to be unsized.-
  + Stabilized APIs
  - `Ipv4Addr::BROADCAST`
  - `Ipv4Addr::LOCALHOST`
  - `Ipv4Addr::UNSPECIFIED`
  - `Ipv6Addr::LOCALHOST`
  - `Ipv6Addr::UNSPECIFIED`
  - `Iterator::find_map`
  - The following methods are replacement methods for `trim_left`, `trim_right`,
    `trim_left_matches`, and `trim_right_matches`, which will be deprecated
    in 1.33.0:
    + `str::trim_end_matches`
    + `str::trim_end`
    + `str::trim_start_matches`
    + `str::trim_start`
  + Cargo
  - `cargo run` doesn't require specifying a package in workspaces.][cargo/5877]
  - `cargo doc` now supports `--message-format=json`.][cargo/5878] This is
    equivalent to calling `rustdoc --error-format=json`.
  - Cargo will now provide a progress bar for builds.][cargo/5995]
  + Misc
  - `rustdoc` allows you to specify what edition to treat your code as with the
    `--edition` option.-
  - `rustdoc` now has the `--color` (specify whether to output color) and
    `--error-format` (specify error format, e.g. `json`) options.-
  - We now distribute a `rust-gdbgui` script that invokes `gdbgui` with Rust
    debug symbols.-
  - Attributes from Rust tools such as `rustfmt` or `clippy` are now
    available,-  e.g. `#[rustfmt::skip]` will skip formatting the next item.
- Update to version 1.29.2 (2018-10-11)
  + Workaround for an aliasing-related LLVM bug, which caused miscompilation.
  + The `rls-preview` component on the windows-gnu targets has been restored.
- Update to version 1.29.1 (2018-09-25)
  + Security Notes
  - The standard library's `str::repeat` function contained an out of bounds write
    caused by an integer overflow. This has been fixed by deterministically
    panicking when an overflow happens.
- Update to version 1.29.0 (2018-09-13)
  + Compiler
  - Bumped minimum LLVM version to 5.0.
  - Added `powerpc64le-unknown-linux-musl` target.
  - Added `aarch64-unknown-hermit` and `x86_64-unknown-hermit` targets.
  + Libraries
  - `Once::call_once` no longer requires `Once` to be `'static`.
  - `BuildHasherDefault` now implements `PartialEq` and `Eq`.
  - `Box&lt;CStr&gt;`, `Box&lt;OsStr&gt;`, and `Box&lt;Path&gt;` now implement `Clone`.
  - Implemented `PartialEq&lt;&amp;str&gt;` for `OsString` and `PartialEq&lt;OsString&gt;`
    for `&amp;str`.
  - `Cell&lt;T&gt;` now allows `T` to be unsized.
  - `SocketAddr` is now stable on Redox.
  + Stabilized APIs
  - `Arc::downcast`
  - `Iterator::flatten`
  - `Rc::downcast`
  + Cargo
  - Cargo can silently fix some bad lockfiles.][cargo/5831] You can use
    `--locked` to disable this behavior.
  - `cargo-install` will now allow you to cross compile an install
    using `--target`.][cargo/5614]
  - Added the `cargo-fix` subcommand to automatically move project code from
    2015 edition to 2018.][cargo/5723]
  - `cargo doc` can now optionally document private types using the
    `--document-private-items` flag.][cargo/5543]
  + Misc
  - `rustdoc` now has the `--cap-lints` option which demotes all lints above
    the specified level to that level. For example `--cap-lints warn`
    will demote `deny` and `forbid` lints to `warn`.
  - `rustc` and `rustdoc` will now have the exit code of `1` if compilation
    fails and `101` if there is a panic.
  - A preview of clippy has been made available through rustup.
    You can install the preview with `rustup component add clippy-preview`.
  + Compatibility Notes
  - `str::{slice_unchecked, slice_unchecked_mut}` are now deprecated.
    Use `str::get_unchecked(begin..end)` instead.
  - `std::env::home_dir` is now deprecated for its unintuitive behavior.
    Consider using the `home_dir` function from
    https://crates.io/crates/dirs instead.
  - `rustc` will no longer silently ignore invalid data in target spec.
  - `cfg` attributes and `--cfg` command line flags are now more
    strictly validated.
- Update to version 1.28.0
  + Language
  - The `#[repr(transparent)]` attribute is now stable.-  This attribute
    allows a Rust newtype wrapper (`struct NewType&lt;T&gt;(T);`) to be represented as
    the inner type across Foreign Function Interface (FFI) boundaries.
  - The keywords `pure`, `sizeof`, `alignof`, and `offsetof` have been unreserved
    and can now be used as identifiers.-
  - The `GlobalAlloc` trait and `#[global_allocator]` attribute are now
    stable.-  This will allow users to specify a global allocator for
    their program.
  - Unit test functions marked with the `#[test]` attribute can now return
    `Result&lt;(), E: Debug&gt;` in addition to `()`.-
  - The `lifetime` specifier for `macro_rules!` is now stable.-  This
    allows macros to easily target lifetimes.
  + Compiler
  - The `s` and `z` optimisation levels are now stable.-  These optimisations
    prioritise making smaller binary sizes. `z` is the same as `s` with the
    exception that it does not vectorise loops, which typically results in an even
    smaller binary.
  - The short error format is now stable.-  Specified with
    `--error-format=short` this option will provide a more compressed output of
    rust error messages.
  - Added a lint warning when you have duplicated `macro_export`s.-
  - Reduced the number of allocations in the macro parser.-  This can
    improve compile times of macro heavy crates on average by 5%.
  + Libraries
  - Implemented `Default` for `&amp;mut str`.-
  - Implemented `From&lt;bool&gt;` for all integer and unsigned number types.-
  - Implemented `Extend` for `()`.-
  - The `Debug` implementation of `time::Duration` should now be more easily
    human readable.-  Previously a `Duration` of one second would printed as
    `Duration { secs: 1, nanos: 0 }` and will now be printed as `1s`.
  - Implemented `From&lt;&amp;String&gt;` for `Cow&lt;str&gt;`, `From&lt;&amp;Vec&lt;T&gt;&gt;` for `Cow&lt;[T]&gt;`,
    `From&lt;Cow&lt;CStr&gt;&gt;` for `CString`, `From&lt;CString&gt;, From&lt;CStr&gt;, From&lt;&amp;CString&gt;`
    for `Cow&lt;CStr&gt;`, `From&lt;OsString&gt;, From&lt;OsStr&gt;, From&lt;&amp;OsString&gt;` for
    `Cow&lt;OsStr&gt;`, `From&lt;&amp;PathBuf&gt;` for `Cow&lt;Path&gt;`, and `From&lt;Cow&lt;Path&gt;&gt;`
    for `PathBuf`.-
  - Implemented `Shl` and `Shr` for `Wrapping&lt;u128&gt;`
    and `Wrapping&lt;i128&gt;`.-
  - `DirEntry::metadata` now uses `fstatat` instead of `lstat` when
    possible.-  This can provide up to a 40% speed increase.
  - Improved error messages when using `format!`.-
  + Stabilized APIs
  - `Iterator::step_by`
  - `Path::ancestors`
  - `SystemTime::UNIX_EPOCH`
  - `alloc::GlobalAlloc`
  - `alloc::Layout`
  - `alloc::LayoutErr`
  - `alloc::System`
  - `alloc::alloc`
  - `alloc::alloc_zeroed`
  - `alloc::dealloc`
  - `alloc::realloc`
  - `alloc::handle_alloc_error`
  - `btree_map::Entry::or_default`
  - `fmt::Alignment`
  - `hash_map::Entry::or_default`
  - `iter::repeat_with`
  - `num::NonZeroUsize`
  - `num::NonZeroU128`
  - `num::NonZeroU16`
  - `num::NonZeroU32`
  - `num::NonZeroU64`
  - `num::NonZeroU8`
  - `ops::RangeBounds`
  - `slice::SliceIndex`
  - `slice::from_mut`
  - `slice::from_ref`
  - `{Any + Send + Sync}::downcast_mut`
  - `{Any + Send + Sync}::downcast_ref`
  - `{Any + Send + Sync}::is`
  + Cargo
  - Cargo will now no longer allow you to publish crates with build scripts that
    modify the `src` directory.][cargo/5584] The `src` directory in a crate should be
    considered to be immutable.
  + Misc
  - The `suggestion_applicability` field in `rustc`'s json output is now
    stable.-  This will allow dev tools to check whether a code suggestion
    would apply to them.
  + Compatibility Notes
  - Rust will consider trait objects with duplicated constraints to be the same
    type as without the duplicated constraint.-  For example the below code will
    now fail to compile.
    ```rust
    trait Trait {}
    impl Trait + Send {
    fn test(&amp;self) { println!("one"); } //~ ERROR duplicate definitions with name `test`
    }
    impl Trait + Send + Send {
    fn test(&amp;self) { println!("two"); }
    }
- Update to version 1.27.2:
  + Compatibility Notes
  - The borrow checker was fixed to avoid an additional potential unsoundness when using
    match ergonomics
- Update to version 1.27.1:
  + Security Notes
  - rustdoc would execute plugins in the /tmp/rustdoc/plugins directory
    when running, which enabled executing code as some other user on a
    given machine. This release fixes that vulnerability; you can read
    more about this on the blog. The associated CVE is [CVE-2018-1000622].
    Thank you to Red Hat for responsibily disclosing this vulnerability to us.
  + Compatibility Notes
  - The borrow checker was fixed to avoid an additional potential unsoundness when using
    match ergonomics
- Update to version 1.27.0:
  + Language
  - Removed 'proc' from the reserved keywords list. This allows `proc` to
    be used as an identifier.
  - The dyn syntax is now available. This syntax is equivalent to the
    bare `Trait` syntax, and should make it clearer when being used in tandem with
    `impl Trait` because it is equivalent to the following syntax:
    `&amp;Trait == &amp;dyn Trait`, `&amp;mut Trait == &amp;mut dyn Trait`, and
    `Box&lt;Trait&gt; == Box&lt;dyn Trait&gt;`.
  - Attributes on generic parameters such as types and lifetimes are
    now stable. e.g.
    `fn foo&lt;#[lifetime_attr] 'a, #[type_attr] T: 'a&gt;() {}`
  - The `#[must_use]` attribute can now also be used on functions as well as
    types. It provides a lint that by default warns users when the
    value returned by a function has not been used.
  + Compiler
  - Added the `armvte-unknown-linux-musleabi` target.
  + Libraries
  - SIMD (Single Instruction Multiple Data) on x/x_ is now stable.
    This includes arch::x &amp; arch::x_ modules which contain
    SIMD intrinsics, a new macro called `is_x_feature_detected!`, the
    `#[target_feature(enable="")]` attribute, and adding `target_feature = ""` to
    the `cfg` attribute.
  - A lot of methods for `[u]`, `f`, and `f` previously only available in
    std are now available in core.
  - The generic `Rhs` type parameter on `ops::{Shl, ShlAssign, Shr}` now defaults
    to `Self`.
  - std::str::replace` now has the `#[must_use]` attribute to clarify
    that the operation isn't done in place.
  - Clone::clone`, `Iterator::collect`, and `ToOwned::to_owned` now have
    the `#[must_use]` attribute] to warn about unused potentially
    expensive allocations.
  + Stabilized APIs
  - DoubleEndedIterator::rfind
  - DoubleEndedIterator::rfold
  - DoubleEndedIterator::try_rfold
  - Duration::from_micros
  - Duration::from_nanos
  - Duration::subsec_micros
  - Duration::subsec_millis
  - HashMap::remove_entry
  - Iterator::try_fold
  - Iterator::try_for_each
  - NonNull::cast
  - Option::filter
  - String::replace_range
  - Take::set_limit
  - hint::unreachable_unchecked
  - os::unix::process::parent_id
  - ptr::swap_nonoverlapping
  - slice::rsplit_mut
  - slice::rsplit
  - slice::swap_with_slice
  + Cargo
  - `cargo-metadata` now includes `authors`, `categories`, `keywords`,
    `readme`, and `repository` fields.
  - `cargo-metadata` now includes a package's `metadata` table.
  - Added the `--target-dir` optional argument. This allows you to specify
    a different directory than `target` for placing compilation artifacts.
  - Cargo will be adding automatic target inference for binaries, benchmarks,
    examples, and tests in the Rust 2018 edition. If your project specifies
    specific targets, e.g. using `[[bin]]`, and have other binaries in locations
    where cargo would infer a binary, Cargo will produce a warning. You can
    disable this feature ahead of time by setting any of the following to false:
    `autobins`, `autobenches`, `autoexamples`, `autotests`.
  - Cargo will now cache compiler information. This can be disabled by
    setting `CARGO_CACHE_RUSTC_INFO=0` in your environment.
  + Compatibility Notes
  - Calling a `CharExt` or `StrExt` method directly on core will no longer
    work. e.g. `::core::prelude::v1::StrExt::is_empty("")` will not
    compile, `"".is_empty()` will still compile.
  - `Debug` output on `atomic::{AtomicBool, AtomicIsize, AtomicPtr, AtomicUsize}`
    will only print the inner type. E.g.
    `print!("{:?}", AtomicBool::new(true))` will print `true`,
    not `AtomicBool(true)`.
  - The maximum number for `repr(align(N))` is now 2?. Previously you
    could enter higher numbers but they were not supported by LLVM. Up to 512MB
    alignment should cover all use cases.
  - The `.description()` method on the `std::error::Error` trait
    has been soft-deprecated. It is no longer required to implement it.
  + Misc
  - Added ?The Rustc book? into the official documentation.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541246401">- Fixing various rpmlint warnings and errors:
  + ExclusiveArch instead of BuildArch for i686
  + Remove conflicts with same package name
  + Remove a few hidden files during prep, does not touch '.clang-format'
  + Remove old patch macro in comment
  + Fix lint warning about bash and zsh completition files
  + Fix various script shebang warnings (incorrect or missing)
  + Adjust rpmlintrc to mask some 'invalid' warnings
- Move Rust and its tools in to their own category under:
  + Development/Languages/Rust</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541332800">- Add ignore-Wstring-conversion.patch: we require patching of
  src/librustc_llvm/build.rs to ignore a flag that
  llvm-config --cxxflags outputs which GCC doesn't recognise.
- Default to building using the distro LLVM where the version is
  &gt;= 5.0, instead of the Rust bundled LLVM which requires
  compilation. This should decrease build times. SLE LLVM is too old.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541505600">- Fix second-person language and spellos.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1541678400">- Strengthen the dependency on rust-std-static to Requires
  to fix crate package builds in OBS
- Use standard form rich dependencies for SUSE Linux 15 and newer</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541764800">- Add Provides/Obsoletes/Conflicts to rust-std-static and cargo</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541937600">- Set the bootstrap flag in the spec file temporarily so that rings
  will build rust without intervention. Must be reverted once all
  releases are successful.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1542110400">- Add additional Requires to rls:
  + Requires rust-src
  + Requires rust-analysis
- Add additional Requires to rustfmt:
  + Requires cargo
- Fix rust-src requiring /usr/bin/bash; a script was incorrectly
  edited at build time.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1544097600">- Update to version 1.31.0
  + Language
  - This version marks the release of the 2018 edition of Rust.
  - New lifetime elision rules now allow for eliding lifetimes in functions and
  impl headers. E.g. `impl&lt;'a&gt; Reader for BufReader&lt;'a&gt; {}` can now be
  `impl Reader for BufReader&lt;'_&gt; {}`. Lifetimes are still required to be defined
  in structs.
  - You can now define and use `const` functions. These are currently
  a strict minimal subset of the const fn RFC. Refer to the
  [language reference][const-reference] for what exactly is available.
  - You can now use tool lints, which allow you to scope lints from external
  tools using attributes. E.g. `#[allow(clippy::filter_map)]`.
  - `#[no_mangle]` and `#[export_name]` attributes can now be located anywhere in
  a crate, not just in exported functions.
  - You can now use parentheses in pattern matches.
  + Compiler
  - Updated musl to 1.1.20
  + Libraries
  - You can now convert `num::NonZero*` types to their raw equivalvents using the
  `From` trait. E.g. `u8` now implements `From&lt;NonZeroU8&gt;`.
  - You can now convert a `&amp;Option&lt;T&gt;` into `Option&lt;&amp;T&gt;` and `&amp;mut Option&lt;T&gt;`
  into `Option&lt;&amp;mut T&gt;` using the `From` trait.
  - You can now multiply (`*`) a `time::Duration` by a `u32`.
  + Stabilized APIs
  - `slice::align_to`
  - `slice::align_to_mut`
  - `slice::chunks_exact`
  - `slice::chunks_exact_mut`
  - `slice::rchunks`
  - `slice::rchunks_mut`
  - `slice::rchunks_exact`
  - `slice::rchunks_exact_mut`
  - `Option::replace`
  + Cargo
  - Cargo will now download crates in parallel using HTTP/2.
  - You can now rename packages in your Cargo.toml We have a guide
  on how to use the `package` key in your dependencies.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1546689600">- Update to version 1.31.1
  + Fix Rust failing to build on `powerpc-unknown-netbsd`
  + Fix broken go-to-definition in RLS
  + Fix infinite loop on hover in RLS</changelog>
  <changelog author="federico@suse.com" date="1548158400">- Remove
  CVE-2018-1000622-prevent-rustdoc-loads-uncontrolled-plugins-path.patch,
  since rustdoc plugins are fixed since version 1.27.1 (bsc#1100691,
  CVE-2018-1000622).</changelog>
</package>
<package pkgid="1b7afb1f5e0bddc98c9c5f531bca39529c9d4da3ef02b1f46c1f79177ab6e537" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp150.16.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="fb1e2b4f4f74d18ab9aac178b50a752812a58979b92c716844b68ce6eb770732" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.31.1" rel="lp150.11.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Format with spec-cleaner
- Use python3 to run the install/build script as python2 is being
  phased out
- State exclusivearch for all of ix86 and then specify we build as
  i686 which is bit more obvious</changelog>
  <changelog author="coolo@suse.com" date="1519041600">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519473600">- Update to 1.24.0
- Language changes:
  + External `sysv64` ffi is now available.
    eg. `extern "sysv64" fn foo () {}`
- Compiler changes:
  + rustc now uses 16 codegen units by default for release builds.
    For the fastest builds, utilize `codegen-units=1`.
- Libraries:
  + `str::find::&lt;char&gt;` now uses memchr. This should lead to a 10x
    improvement in performance in the majority of cases.
  + `time::{SystemTime, Instant}` now implement `Hash`.
  + impl `From&lt;bool&gt;` for `AtomicBool`
  + impl `From&lt;{CString, &amp;CStr}&gt;` for `{Arc&lt;CStr&gt;, Rc&lt;CStr&gt;}`
  + impl `From&lt;{OsString, &amp;OsStr}&gt;` for `{Arc&lt;OsStr&gt;, Rc&lt;OsStr&gt;}`
  + impl `From&lt;{PathBuf, &amp;Path}&gt;` for `{Arc&lt;Path&gt;, Rc&lt;Path&gt;}`
  + float::from_bits now just uses transmute. This provides some
    optimisations from LLVM.
  + Copied `AsciiExt` methods onto `char`
  + Remove `T: Sized` requirement on `ptr::is_null()`
  + impl `From&lt;RecvError&gt;` for `{TryRecvError, RecvTimeoutError}`
  + Optimised `f32::{min, max}` to generate more efficient x86
    assembly
  + `[u8]::contains` now uses memchr which provides a 3x speed
    improvement
- Compatibility Notes:
  + Floating point types `Debug` impl now always prints a decimal
    point.
  + `Ipv6Addr` now rejects superfluous `::`'s in IPv6 addresses
    This is in accordance with IETF RFC 4291 2.2.
  + Unwinding will no longer go past FFI boundaries, and will
    instead abort.
  + `Formatter::flags` method is now deprecated. The `sign_plus`,
    `sign_minus`, `alternate`, and `sign_aware_zero_pad` should be
    used instead.
  + Leading zeros in tuple struct members is now an error
  + `column!()` macro is one-based instead of zero-based
  + `fmt::Arguments` can no longer be shared across threads
  + Access to `#[repr(packed)]` struct fields is now unsafe
  + Cargo sets a different working directory for the compiler</changelog>
  <changelog author="mmanu84@outlook.de" date="1521720000">- Update to 1.24.1
  + Do not abort when unwinding through FFI
  + Make the error index generator work again
- Update Cargo to v0.25.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1525348800">- Patch disabled
  * update-config-guess.patch
- Update to 1.25.0
- Language changes:
  + Stabilised `#[repr(align(x))]`.[47006] [RFC 1358]
  + You can now use nested groups of imports.[47948]
    e.g. `use std::{fs::File, io::Read, path::{Path, PathBuf}};`
  + You can now have `|` at the start of a match arm.[47947] e.g.
- Compiler changes:
  + Upgraded to LLVM 6.[47828]
  + Added `-C lto=val` option.[47521]
  + Added `i586-unknown-linux-musl` target[47282]
- Library changes:
  + Impl Send for `process::Command` on Unix.[47760]
  + Impl PartialEq and Eq for `ParseCharError`.[47790]
  + `UnsafeCell::into_inner` is now safe.[47204]
  + Implement libstd for CloudABI.[47268]
  + `Float::{from_bits, to_bits}` is now available in libcore.[46931]
  + Implement `AsRef&lt;Path&gt;` for Component[46985]
  + Implemented `Write` for `Cursor&lt;&amp;mut Vec&lt;u8&gt;&gt;`[46830]
  + Moved `Duration` to libcore.[46666]
- Stabilized APIs
  + `Location::column`
  + `ptr::NonNull`
- Misc
  + Rust by example is now shipped with new releases[46196]
- Compatibility Notes:
  + Deprecated `net::lookup_host`.[47510]
  + `rustdoc` has switched to pulldown as the default markdown renderer.[47398]
  + The borrow checker was sometimes incorrectly permitting overlapping borrows
    around indexing operations (see [#47349][47349]). This has been fixed (which also
    enabled some correct code that used to cause errors (e.g. [#33903][33903] and [#46095][46095]).
  + Removed deprecated unstable attribute `#[simd]`.[47251]</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1526126400">- Update to version 1.26.0:
  + Language:
  - Closures now implement `Copy` and/or `Clone` if all captured
    variables implement either or both traits.
  - The inclusive range syntax is now stable.
  - Stablise `'_`. The underscore lifetime can be used anywhere
    where a lifetime can be elided.
  - `impl Trait` is now stable allowing you to have abstract
    types in returns or in function parameters.
  - Pattern matching will now automatically apply dereferences.
  - 128-bit integers in the form of `u128` and `i128` are now
    stable.
  - `main` can now return `Result&lt;(), E: Debug&gt;` in addition to
    `()`.
  - A lot of operations are now available in a const context.
  - Fixed entry slice patterns are now stable. e.g.
  + Compiler:
  - LLD is now used as the default linker for `wasm32-unknown-\
    unknown`.
  - Fixed exponential projection complexity on nested types.
    This can provide up to a ~12% reduction in compile times for
    certain crates.
  - Added the `--remap-path-prefix` option to rustc. Allowing you
    to remap path prefixes outputted by the compiler.
  + Libraries:
  - Implemented `From&lt;u16&gt; for usize &amp; From&lt;{u8, i16}&gt; for
    isize`.
  - Added hexadecimal formatting for integers with fmt::Debug.
  - Implemented `Default, Hash` for `cmp::Reverse`.
  - Optimized `str::repeat` being 8x faster in large cases.
  - `ascii::escape_default` is now available in libcore.
  - Trailing commas are now supported in std and core macros.
  - Implemented `Copy, Clone` for `cmp::Reverse`.
  - Implemented `Clone` for `char::{ToLowercase, ToUppercase}`.
  + Stabilized APIs: *const T::add,
  * const T::copy_to_nonoverlapping, *const T::copy_to,
  * const T::read_unaligned, *const T::read_volatile,
  * const T::read, *const T::sub, *const T::wrapping_add,
  * const T::wrapping_sub, *mut T::add, *mut T::copy_to,
  * mut T::copy_to_nonoverlapping, *mut T::read_unaligned,
  * mut T::read_volatile, *mut T::read, mut T::replace,
  * mut T::sub, *mut T::swap, *mut T::wrapping_add,
  * mut T::wrapping_sub, *mut T::write_bytes,
  * mut T::write_unaligned, *mut T::write_volatile,
  * mut T::write, Box::leak, FromUtf8Error::as_bytes,
    LocalKey::try_with, Option::cloned, iter::FusedIterator,
    btree_map::Entry::and_modify, s::read_to_string, fs::read,
    fs::write, hash_map::Entry::and_modify, String::retain,
    ops::RangeInclusive, ops::RangeToInclusive, process::id,
    slice::rotate_left, slice::rotate_right.
  + Compatibility Notes:
  - Aliasing a `Fn` trait as `dyn` no longer works.
  - The result of dereferences are no longer promoted to
    `'static`.
  - Deprecate `AsciiExt` trait in favor of inherent methods.
  - `".e0"` will now no longer parse as `0.0` and will instead
    cause an error.
  - Removed hoedown from rustdoc.
  - Bounds on higher-kinded lifetimes a hard error.
- Update cargo_version to 0.26.0.</changelog>
  <changelog author="mmanu84@outlook.de" date="1528286400">- Update to version 1.26.2:
  + Compatibility Notes
  - The borrow checker was fixed to avoid unsoundness when using match ergonomics
- Update to version 1.26.1:
  + Tools
  - RLS now works on Windows
  - Rustfmt stopped badly formatting text in some cases
  + Compatibility Notes
  - `fn main() -&gt; impl Trait` no longer works for non-Termination trait
    This reverts an accidental stabilization
  - `NaN &gt; NaN` no longer returns true in const-fn contexts
  - Prohibit using turbofish for `impl Trait` in method arguments</changelog>
  <changelog author="mschnitzer@suse.com" date="1533816000">- Ship rust-std on SLE-15 (bsc#1096945)
  No new changes came with this update of rust.</changelog>
  <changelog author="qkzhu@suse.com" date="1539259200">- Add CVE-2018-1000622-prevent-rustdoc-loads-uncontrolled-plugins-path.patch:
  + This patch consists of requiring `--plugin-path` to be passed
    whenever `--plugin` is passed
  + rustdoc plugins will be removed entirely on 1.28.0, we should
    drop this patch after 1.28.0(bsc#1100691, CVE-2018-1000622).</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541246400">- Jump from version 1.26.2 to 1.30.0 due to a build issue with using 1.26.x to
  compile 1.27.x. This package release requires %{rust_bootstrap} to be set.
- Enable extra rust tools to be built (cargo, rls, rustfmt, analysis)
    + cargo is now packaged with the same version number as the rust release, this
    may break any packages that relied on a cargo version number.
- Remove ccache and ninja from BuildRequires.
- Switch build configuration to use configure script, remove config.toml.
- Include all bootstraps in source rpm to make bootstrapping easier to manage
  within OBS.
- Remove unused patch: update-config-guess.patch
  Update to version 1.30.0 (2018-10-25)
  + Language
  - Procedural macros are now available.-  These kinds of macros allow for
    more powerful code generation. There is a new chapter available
    in the Rust Programming Language book that goes further in depth.
  - You can now use keywords as identifiers using the raw identifiers
    syntax (`r#`),-  e.g. `let r#for = true;`
  - Using anonymous parameters in traits is now deprecated with a warning and
    will be a hard error in the 2018 edition.-
  - You can now use `crate` in paths.-  This allows you to refer to the
    crate root in the path, e.g. `use crate::foo;` refers to `foo` in `src/lib.rs`.
  - Using a external crate no longer requires being prefixed with `::`.-
    Previously, using a external crate in a module without a use statement
    required `let json = ::serde_json::from_str(foo);` but can now be written
    as `let json = serde_json::from_str(foo);`.
  - You can now apply the `#[used]` attribute to static items to prevent the
    compiler from optimising them away, even if they appear to be unused,-
    e.g. `#[used] static FOO: u32 = 1;`
  - You can now import and reexport macros from other crates with the `use`
    syntax.-  Macros exported with `#[macro_export]` are now placed into
    the root module of the crate. If your macro relies on calling other local
    macros, it is recommended to export with the
    `#[macro_export(local_inner_macros)]` attribute so users won't have to import
    those macros.
  - You can now catch visibility keywords (e.g. `pub`, `pub(crate)`) in macros
    using the `vis` specifier.-
  - Non-macro attributes now allow all forms of literals, not just
    strings.-  Previously, you would write `#[attr("true")]`, and you can now
    write `#[attr(true)]`.
  - You can now specify a function to handle a panic in the Rust runtime with the
    `#[panic_handler]` attribute.-
  + Compiler
  - Added the `riscv32imc-unknown-none-elf` target.-
  - Added the `aarch64-unknown-netbsd` target-
  + Libraries
  - `ManuallyDrop` now allows the inner type to be unsized.-
  + Stabilized APIs
  - `Ipv4Addr::BROADCAST`
  - `Ipv4Addr::LOCALHOST`
  - `Ipv4Addr::UNSPECIFIED`
  - `Ipv6Addr::LOCALHOST`
  - `Ipv6Addr::UNSPECIFIED`
  - `Iterator::find_map`
  - The following methods are replacement methods for `trim_left`, `trim_right`,
    `trim_left_matches`, and `trim_right_matches`, which will be deprecated
    in 1.33.0:
    + `str::trim_end_matches`
    + `str::trim_end`
    + `str::trim_start_matches`
    + `str::trim_start`
  + Cargo
  - `cargo run` doesn't require specifying a package in workspaces.][cargo/5877]
  - `cargo doc` now supports `--message-format=json`.][cargo/5878] This is
    equivalent to calling `rustdoc --error-format=json`.
  - Cargo will now provide a progress bar for builds.][cargo/5995]
  + Misc
  - `rustdoc` allows you to specify what edition to treat your code as with the
    `--edition` option.-
  - `rustdoc` now has the `--color` (specify whether to output color) and
    `--error-format` (specify error format, e.g. `json`) options.-
  - We now distribute a `rust-gdbgui` script that invokes `gdbgui` with Rust
    debug symbols.-
  - Attributes from Rust tools such as `rustfmt` or `clippy` are now
    available,-  e.g. `#[rustfmt::skip]` will skip formatting the next item.
- Update to version 1.29.2 (2018-10-11)
  + Workaround for an aliasing-related LLVM bug, which caused miscompilation.
  + The `rls-preview` component on the windows-gnu targets has been restored.
- Update to version 1.29.1 (2018-09-25)
  + Security Notes
  - The standard library's `str::repeat` function contained an out of bounds write
    caused by an integer overflow. This has been fixed by deterministically
    panicking when an overflow happens.
- Update to version 1.29.0 (2018-09-13)
  + Compiler
  - Bumped minimum LLVM version to 5.0.
  - Added `powerpc64le-unknown-linux-musl` target.
  - Added `aarch64-unknown-hermit` and `x86_64-unknown-hermit` targets.
  + Libraries
  - `Once::call_once` no longer requires `Once` to be `'static`.
  - `BuildHasherDefault` now implements `PartialEq` and `Eq`.
  - `Box&lt;CStr&gt;`, `Box&lt;OsStr&gt;`, and `Box&lt;Path&gt;` now implement `Clone`.
  - Implemented `PartialEq&lt;&amp;str&gt;` for `OsString` and `PartialEq&lt;OsString&gt;`
    for `&amp;str`.
  - `Cell&lt;T&gt;` now allows `T` to be unsized.
  - `SocketAddr` is now stable on Redox.
  + Stabilized APIs
  - `Arc::downcast`
  - `Iterator::flatten`
  - `Rc::downcast`
  + Cargo
  - Cargo can silently fix some bad lockfiles.][cargo/5831] You can use
    `--locked` to disable this behavior.
  - `cargo-install` will now allow you to cross compile an install
    using `--target`.][cargo/5614]
  - Added the `cargo-fix` subcommand to automatically move project code from
    2015 edition to 2018.][cargo/5723]
  - `cargo doc` can now optionally document private types using the
    `--document-private-items` flag.][cargo/5543]
  + Misc
  - `rustdoc` now has the `--cap-lints` option which demotes all lints above
    the specified level to that level. For example `--cap-lints warn`
    will demote `deny` and `forbid` lints to `warn`.
  - `rustc` and `rustdoc` will now have the exit code of `1` if compilation
    fails and `101` if there is a panic.
  - A preview of clippy has been made available through rustup.
    You can install the preview with `rustup component add clippy-preview`.
  + Compatibility Notes
  - `str::{slice_unchecked, slice_unchecked_mut}` are now deprecated.
    Use `str::get_unchecked(begin..end)` instead.
  - `std::env::home_dir` is now deprecated for its unintuitive behavior.
    Consider using the `home_dir` function from
    https://crates.io/crates/dirs instead.
  - `rustc` will no longer silently ignore invalid data in target spec.
  - `cfg` attributes and `--cfg` command line flags are now more
    strictly validated.
- Update to version 1.28.0
  + Language
  - The `#[repr(transparent)]` attribute is now stable.-  This attribute
    allows a Rust newtype wrapper (`struct NewType&lt;T&gt;(T);`) to be represented as
    the inner type across Foreign Function Interface (FFI) boundaries.
  - The keywords `pure`, `sizeof`, `alignof`, and `offsetof` have been unreserved
    and can now be used as identifiers.-
  - The `GlobalAlloc` trait and `#[global_allocator]` attribute are now
    stable.-  This will allow users to specify a global allocator for
    their program.
  - Unit test functions marked with the `#[test]` attribute can now return
    `Result&lt;(), E: Debug&gt;` in addition to `()`.-
  - The `lifetime` specifier for `macro_rules!` is now stable.-  This
    allows macros to easily target lifetimes.
  + Compiler
  - The `s` and `z` optimisation levels are now stable.-  These optimisations
    prioritise making smaller binary sizes. `z` is the same as `s` with the
    exception that it does not vectorise loops, which typically results in an even
    smaller binary.
  - The short error format is now stable.-  Specified with
    `--error-format=short` this option will provide a more compressed output of
    rust error messages.
  - Added a lint warning when you have duplicated `macro_export`s.-
  - Reduced the number of allocations in the macro parser.-  This can
    improve compile times of macro heavy crates on average by 5%.
  + Libraries
  - Implemented `Default` for `&amp;mut str`.-
  - Implemented `From&lt;bool&gt;` for all integer and unsigned number types.-
  - Implemented `Extend` for `()`.-
  - The `Debug` implementation of `time::Duration` should now be more easily
    human readable.-  Previously a `Duration` of one second would printed as
    `Duration { secs: 1, nanos: 0 }` and will now be printed as `1s`.
  - Implemented `From&lt;&amp;String&gt;` for `Cow&lt;str&gt;`, `From&lt;&amp;Vec&lt;T&gt;&gt;` for `Cow&lt;[T]&gt;`,
    `From&lt;Cow&lt;CStr&gt;&gt;` for `CString`, `From&lt;CString&gt;, From&lt;CStr&gt;, From&lt;&amp;CString&gt;`
    for `Cow&lt;CStr&gt;`, `From&lt;OsString&gt;, From&lt;OsStr&gt;, From&lt;&amp;OsString&gt;` for
    `Cow&lt;OsStr&gt;`, `From&lt;&amp;PathBuf&gt;` for `Cow&lt;Path&gt;`, and `From&lt;Cow&lt;Path&gt;&gt;`
    for `PathBuf`.-
  - Implemented `Shl` and `Shr` for `Wrapping&lt;u128&gt;`
    and `Wrapping&lt;i128&gt;`.-
  - `DirEntry::metadata` now uses `fstatat` instead of `lstat` when
    possible.-  This can provide up to a 40% speed increase.
  - Improved error messages when using `format!`.-
  + Stabilized APIs
  - `Iterator::step_by`
  - `Path::ancestors`
  - `SystemTime::UNIX_EPOCH`
  - `alloc::GlobalAlloc`
  - `alloc::Layout`
  - `alloc::LayoutErr`
  - `alloc::System`
  - `alloc::alloc`
  - `alloc::alloc_zeroed`
  - `alloc::dealloc`
  - `alloc::realloc`
  - `alloc::handle_alloc_error`
  - `btree_map::Entry::or_default`
  - `fmt::Alignment`
  - `hash_map::Entry::or_default`
  - `iter::repeat_with`
  - `num::NonZeroUsize`
  - `num::NonZeroU128`
  - `num::NonZeroU16`
  - `num::NonZeroU32`
  - `num::NonZeroU64`
  - `num::NonZeroU8`
  - `ops::RangeBounds`
  - `slice::SliceIndex`
  - `slice::from_mut`
  - `slice::from_ref`
  - `{Any + Send + Sync}::downcast_mut`
  - `{Any + Send + Sync}::downcast_ref`
  - `{Any + Send + Sync}::is`
  + Cargo
  - Cargo will now no longer allow you to publish crates with build scripts that
    modify the `src` directory.][cargo/5584] The `src` directory in a crate should be
    considered to be immutable.
  + Misc
  - The `suggestion_applicability` field in `rustc`'s json output is now
    stable.-  This will allow dev tools to check whether a code suggestion
    would apply to them.
  + Compatibility Notes
  - Rust will consider trait objects with duplicated constraints to be the same
    type as without the duplicated constraint.-  For example the below code will
    now fail to compile.
    ```rust
    trait Trait {}
    impl Trait + Send {
    fn test(&amp;self) { println!("one"); } //~ ERROR duplicate definitions with name `test`
    }
    impl Trait + Send + Send {
    fn test(&amp;self) { println!("two"); }
    }
- Update to version 1.27.2:
  + Compatibility Notes
  - The borrow checker was fixed to avoid an additional potential unsoundness when using
    match ergonomics
- Update to version 1.27.1:
  + Security Notes
  - rustdoc would execute plugins in the /tmp/rustdoc/plugins directory
    when running, which enabled executing code as some other user on a
    given machine. This release fixes that vulnerability; you can read
    more about this on the blog. The associated CVE is [CVE-2018-1000622].
    Thank you to Red Hat for responsibily disclosing this vulnerability to us.
  + Compatibility Notes
  - The borrow checker was fixed to avoid an additional potential unsoundness when using
    match ergonomics
- Update to version 1.27.0:
  + Language
  - Removed 'proc' from the reserved keywords list. This allows `proc` to
    be used as an identifier.
  - The dyn syntax is now available. This syntax is equivalent to the
    bare `Trait` syntax, and should make it clearer when being used in tandem with
    `impl Trait` because it is equivalent to the following syntax:
    `&amp;Trait == &amp;dyn Trait`, `&amp;mut Trait == &amp;mut dyn Trait`, and
    `Box&lt;Trait&gt; == Box&lt;dyn Trait&gt;`.
  - Attributes on generic parameters such as types and lifetimes are
    now stable. e.g.
    `fn foo&lt;#[lifetime_attr] 'a, #[type_attr] T: 'a&gt;() {}`
  - The `#[must_use]` attribute can now also be used on functions as well as
    types. It provides a lint that by default warns users when the
    value returned by a function has not been used.
  + Compiler
  - Added the `armvte-unknown-linux-musleabi` target.
  + Libraries
  - SIMD (Single Instruction Multiple Data) on x/x_ is now stable.
    This includes arch::x &amp; arch::x_ modules which contain
    SIMD intrinsics, a new macro called `is_x_feature_detected!`, the
    `#[target_feature(enable="")]` attribute, and adding `target_feature = ""` to
    the `cfg` attribute.
  - A lot of methods for `[u]`, `f`, and `f` previously only available in
    std are now available in core.
  - The generic `Rhs` type parameter on `ops::{Shl, ShlAssign, Shr}` now defaults
    to `Self`.
  - std::str::replace` now has the `#[must_use]` attribute to clarify
    that the operation isn't done in place.
  - Clone::clone`, `Iterator::collect`, and `ToOwned::to_owned` now have
    the `#[must_use]` attribute] to warn about unused potentially
    expensive allocations.
  + Stabilized APIs
  - DoubleEndedIterator::rfind
  - DoubleEndedIterator::rfold
  - DoubleEndedIterator::try_rfold
  - Duration::from_micros
  - Duration::from_nanos
  - Duration::subsec_micros
  - Duration::subsec_millis
  - HashMap::remove_entry
  - Iterator::try_fold
  - Iterator::try_for_each
  - NonNull::cast
  - Option::filter
  - String::replace_range
  - Take::set_limit
  - hint::unreachable_unchecked
  - os::unix::process::parent_id
  - ptr::swap_nonoverlapping
  - slice::rsplit_mut
  - slice::rsplit
  - slice::swap_with_slice
  + Cargo
  - `cargo-metadata` now includes `authors`, `categories`, `keywords`,
    `readme`, and `repository` fields.
  - `cargo-metadata` now includes a package's `metadata` table.
  - Added the `--target-dir` optional argument. This allows you to specify
    a different directory than `target` for placing compilation artifacts.
  - Cargo will be adding automatic target inference for binaries, benchmarks,
    examples, and tests in the Rust 2018 edition. If your project specifies
    specific targets, e.g. using `[[bin]]`, and have other binaries in locations
    where cargo would infer a binary, Cargo will produce a warning. You can
    disable this feature ahead of time by setting any of the following to false:
    `autobins`, `autobenches`, `autoexamples`, `autotests`.
  - Cargo will now cache compiler information. This can be disabled by
    setting `CARGO_CACHE_RUSTC_INFO=0` in your environment.
  + Compatibility Notes
  - Calling a `CharExt` or `StrExt` method directly on core will no longer
    work. e.g. `::core::prelude::v1::StrExt::is_empty("")` will not
    compile, `"".is_empty()` will still compile.
  - `Debug` output on `atomic::{AtomicBool, AtomicIsize, AtomicPtr, AtomicUsize}`
    will only print the inner type. E.g.
    `print!("{:?}", AtomicBool::new(true))` will print `true`,
    not `AtomicBool(true)`.
  - The maximum number for `repr(align(N))` is now 2?. Previously you
    could enter higher numbers but they were not supported by LLVM. Up to 512MB
    alignment should cover all use cases.
  - The `.description()` method on the `std::error::Error` trait
    has been soft-deprecated. It is no longer required to implement it.
  + Misc
  - Added ?The Rustc book? into the official documentation.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541246401">- Fixing various rpmlint warnings and errors:
  + ExclusiveArch instead of BuildArch for i686
  + Remove conflicts with same package name
  + Remove a few hidden files during prep, does not touch '.clang-format'
  + Remove old patch macro in comment
  + Fix lint warning about bash and zsh completition files
  + Fix various script shebang warnings (incorrect or missing)
  + Adjust rpmlintrc to mask some 'invalid' warnings
- Move Rust and its tools in to their own category under:
  + Development/Languages/Rust</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541332800">- Add ignore-Wstring-conversion.patch: we require patching of
  src/librustc_llvm/build.rs to ignore a flag that
  llvm-config --cxxflags outputs which GCC doesn't recognise.
- Default to building using the distro LLVM where the version is
  &gt;= 5.0, instead of the Rust bundled LLVM which requires
  compilation. This should decrease build times. SLE LLVM is too old.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541505600">- Fix second-person language and spellos.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1541678400">- Strengthen the dependency on rust-std-static to Requires
  to fix crate package builds in OBS
- Use standard form rich dependencies for SUSE Linux 15 and newer</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541764800">- Add Provides/Obsoletes/Conflicts to rust-std-static and cargo</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541937600">- Set the bootstrap flag in the spec file temporarily so that rings
  will build rust without intervention. Must be reverted once all
  releases are successful.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1542110400">- Add additional Requires to rls:
  + Requires rust-src
  + Requires rust-analysis
- Add additional Requires to rustfmt:
  + Requires cargo
- Fix rust-src requiring /usr/bin/bash; a script was incorrectly
  edited at build time.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1544097600">- Update to version 1.31.0
  + Language
  - This version marks the release of the 2018 edition of Rust.
  - New lifetime elision rules now allow for eliding lifetimes in functions and
  impl headers. E.g. `impl&lt;'a&gt; Reader for BufReader&lt;'a&gt; {}` can now be
  `impl Reader for BufReader&lt;'_&gt; {}`. Lifetimes are still required to be defined
  in structs.
  - You can now define and use `const` functions. These are currently
  a strict minimal subset of the const fn RFC. Refer to the
  [language reference][const-reference] for what exactly is available.
  - You can now use tool lints, which allow you to scope lints from external
  tools using attributes. E.g. `#[allow(clippy::filter_map)]`.
  - `#[no_mangle]` and `#[export_name]` attributes can now be located anywhere in
  a crate, not just in exported functions.
  - You can now use parentheses in pattern matches.
  + Compiler
  - Updated musl to 1.1.20
  + Libraries
  - You can now convert `num::NonZero*` types to their raw equivalvents using the
  `From` trait. E.g. `u8` now implements `From&lt;NonZeroU8&gt;`.
  - You can now convert a `&amp;Option&lt;T&gt;` into `Option&lt;&amp;T&gt;` and `&amp;mut Option&lt;T&gt;`
  into `Option&lt;&amp;mut T&gt;` using the `From` trait.
  - You can now multiply (`*`) a `time::Duration` by a `u32`.
  + Stabilized APIs
  - `slice::align_to`
  - `slice::align_to_mut`
  - `slice::chunks_exact`
  - `slice::chunks_exact_mut`
  - `slice::rchunks`
  - `slice::rchunks_mut`
  - `slice::rchunks_exact`
  - `slice::rchunks_exact_mut`
  - `Option::replace`
  + Cargo
  - Cargo will now download crates in parallel using HTTP/2.
  - You can now rename packages in your Cargo.toml We have a guide
  on how to use the `package` key in your dependencies.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1546689600">- Update to version 1.31.1
  + Fix Rust failing to build on `powerpc-unknown-netbsd`
  + Fix broken go-to-definition in RLS
  + Fix infinite loop on hover in RLS</changelog>
  <changelog author="federico@suse.com" date="1548158400">- Remove
  CVE-2018-1000622-prevent-rustdoc-loads-uncontrolled-plugins-path.patch,
  since rustdoc plugins are fixed since version 1.27.1 (bsc#1100691,
  CVE-2018-1000622).</changelog>
</package>
<package pkgid="2987b3b651c8a87c86fdce575d01ded9101c5b7961016afe5f2387760c6c94de" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.36.0" rel="lp150.16.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="a993e4e91fc139977ca09a2495a998dc9169c9856f15c42a4a99d4cb36fea99f" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="4f48d74bf1e43e6e431d73480c61067c420e6a210398257a016703dd25591d69" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1540987200">- Fix API/ABI breakage by libcdio-0.94-leak-07.patch (bsc#1108134).
- Remove API/ABI breaking cleanup from libcdio-0.94-leak-08.patch
  (bsc#1108134).
- API CHANGE: The leak fixes include some API changes. These are
  disabled by default to keep the existing API, but several
  functions are available with the new syntax:
  _cdio_list_node_free with 3 arguments
  _cdio_list_free with 3 arguments
  To use the new form, programmers have to use
  [#]define CDIO_API18
  linker has to use CDIO_18 base version.
  The resulting binaries will be SUSE specific, incompatible with
  other products.
- Refresh libcdio-0.94-leak-10.patch.</changelog>
</package>
<package pkgid="d8947298c77628d6e00c5cfcbc6cc051514dc47ca7fd0e94b5991bdd7b19d9a5" name="ceph" arch="src">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="4cc1c4d49cd269f45b65163daf6010ae04017aa1373b444d9ce350a6e79d065a" name="ceph" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="bf6039667af1a8114645ca47d6dff2f103ad103bc0db1181579ba3f333bb60fe" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="a48809b27399c81a38758c3f2729ef06148fb8bd354ca3c7de0ee2a6676e4937" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="af41072d2ef47acc9ac133f7dc7845797c51837dbb54452827466518c930e03e" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="defcd500612d386aad811b793cb7656df60097a36b20cc5d4d88f1784c54562f" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="9773c04187c01e0df92568a9bd5f3a822ff6fd1d51190f849694ca0c84d5db30" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="10a7ab6a9c90ea99fdc8139ddb750c8c901cbdd3c71ea72c01bd4a2800f3205a" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="e1b06b56b3a3c97ae1d49d3ff658253b285ea79d6755943c388582322ad7567a" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="11b1e5265a738ea6c922710fe4ccc74b7f6703df58cfd1701cd03b646170d7f4" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="052429e1ae8472d3976fb7d1f93f86c611d04b1f6cedf7e1b5eda061bbf056d8" name="ceph-resource-agents" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="3da73c2857d57531c2041ccfc95e517ec2831ee6e0656b435278d839b49361b8" name="ceph-test" arch="src">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="2895b5bbe05536d8ce0e08b73fb30ee373940272b1a1d58b35940eaca7046302" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="13.2.4.125+gad802694f5" rel="lp150.2.3.1"/>
  <changelog author="ncutler@suse.com" date="1521460800">- checkin.sh: add interactive verification of Ceph version number sanity</changelog>
  <changelog author="ncutler@suse.com" date="1521460801">- Update to 13.0.1-3202-g7a60121a01:
  + latest master (dashboard_v2 MGR module renamed to dashboard)</changelog>
  <changelog author="ncutler@suse.com" date="1521633600">- Update to 13.0.1-3204-g17e0216271:
  + osd: fix s390x build failure (bsc#1081526)
  + cmake: add chrono to BOOST_COMPONENTS (bsc#1086017)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- Reduce ceph-test constraints on aarch64</changelog>
  <changelog author="ncutler@suse.com" date="1523534400">- reduce ceph-test constraints for ppc64le and s390x</changelog>
  <changelog author="ncutler@suse.com" date="1523534401">- Update to 13.0.2-819-gf64b021d4c:
  + based on upstream master 3ab655b55d2b363c0352dfbb90caed2ffcd42432</changelog>
  <changelog author="ncutler@suse.com" date="1523534402">- Update to 13.0.2-984-g852d3f1411:
  + based on upstream master aaac83abb516f824f1caef470686b1bffeffa8b4
  + fixes s390x build failure (bsc#1089291)
  + introduces liboath0 runtime dependency (bsc#1089302)
  + fixes RGW SSL deployment</changelog>
  <changelog author="ncutler@suse.com" date="1523880000">- rewrite README-ceph-test.txt for clarity</changelog>
  <changelog author="ncutler@suse.com" date="1524225600">- Update to 13.0.2-992-g418baeac64:
  + fix ceph-detect-init for recent SUSEs (bsc#1090072)</changelog>
  <changelog author="ncutler@suse.com" date="1524744000">- Update to 13.0.2-1874-ge31585919b:
  + based on upstream master 510762f51e346836492a0a8f83a056944ee6e046
  * add liblz4 build- and runtime dependency
  * move ceph-disk runtime dependencies from ceph-osd to ceph-base</changelog>
  <changelog author="ncutler@suse.com" date="1527768000">- Update to 13.1.1-173-g127c33d64e:
  + based on upstream mimic dda69eea663bcabc5ad99f5ca8370f43575f475d
  * fix GCC8 builds (bsc#1084645)
  * fix python3 module loading (bsc#1086613)
  * ceph-brag no longer packaged upstream</changelog>
  <changelog author="jan.fajerski@suse.com" date="1528200000">- Update to v13.2.0-39-geb7f429568:
  + based on upstream mimic f38fff5d093da678f6736c7a008511873c8d0fda</changelog>
  <changelog author="ncutler@suse.com" date="1531224000">- Update to v13.2.0-210-g0e990e900d:
  + based on upstream mimic 4ed78ecf2f27aae1e9eb27f83611285ec7445ebd
  * bsc#1099162, CVE-2018-10861
  * bsc#1096748, CVE-2018-1128, CVE-2018-1129
  + increase memory constraint for build workers after builds started
    failing on workers with exactly 8G of RAM ("free -h" reports
    7.8 GiB for these workers)</changelog>
  <changelog author="ncutler@suse.com" date="1534507200">- Update to 13.2.1-106-g9a1fcb1b6a:
  + based on upstream mimic 0323ca11569b183509129c180dcec427aecf2a0a
  * including upstream 13.2.1 release - for details, see
    https://ceph.com/releases/13-2-1-mimic-released/
  + ceph-disk: let extract_parted_partition_numbers return a list
    (fixes a py3 issue)</changelog>
  <changelog author="ncutler@suse.com" date="1536580800">- Update to 13.2.1-426-gd2d4852e84:
  + based on upstream mimic 510d48e10be716cf61b9ddd51e8bc847288ae15a
  + bsc#1101262 - ceph's SPDK builds with march=native
  + migrate DeepSea QA bash scripting from DeepSea repo</changelog>
  <changelog author="ncutler@suse.com" date="1536667200">- Update to 13.2.1-427-g6cd01d4dd2:
  + cmake: no libradosstriper headers if WITH_LIBRADOSSTRIPER=OFF</changelog>
  <changelog author="ncutler@suse.com" date="1539172800">- Update to 13.2.2-86-g62b49f06c4:
  + rebase on upstream 13.2.2 release
    https://ceph.com/releases/13-2-2-mimic-released/
  + IMPORTANT NOTE: this release contains a regression in CephFS
    which was not yet fixed at the time of this build. Do not use
    this build on a production cluster!
    For details, see http://tracker.ceph.com/issues/36346</changelog>
  <changelog author="ncutler@suse.com" date="1548072000">- Update to 13.2.4-124-g31c2dce74f:
  + rebase on upstream 13.2.4 release
  + ceph-volume Python 3 fixes (boo#1114567)
  + Security fixes (CVE-2018-16846, CVE-2018-14662, bsc#1111177)
  + fix CephFS regression from 13.2.2</changelog>
  <changelog author="ncutler@suse.com" date="1548158400">- _constraints: Increase aarch64 disk space and memory constraints for
  ceph-test</changelog>
  <changelog author="ncutler@suse.com" date="1548417600">- spec: build libradosstriper1 library unconditionally (for SLE-15
  mimic submission)</changelog>
</package>
<package pkgid="8c84c75968075ecb74e81d4900e3cb5f62ea9044de5a32ebc14caf7c242de06f" name="cf-cli" arch="src">
  <version epoch="0" ver="6.43.0" rel="lp150.2.3.1"/>
  <changelog author="aosthof@suse.de" date="1517918400">- Include in SLE 15 CAP Module (fate#324528)</changelog>
  <changelog author="thardeck@suse.com" date="1517918401">- add rpmlintrc file to spec
- remove source url to prevent issues with the Concourse
  github-release resource</changelog>
  <changelog author="thardeck@suse.com" date="1520596800">- update to version 6.35.0</changelog>
  <changelog author="thardeck@suse.com" date="1521115200">- update to version 6.35.1</changelog>
  <changelog author="thardeck@suse.com" date="1521201600">- update to version 6.35.2
  [#]## Bug Fixes
  - Providing a clearer services authorization warning message when a service has been disabled for the organization, fixing #1344</changelog>
  <changelog author="thardeck@suse.com" date="1522756800">- update to version 6.36.0
  [#]## Bug Fixes
  - int64 support for cf/flags library, #1333
  - Debian package, #1336
  - Web action flag not working on CLI 0.6.5, #1337
  - When a cf push upload fails/Consul is down, a panic occurs, #1340 and #1351</changelog>
  <changelog author="thardeck@suse.com" date="1522929600">- update to version 6.36.1</changelog>
  <changelog author="thardeck@suse.com" date="1526558400">- update to version 6.36.2</changelog>
  <changelog author="thardeck@suse.com" date="1527595200">- update to version 6.37.0
  [#]## Enhancements
  - The api/cloudcontroller/ccv2 package has been updated with more functions #1343
  - Now a warning appears if you are using a API version older than 2.69.0, which is no longer officially supported
  - Now the CLI reads the username and password from the environment variables #1358
  [#]## Bug Fixes
  - Fixes bug whereby X-Cf-Warnings were not being unescaped when displayed to user #1361
  - When using CF_TRACE=1, passwords are now sanitized #1375 and tracker</changelog>
  <changelog author="okurz@suse.com" date="1531569600">- Add package installation and post-install self-test</changelog>
  <changelog author="thardeck@suse.com" date="1533729600">- update to version 6.38.0
  [#]## Enhancements
  - v3-ssh process type now defaults to web story
  - Support added for setting tags for user provided service instances story
  - Now a warning appears if you attempt to use deprecated properties and variable substitution story
  - Updated usage so now you can rename the cf binary use it with every command story
  - cf events now displays the Diego cell_id and instance guid in crash events story
  - Includes cf service service-instance table display improvements wherein the service instance information is now grouped separately from the binding information story
  - cf service service-instance table display information for user provided services changed: status has been added to the table story
  [#]## Bug Fixes
  - the CLI now properly handles escaped commas in the X-Cf-Warnings header</changelog>
  <changelog author="okurz@suse.com" date="1534507200">- Change package self-test to _multibuild single-spec file approach for easier
  handling of package submissions</changelog>
  <changelog author="thardeck@suse.com" date="1536667200">- update to version 6.39.0
  [#]## Enhancements
  - for users on cc api 3.27, cf start is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. Note that if you use v3 commands to create and start your app, if you subsequently use cf stop and cf start, the routes property in cf app will not populate even though the route exists story
  - for users on cc api 3.27, cf restart is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - for users on cc api 3.27, cf restage is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - improved help text for -d domains for cf push to include examples of usage story
  - cf v3-scale displays additional app information story
  - if you've created an internal domain, and it is the first domain in cc, the CLI will now ignore the internal domain and instead choose the next non-internal domain when you push an app story
  [#]## Bug Fixes
  - Fix for users on macOS attempting to brew install cf-cli the CF CLI using the unreleased master branch of Homebrew story
  - Fixes an issue whereby, due to a recent cc api change, when you execute cf push and watch the cf app command, the app display returned a 400 error story
  - Fixes a bug whereby if you logged in using client credentials, cf auth user pass --client credentials you were unable to create an org; now create-org will assign the role to the user id specified in your manifest story
  - fixes an issue introduced when we refactored cf start and as part of that work, we stopped blocking on the initial connection with the logging backend; now the CLI blocks until the NOAA connection is made, or the default dial timeout of five seconds is reached story</changelog>
  <changelog author="thardeck@suse.com" date="1537444800">- update to version 6.39.1</changelog>
  <changelog author="thardeck@suse.com" date="1539000000">- update to version 6.40.0
  [#]## Bug Fixes
  - Fix bug where trailing slash on cf api would break listing commands for older CC APIs story. For older versions of CC API, if the API URL had a trailing slash, some requests would fail with an "Unknown request" error. These requests are now handled properly.</changelog>
  <changelog author="thardeck@suse.com" date="1542024000">- update to version 6.40.1
  [#]## Bug Fixes
  - Updates the minimum version for the buildpacks-stacks association feature. In [CLI v6.39.0](https://github.com/cloudfoundry/cli/releases/tag/v6.39.0), when the feature was released, we incorrectly set the minimum to cc api version as`2.114`. The minimum cc api version is now correctly set to [`2.112`](https://github.com/cloudfoundry/capi-release/releases/tag/1.58.0).  [story](https://www.pivotaltracker.com/story/show/161464797)
  - Fixes a bug with inspecting a service instance `cf service service-instance`, now the `documentation` url displays correctly for services which populate that field [story](https://www.pivotaltracker.com/story/show/161251875)</changelog>
  <changelog author="okurz@suse.com" date="1542110400">- Require specific version for self-test; disable debug packages in test to prevent error about missing files</changelog>
  <changelog author="thardeck@suse.com" date="1543838400">- update to version 6.41.0
  [#]## Enhancements
  - updated `cf --help` to include the `delete` command [story](https://www.pivotaltracker.com/story/show/161556511)</changelog>
  <changelog author="thardeck@suse.com" date="1547726400">- update to version 6.42.0
  [#]## Minor Enhancements
  - updated `cf restage` help text and the first line in the command's output to indicate that using this command will cause app downtime [story](https://www.pivotaltracker.com/story/show/151841382)
  - updated the `cf bind-route-service` help text to clarify usage instructions [story](https://www.pivotaltracker.com/story/show/150111078)
  - improved an error message for `cf create-service-boker` to be more helpful when the CC API returns a `502` due to an invalid service broker catalog
  - upgraded to Golang 1.11.4 [story](https://www.pivotaltracker.com/story/show/162745359)
  - added a short name `ue` for `cf unset-env` [story](https://www.pivotaltracker.com/story/show/161632713)
  - updated `cf marketplace` command to include a new `broker` column to prepare for a upcoming services-related feature which will allow services to have the same name as long as they are associated with different service brokers [story](https://www.pivotaltracker.com/story/show/162699756)
  [#]## Bugs
  - fix for `cf enable-service-access -p plan` whereby when we refactored the code in CLI `v6.41.0` it created service plan visibilities as part of a subsequent run of the command (the unrefactored code skipped creating the service plan visibilities); now the command will skip creating service plan visibilities as it did prior to the refactor [story](https://www.pivotaltracker.com/story/show/162747373)
  - updated the `cf rename-buildpack` help text which was missing reference to the `-s` stack flag [story](https://www.pivotaltracker.com/story/show/162428661)
  - updated help text for when users use `brew search cloudfoundry-cli` [story](https://www.pivotaltracker.com/story/show/161770940)
  - now when you run `cf service service-instance` for a route service, the route service url appears in the key value table [story](https://www.pivotaltracker.com/story/show/162498211)</changelog>
  <changelog author="thardeck@suse.com" date="1550750400">- update to version 6.43.0 (bsc#1132242)
  [#]## Enhancements
  - `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://www.pivotaltracker.com/story/show/130060949)
  - Improves `cf delete-orphaned-routes` such that it uses a different endpoint, reducing the chance of a race condition when two users are simultaneously deleting orphaned routes and associating routes with applications [story](https://www.pivotaltracker.com/story/show/163156064)
  - we've improved the speed of cf services - it now hits a single endpoint instead of making individual API calls
  [#]## Bug Fixes
  [#]### Security
  - Fixes issue with running cf login in verbose mode whereby passwords which contains regex were not completely redacted
  - Fixes issue whilst running commands in verbose mode refresh tokens were not completely redacted
  [#]## Other Bug Fixes
  - Updates help text for cf curlstory
  - Now refresh tokens work properly whilst using cf curl with V3 CC API endpoints story
  - Fixes performance degradation for cf services story
  - cf delete-service requires that you are targeting a space story
  - cf enable-service access for a service in an org will succeed if you have already enabled access for that service in that org story</changelog>
</package>
<package pkgid="a31b597adc44bf9771ac39cf916ae5fe8385556614c4d45de8adc425676ac8b0" name="cf-cli" arch="x86_64">
  <version epoch="0" ver="6.43.0" rel="lp150.2.3.1"/>
  <changelog author="aosthof@suse.de" date="1517918400">- Include in SLE 15 CAP Module (fate#324528)</changelog>
  <changelog author="thardeck@suse.com" date="1517918401">- add rpmlintrc file to spec
- remove source url to prevent issues with the Concourse
  github-release resource</changelog>
  <changelog author="thardeck@suse.com" date="1520596800">- update to version 6.35.0</changelog>
  <changelog author="thardeck@suse.com" date="1521115200">- update to version 6.35.1</changelog>
  <changelog author="thardeck@suse.com" date="1521201600">- update to version 6.35.2
  [#]## Bug Fixes
  - Providing a clearer services authorization warning message when a service has been disabled for the organization, fixing #1344</changelog>
  <changelog author="thardeck@suse.com" date="1522756800">- update to version 6.36.0
  [#]## Bug Fixes
  - int64 support for cf/flags library, #1333
  - Debian package, #1336
  - Web action flag not working on CLI 0.6.5, #1337
  - When a cf push upload fails/Consul is down, a panic occurs, #1340 and #1351</changelog>
  <changelog author="thardeck@suse.com" date="1522929600">- update to version 6.36.1</changelog>
  <changelog author="thardeck@suse.com" date="1526558400">- update to version 6.36.2</changelog>
  <changelog author="thardeck@suse.com" date="1527595200">- update to version 6.37.0
  [#]## Enhancements
  - The api/cloudcontroller/ccv2 package has been updated with more functions #1343
  - Now a warning appears if you are using a API version older than 2.69.0, which is no longer officially supported
  - Now the CLI reads the username and password from the environment variables #1358
  [#]## Bug Fixes
  - Fixes bug whereby X-Cf-Warnings were not being unescaped when displayed to user #1361
  - When using CF_TRACE=1, passwords are now sanitized #1375 and tracker</changelog>
  <changelog author="okurz@suse.com" date="1531569600">- Add package installation and post-install self-test</changelog>
  <changelog author="thardeck@suse.com" date="1533729600">- update to version 6.38.0
  [#]## Enhancements
  - v3-ssh process type now defaults to web story
  - Support added for setting tags for user provided service instances story
  - Now a warning appears if you attempt to use deprecated properties and variable substitution story
  - Updated usage so now you can rename the cf binary use it with every command story
  - cf events now displays the Diego cell_id and instance guid in crash events story
  - Includes cf service service-instance table display improvements wherein the service instance information is now grouped separately from the binding information story
  - cf service service-instance table display information for user provided services changed: status has been added to the table story
  [#]## Bug Fixes
  - the CLI now properly handles escaped commas in the X-Cf-Warnings header</changelog>
  <changelog author="okurz@suse.com" date="1534507200">- Change package self-test to _multibuild single-spec file approach for easier
  handling of package submissions</changelog>
  <changelog author="thardeck@suse.com" date="1536667200">- update to version 6.39.0
  [#]## Enhancements
  - for users on cc api 3.27, cf start is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. Note that if you use v3 commands to create and start your app, if you subsequently use cf stop and cf start, the routes property in cf app will not populate even though the route exists story
  - for users on cc api 3.27, cf restart is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - for users on cc api 3.27, cf restage is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - improved help text for -d domains for cf push to include examples of usage story
  - cf v3-scale displays additional app information story
  - if you've created an internal domain, and it is the first domain in cc, the CLI will now ignore the internal domain and instead choose the next non-internal domain when you push an app story
  [#]## Bug Fixes
  - Fix for users on macOS attempting to brew install cf-cli the CF CLI using the unreleased master branch of Homebrew story
  - Fixes an issue whereby, due to a recent cc api change, when you execute cf push and watch the cf app command, the app display returned a 400 error story
  - Fixes a bug whereby if you logged in using client credentials, cf auth user pass --client credentials you were unable to create an org; now create-org will assign the role to the user id specified in your manifest story
  - fixes an issue introduced when we refactored cf start and as part of that work, we stopped blocking on the initial connection with the logging backend; now the CLI blocks until the NOAA connection is made, or the default dial timeout of five seconds is reached story</changelog>
  <changelog author="thardeck@suse.com" date="1537444800">- update to version 6.39.1</changelog>
  <changelog author="thardeck@suse.com" date="1539000000">- update to version 6.40.0
  [#]## Bug Fixes
  - Fix bug where trailing slash on cf api would break listing commands for older CC APIs story. For older versions of CC API, if the API URL had a trailing slash, some requests would fail with an "Unknown request" error. These requests are now handled properly.</changelog>
  <changelog author="thardeck@suse.com" date="1542024000">- update to version 6.40.1
  [#]## Bug Fixes
  - Updates the minimum version for the buildpacks-stacks association feature. In [CLI v6.39.0](https://github.com/cloudfoundry/cli/releases/tag/v6.39.0), when the feature was released, we incorrectly set the minimum to cc api version as`2.114`. The minimum cc api version is now correctly set to [`2.112`](https://github.com/cloudfoundry/capi-release/releases/tag/1.58.0).  [story](https://www.pivotaltracker.com/story/show/161464797)
  - Fixes a bug with inspecting a service instance `cf service service-instance`, now the `documentation` url displays correctly for services which populate that field [story](https://www.pivotaltracker.com/story/show/161251875)</changelog>
  <changelog author="okurz@suse.com" date="1542110400">- Require specific version for self-test; disable debug packages in test to prevent error about missing files</changelog>
  <changelog author="thardeck@suse.com" date="1543838400">- update to version 6.41.0
  [#]## Enhancements
  - updated `cf --help` to include the `delete` command [story](https://www.pivotaltracker.com/story/show/161556511)</changelog>
  <changelog author="thardeck@suse.com" date="1547726400">- update to version 6.42.0
  [#]## Minor Enhancements
  - updated `cf restage` help text and the first line in the command's output to indicate that using this command will cause app downtime [story](https://www.pivotaltracker.com/story/show/151841382)
  - updated the `cf bind-route-service` help text to clarify usage instructions [story](https://www.pivotaltracker.com/story/show/150111078)
  - improved an error message for `cf create-service-boker` to be more helpful when the CC API returns a `502` due to an invalid service broker catalog
  - upgraded to Golang 1.11.4 [story](https://www.pivotaltracker.com/story/show/162745359)
  - added a short name `ue` for `cf unset-env` [story](https://www.pivotaltracker.com/story/show/161632713)
  - updated `cf marketplace` command to include a new `broker` column to prepare for a upcoming services-related feature which will allow services to have the same name as long as they are associated with different service brokers [story](https://www.pivotaltracker.com/story/show/162699756)
  [#]## Bugs
  - fix for `cf enable-service-access -p plan` whereby when we refactored the code in CLI `v6.41.0` it created service plan visibilities as part of a subsequent run of the command (the unrefactored code skipped creating the service plan visibilities); now the command will skip creating service plan visibilities as it did prior to the refactor [story](https://www.pivotaltracker.com/story/show/162747373)
  - updated the `cf rename-buildpack` help text which was missing reference to the `-s` stack flag [story](https://www.pivotaltracker.com/story/show/162428661)
  - updated help text for when users use `brew search cloudfoundry-cli` [story](https://www.pivotaltracker.com/story/show/161770940)
  - now when you run `cf service service-instance` for a route service, the route service url appears in the key value table [story](https://www.pivotaltracker.com/story/show/162498211)</changelog>
  <changelog author="thardeck@suse.com" date="1550750400">- update to version 6.43.0 (bsc#1132242)
  [#]## Enhancements
  - `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://www.pivotaltracker.com/story/show/130060949)
  - Improves `cf delete-orphaned-routes` such that it uses a different endpoint, reducing the chance of a race condition when two users are simultaneously deleting orphaned routes and associating routes with applications [story](https://www.pivotaltracker.com/story/show/163156064)
  - we've improved the speed of cf services - it now hits a single endpoint instead of making individual API calls
  [#]## Bug Fixes
  [#]### Security
  - Fixes issue with running cf login in verbose mode whereby passwords which contains regex were not completely redacted
  - Fixes issue whilst running commands in verbose mode refresh tokens were not completely redacted
  [#]## Other Bug Fixes
  - Updates help text for cf curlstory
  - Now refresh tokens work properly whilst using cf curl with V3 CC API endpoints story
  - Fixes performance degradation for cf services story
  - cf delete-service requires that you are targeting a space story
  - cf enable-service access for a service in an org will succeed if you have already enabled access for that service in that org story</changelog>
</package>
<package pkgid="5867f231a52ecf1906e70edede8ff8fc3fd237afc7579e8efd695026fa2c0859" name="cf-cli-test" arch="src">
  <version epoch="0" ver="6.43.0" rel="lp150.2.3.1"/>
  <changelog author="aosthof@suse.de" date="1517918400">- Include in SLE 15 CAP Module (fate#324528)</changelog>
  <changelog author="thardeck@suse.com" date="1517918401">- add rpmlintrc file to spec
- remove source url to prevent issues with the Concourse
  github-release resource</changelog>
  <changelog author="thardeck@suse.com" date="1520596800">- update to version 6.35.0</changelog>
  <changelog author="thardeck@suse.com" date="1521115200">- update to version 6.35.1</changelog>
  <changelog author="thardeck@suse.com" date="1521201600">- update to version 6.35.2
  [#]## Bug Fixes
  - Providing a clearer services authorization warning message when a service has been disabled for the organization, fixing #1344</changelog>
  <changelog author="thardeck@suse.com" date="1522756800">- update to version 6.36.0
  [#]## Bug Fixes
  - int64 support for cf/flags library, #1333
  - Debian package, #1336
  - Web action flag not working on CLI 0.6.5, #1337
  - When a cf push upload fails/Consul is down, a panic occurs, #1340 and #1351</changelog>
  <changelog author="thardeck@suse.com" date="1522929600">- update to version 6.36.1</changelog>
  <changelog author="thardeck@suse.com" date="1526558400">- update to version 6.36.2</changelog>
  <changelog author="thardeck@suse.com" date="1527595200">- update to version 6.37.0
  [#]## Enhancements
  - The api/cloudcontroller/ccv2 package has been updated with more functions #1343
  - Now a warning appears if you are using a API version older than 2.69.0, which is no longer officially supported
  - Now the CLI reads the username and password from the environment variables #1358
  [#]## Bug Fixes
  - Fixes bug whereby X-Cf-Warnings were not being unescaped when displayed to user #1361
  - When using CF_TRACE=1, passwords are now sanitized #1375 and tracker</changelog>
  <changelog author="okurz@suse.com" date="1531569600">- Add package installation and post-install self-test</changelog>
  <changelog author="thardeck@suse.com" date="1533729600">- update to version 6.38.0
  [#]## Enhancements
  - v3-ssh process type now defaults to web story
  - Support added for setting tags for user provided service instances story
  - Now a warning appears if you attempt to use deprecated properties and variable substitution story
  - Updated usage so now you can rename the cf binary use it with every command story
  - cf events now displays the Diego cell_id and instance guid in crash events story
  - Includes cf service service-instance table display improvements wherein the service instance information is now grouped separately from the binding information story
  - cf service service-instance table display information for user provided services changed: status has been added to the table story
  [#]## Bug Fixes
  - the CLI now properly handles escaped commas in the X-Cf-Warnings header</changelog>
  <changelog author="okurz@suse.com" date="1534507200">- Change package self-test to _multibuild single-spec file approach for easier
  handling of package submissions</changelog>
  <changelog author="thardeck@suse.com" date="1536667200">- update to version 6.39.0
  [#]## Enhancements
  - for users on cc api 3.27, cf start is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. Note that if you use v3 commands to create and start your app, if you subsequently use cf stop and cf start, the routes property in cf app will not populate even though the route exists story
  - for users on cc api 3.27, cf restart is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - for users on cc api 3.27, cf restage is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - improved help text for -d domains for cf push to include examples of usage story
  - cf v3-scale displays additional app information story
  - if you've created an internal domain, and it is the first domain in cc, the CLI will now ignore the internal domain and instead choose the next non-internal domain when you push an app story
  [#]## Bug Fixes
  - Fix for users on macOS attempting to brew install cf-cli the CF CLI using the unreleased master branch of Homebrew story
  - Fixes an issue whereby, due to a recent cc api change, when you execute cf push and watch the cf app command, the app display returned a 400 error story
  - Fixes a bug whereby if you logged in using client credentials, cf auth user pass --client credentials you were unable to create an org; now create-org will assign the role to the user id specified in your manifest story
  - fixes an issue introduced when we refactored cf start and as part of that work, we stopped blocking on the initial connection with the logging backend; now the CLI blocks until the NOAA connection is made, or the default dial timeout of five seconds is reached story</changelog>
  <changelog author="thardeck@suse.com" date="1537444800">- update to version 6.39.1</changelog>
  <changelog author="thardeck@suse.com" date="1539000000">- update to version 6.40.0
  [#]## Bug Fixes
  - Fix bug where trailing slash on cf api would break listing commands for older CC APIs story. For older versions of CC API, if the API URL had a trailing slash, some requests would fail with an "Unknown request" error. These requests are now handled properly.</changelog>
  <changelog author="thardeck@suse.com" date="1542024000">- update to version 6.40.1
  [#]## Bug Fixes
  - Updates the minimum version for the buildpacks-stacks association feature. In [CLI v6.39.0](https://github.com/cloudfoundry/cli/releases/tag/v6.39.0), when the feature was released, we incorrectly set the minimum to cc api version as`2.114`. The minimum cc api version is now correctly set to [`2.112`](https://github.com/cloudfoundry/capi-release/releases/tag/1.58.0).  [story](https://www.pivotaltracker.com/story/show/161464797)
  - Fixes a bug with inspecting a service instance `cf service service-instance`, now the `documentation` url displays correctly for services which populate that field [story](https://www.pivotaltracker.com/story/show/161251875)</changelog>
  <changelog author="okurz@suse.com" date="1542110400">- Require specific version for self-test; disable debug packages in test to prevent error about missing files</changelog>
  <changelog author="thardeck@suse.com" date="1543838400">- update to version 6.41.0
  [#]## Enhancements
  - updated `cf --help` to include the `delete` command [story](https://www.pivotaltracker.com/story/show/161556511)</changelog>
  <changelog author="thardeck@suse.com" date="1547726400">- update to version 6.42.0
  [#]## Minor Enhancements
  - updated `cf restage` help text and the first line in the command's output to indicate that using this command will cause app downtime [story](https://www.pivotaltracker.com/story/show/151841382)
  - updated the `cf bind-route-service` help text to clarify usage instructions [story](https://www.pivotaltracker.com/story/show/150111078)
  - improved an error message for `cf create-service-boker` to be more helpful when the CC API returns a `502` due to an invalid service broker catalog
  - upgraded to Golang 1.11.4 [story](https://www.pivotaltracker.com/story/show/162745359)
  - added a short name `ue` for `cf unset-env` [story](https://www.pivotaltracker.com/story/show/161632713)
  - updated `cf marketplace` command to include a new `broker` column to prepare for a upcoming services-related feature which will allow services to have the same name as long as they are associated with different service brokers [story](https://www.pivotaltracker.com/story/show/162699756)
  [#]## Bugs
  - fix for `cf enable-service-access -p plan` whereby when we refactored the code in CLI `v6.41.0` it created service plan visibilities as part of a subsequent run of the command (the unrefactored code skipped creating the service plan visibilities); now the command will skip creating service plan visibilities as it did prior to the refactor [story](https://www.pivotaltracker.com/story/show/162747373)
  - updated the `cf rename-buildpack` help text which was missing reference to the `-s` stack flag [story](https://www.pivotaltracker.com/story/show/162428661)
  - updated help text for when users use `brew search cloudfoundry-cli` [story](https://www.pivotaltracker.com/story/show/161770940)
  - now when you run `cf service service-instance` for a route service, the route service url appears in the key value table [story](https://www.pivotaltracker.com/story/show/162498211)</changelog>
  <changelog author="thardeck@suse.com" date="1550750400">- update to version 6.43.0 (bsc#1132242)
  [#]## Enhancements
  - `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://www.pivotaltracker.com/story/show/130060949)
  - Improves `cf delete-orphaned-routes` such that it uses a different endpoint, reducing the chance of a race condition when two users are simultaneously deleting orphaned routes and associating routes with applications [story](https://www.pivotaltracker.com/story/show/163156064)
  - we've improved the speed of cf services - it now hits a single endpoint instead of making individual API calls
  [#]## Bug Fixes
  [#]### Security
  - Fixes issue with running cf login in verbose mode whereby passwords which contains regex were not completely redacted
  - Fixes issue whilst running commands in verbose mode refresh tokens were not completely redacted
  [#]## Other Bug Fixes
  - Updates help text for cf curlstory
  - Now refresh tokens work properly whilst using cf curl with V3 CC API endpoints story
  - Fixes performance degradation for cf services story
  - cf delete-service requires that you are targeting a space story
  - cf enable-service access for a service in an org will succeed if you have already enabled access for that service in that org story</changelog>
</package>
<package pkgid="18f84cabe5be2767f05cc454fddf5cfba7e3f97ed62f8c77242596a0164bcf0e" name="cf-cli-test" arch="x86_64">
  <version epoch="0" ver="6.43.0" rel="lp150.2.3.1"/>
  <changelog author="aosthof@suse.de" date="1517918400">- Include in SLE 15 CAP Module (fate#324528)</changelog>
  <changelog author="thardeck@suse.com" date="1517918401">- add rpmlintrc file to spec
- remove source url to prevent issues with the Concourse
  github-release resource</changelog>
  <changelog author="thardeck@suse.com" date="1520596800">- update to version 6.35.0</changelog>
  <changelog author="thardeck@suse.com" date="1521115200">- update to version 6.35.1</changelog>
  <changelog author="thardeck@suse.com" date="1521201600">- update to version 6.35.2
  [#]## Bug Fixes
  - Providing a clearer services authorization warning message when a service has been disabled for the organization, fixing #1344</changelog>
  <changelog author="thardeck@suse.com" date="1522756800">- update to version 6.36.0
  [#]## Bug Fixes
  - int64 support for cf/flags library, #1333
  - Debian package, #1336
  - Web action flag not working on CLI 0.6.5, #1337
  - When a cf push upload fails/Consul is down, a panic occurs, #1340 and #1351</changelog>
  <changelog author="thardeck@suse.com" date="1522929600">- update to version 6.36.1</changelog>
  <changelog author="thardeck@suse.com" date="1526558400">- update to version 6.36.2</changelog>
  <changelog author="thardeck@suse.com" date="1527595200">- update to version 6.37.0
  [#]## Enhancements
  - The api/cloudcontroller/ccv2 package has been updated with more functions #1343
  - Now a warning appears if you are using a API version older than 2.69.0, which is no longer officially supported
  - Now the CLI reads the username and password from the environment variables #1358
  [#]## Bug Fixes
  - Fixes bug whereby X-Cf-Warnings were not being unescaped when displayed to user #1361
  - When using CF_TRACE=1, passwords are now sanitized #1375 and tracker</changelog>
  <changelog author="okurz@suse.com" date="1531569600">- Add package installation and post-install self-test</changelog>
  <changelog author="thardeck@suse.com" date="1533729600">- update to version 6.38.0
  [#]## Enhancements
  - v3-ssh process type now defaults to web story
  - Support added for setting tags for user provided service instances story
  - Now a warning appears if you attempt to use deprecated properties and variable substitution story
  - Updated usage so now you can rename the cf binary use it with every command story
  - cf events now displays the Diego cell_id and instance guid in crash events story
  - Includes cf service service-instance table display improvements wherein the service instance information is now grouped separately from the binding information story
  - cf service service-instance table display information for user provided services changed: status has been added to the table story
  [#]## Bug Fixes
  - the CLI now properly handles escaped commas in the X-Cf-Warnings header</changelog>
  <changelog author="okurz@suse.com" date="1534507200">- Change package self-test to _multibuild single-spec file approach for easier
  handling of package submissions</changelog>
  <changelog author="thardeck@suse.com" date="1536667200">- update to version 6.39.0
  [#]## Enhancements
  - for users on cc api 3.27, cf start is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. Note that if you use v3 commands to create and start your app, if you subsequently use cf stop and cf start, the routes property in cf app will not populate even though the route exists story
  - for users on cc api 3.27, cf restart is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - for users on cc api 3.27, cf restage is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
  - improved help text for -d domains for cf push to include examples of usage story
  - cf v3-scale displays additional app information story
  - if you've created an internal domain, and it is the first domain in cc, the CLI will now ignore the internal domain and instead choose the next non-internal domain when you push an app story
  [#]## Bug Fixes
  - Fix for users on macOS attempting to brew install cf-cli the CF CLI using the unreleased master branch of Homebrew story
  - Fixes an issue whereby, due to a recent cc api change, when you execute cf push and watch the cf app command, the app display returned a 400 error story
  - Fixes a bug whereby if you logged in using client credentials, cf auth user pass --client credentials you were unable to create an org; now create-org will assign the role to the user id specified in your manifest story
  - fixes an issue introduced when we refactored cf start and as part of that work, we stopped blocking on the initial connection with the logging backend; now the CLI blocks until the NOAA connection is made, or the default dial timeout of five seconds is reached story</changelog>
  <changelog author="thardeck@suse.com" date="1537444800">- update to version 6.39.1</changelog>
  <changelog author="thardeck@suse.com" date="1539000000">- update to version 6.40.0
  [#]## Bug Fixes
  - Fix bug where trailing slash on cf api would break listing commands for older CC APIs story. For older versions of CC API, if the API URL had a trailing slash, some requests would fail with an "Unknown request" error. These requests are now handled properly.</changelog>
  <changelog author="thardeck@suse.com" date="1542024000">- update to version 6.40.1
  [#]## Bug Fixes
  - Updates the minimum version for the buildpacks-stacks association feature. In [CLI v6.39.0](https://github.com/cloudfoundry/cli/releases/tag/v6.39.0), when the feature was released, we incorrectly set the minimum to cc api version as`2.114`. The minimum cc api version is now correctly set to [`2.112`](https://github.com/cloudfoundry/capi-release/releases/tag/1.58.0).  [story](https://www.pivotaltracker.com/story/show/161464797)
  - Fixes a bug with inspecting a service instance `cf service service-instance`, now the `documentation` url displays correctly for services which populate that field [story](https://www.pivotaltracker.com/story/show/161251875)</changelog>
  <changelog author="okurz@suse.com" date="1542110400">- Require specific version for self-test; disable debug packages in test to prevent error about missing files</changelog>
  <changelog author="thardeck@suse.com" date="1543838400">- update to version 6.41.0
  [#]## Enhancements
  - updated `cf --help` to include the `delete` command [story](https://www.pivotaltracker.com/story/show/161556511)</changelog>
  <changelog author="thardeck@suse.com" date="1547726400">- update to version 6.42.0
  [#]## Minor Enhancements
  - updated `cf restage` help text and the first line in the command's output to indicate that using this command will cause app downtime [story](https://www.pivotaltracker.com/story/show/151841382)
  - updated the `cf bind-route-service` help text to clarify usage instructions [story](https://www.pivotaltracker.com/story/show/150111078)
  - improved an error message for `cf create-service-boker` to be more helpful when the CC API returns a `502` due to an invalid service broker catalog
  - upgraded to Golang 1.11.4 [story](https://www.pivotaltracker.com/story/show/162745359)
  - added a short name `ue` for `cf unset-env` [story](https://www.pivotaltracker.com/story/show/161632713)
  - updated `cf marketplace` command to include a new `broker` column to prepare for a upcoming services-related feature which will allow services to have the same name as long as they are associated with different service brokers [story](https://www.pivotaltracker.com/story/show/162699756)
  [#]## Bugs
  - fix for `cf enable-service-access -p plan` whereby when we refactored the code in CLI `v6.41.0` it created service plan visibilities as part of a subsequent run of the command (the unrefactored code skipped creating the service plan visibilities); now the command will skip creating service plan visibilities as it did prior to the refactor [story](https://www.pivotaltracker.com/story/show/162747373)
  - updated the `cf rename-buildpack` help text which was missing reference to the `-s` stack flag [story](https://www.pivotaltracker.com/story/show/162428661)
  - updated help text for when users use `brew search cloudfoundry-cli` [story](https://www.pivotaltracker.com/story/show/161770940)
  - now when you run `cf service service-instance` for a route service, the route service url appears in the key value table [story](https://www.pivotaltracker.com/story/show/162498211)</changelog>
  <changelog author="thardeck@suse.com" date="1550750400">- update to version 6.43.0 (bsc#1132242)
  [#]## Enhancements
  - `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://www.pivotaltracker.com/story/show/130060949)
  - Improves `cf delete-orphaned-routes` such that it uses a different endpoint, reducing the chance of a race condition when two users are simultaneously deleting orphaned routes and associating routes with applications [story](https://www.pivotaltracker.com/story/show/163156064)
  - we've improved the speed of cf services - it now hits a single endpoint instead of making individual API calls
  [#]## Bug Fixes
  [#]### Security
  - Fixes issue with running cf login in verbose mode whereby passwords which contains regex were not completely redacted
  - Fixes issue whilst running commands in verbose mode refresh tokens were not completely redacted
  [#]## Other Bug Fixes
  - Updates help text for cf curlstory
  - Now refresh tokens work properly whilst using cf curl with V3 CC API endpoints story
  - Fixes performance degradation for cf services story
  - cf delete-service requires that you are targeting a space story
  - cf enable-service access for a service in an org will succeed if you have already enabled access for that service in that org story</changelog>
</package>
<package pkgid="328a8e1d73e58a856b7d5a5036786d9510973eca3892d296779e18b1120b47d1" name="cgal" arch="src">
  <version epoch="0" ver="4.12.2" rel="lp150.2.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1401796800">- update to 4.4, see http://www.cgal.org/releases.html#release4.4
- packaging : remove libcgal%soname as main package
- cgal is dumb empty package
- libcgalsoname contain only library
- cgal-demo-examples-devel contain all demo and example
- cgal-doc contain the whole documentation
- Fix &amp; cleanup Licence as specified in sources
- Make it build for SLE with exception for noarch.</changelog>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 4.5.1,http://www.cgal.org/releases.html#release4.5.1
- Bump sover to 10.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- Remove sha256sum.txt
- Update to 4.5.2
  * Fix a bug that prevented the compilation with recent versions
    of Boost (&gt;=1.56) when explicit conversions operators
    (from C++11) are supported. That prevented the compilation with
    Microsoft Visual Studio 2013.
  * 3D Convex Hulls: Fix a non-robust predicate bug that was
    showing up when input points where lexicographically sorted.
  * 3D Mesh Generation: Fix a bug in the sliver perturbation
    optimization method. It could create some holes on the
    surface of the mesh.</changelog>
  <changelog author="mpluskal@suse.com" date="1425124801">- Remove conditionals and use only cmake macros for building</changelog>
  <changelog author="adrian@suse.de" date="1439985600">- Update to 4.6.1
  * details can be found in CHANGES file</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Fix Source URLs.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 4.6.3
  * details can be found in CHANGES file</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 4.7
  * switch to qt5
  * details can be found in CHANGES file
- Use github for download urls</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1448193600">- fixed build for SLE-12 and some earlier releases</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Redo description and RPM groups
- Rename %_soname to %_sover to better reflect its use</changelog>
  <changelog author="mvetter@suse.com" date="1506427200">- Update to 4.11
  * details can be found in CHANGES file</changelog>
  <changelog author="mvetter@suse.com" date="1506513600">- Remove boost conditionals. They are handled in prj conf.</changelog>
  <changelog author="mvetter@suse.com" date="1506513601">- boo#1060631: Add cgal-4.11-opengl-es-arm.patch
  On armv7 Qt uses OpenGL ES headers.
  cgal included GL/gl.h desktop header, but they cannot be mixed.</changelog>
  <changelog author="mvetter@suse.com" date="1506513602">- Always use Qt5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1512648000">- remove in spec the Requires: qt-devel that is Qt4 related</changelog>
  <changelog author="mvetter@suse.com" date="1519732800">- Update to 4.11.1:
  * Bug fix release
    Please see https://github.com/CGAL/cgal/milestone/28?closed=1
  for the full list of fixed bugs</changelog>
  <changelog author="mvetter@suse.com" date="1524744000">- Remove cgal-4.11-opengl-es-arm.patch: upstreamed
- Update to 4.12:
  * New 2D Movable Separability of Sets
  * Classification: algorithm that classifies a data set into a
    user-defined set of labels
  * Removed Kinetic Data Structures
  * See https://www.cgal.org/2018/04/25/cgal412/ for a complete
    list of changes</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Use %setup logic to extract supplementary source archives.</changelog>
  <changelog author="mvetter@suse.com" date="1554724800">- bsc#1131859: Update to bugfix release 4.12.2:
  See: https://github.com/CGAL/cgal/milestone/37?closed=1 and
  https://github.com/CGAL/cgal/milestone/33?closed=1</changelog>
</package>
<package pkgid="8c639923bca4a91418484f13b53e2ac62b43bb35608f235aa07cbb0ab2a481b9" name="cgal-demo-examples-devel" arch="noarch">
  <version epoch="0" ver="4.12.2" rel="lp150.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 4.5.1,http://www.cgal.org/releases.html#release4.5.1
- Bump sover to 10.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- Remove sha256sum.txt
- Update to 4.5.2
  * Fix a bug that prevented the compilation with recent versions
    of Boost (&gt;=1.56) when explicit conversions operators
    (from C++11) are supported. That prevented the compilation with
    Microsoft Visual Studio 2013.
  * 3D Convex Hulls: Fix a non-robust predicate bug that was
    showing up when input points where lexicographically sorted.
  * 3D Mesh Generation: Fix a bug in the sliver perturbation
    optimization method. It could create some holes on the
    surface of the mesh.</changelog>
  <changelog author="mpluskal@suse.com" date="1425124801">- Remove conditionals and use only cmake macros for building</changelog>
  <changelog author="adrian@suse.de" date="1439985600">- Update to 4.6.1
  * details can be found in CHANGES file</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Fix Source URLs.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 4.6.3
  * details can be found in CHANGES file</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 4.7
  * switch to qt5
  * details can be found in CHANGES file
- Use github for download urls</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1448193600">- fixed build for SLE-12 and some earlier releases</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Redo description and RPM groups
- Rename %_soname to %_sover to better reflect its use</changelog>
  <changelog author="mvetter@suse.com" date="1506427200">- Update to 4.11
  * details can be found in CHANGES file</changelog>
  <changelog author="mvetter@suse.com" date="1506513600">- Remove boost conditionals. They are handled in prj conf.</changelog>
  <changelog author="mvetter@suse.com" date="1506513601">- boo#1060631: Add cgal-4.11-opengl-es-arm.patch
  On armv7 Qt uses OpenGL ES headers.
  cgal included GL/gl.h desktop header, but they cannot be mixed.</changelog>
  <changelog author="mvetter@suse.com" date="1506513602">- Always use Qt5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1512648000">- remove in spec the Requires: qt-devel that is Qt4 related</changelog>
  <changelog author="mvetter@suse.com" date="1519732800">- Update to 4.11.1:
  * Bug fix release
    Please see https://github.com/CGAL/cgal/milestone/28?closed=1
  for the full list of fixed bugs</changelog>
  <changelog author="mvetter@suse.com" date="1524744000">- Remove cgal-4.11-opengl-es-arm.patch: upstreamed
- Update to 4.12:
  * New 2D Movable Separability of Sets
  * Classification: algorithm that classifies a data set into a
    user-defined set of labels
  * Removed Kinetic Data Structures
  * See https://www.cgal.org/2018/04/25/cgal412/ for a complete
    list of changes</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Use %setup logic to extract supplementary source archives.</changelog>
  <changelog author="mvetter@suse.com" date="1554724800">- bsc#1131859: Update to bugfix release 4.12.2:
  See: https://github.com/CGAL/cgal/milestone/37?closed=1 and
  https://github.com/CGAL/cgal/milestone/33?closed=1</changelog>
</package>
<package pkgid="5799579ef86633051c3477d97013e51ec72b3b2af425a964d74bc1aa32d1d4ad" name="cgal-devel" arch="x86_64">
  <version epoch="0" ver="4.12.2" rel="lp150.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 4.5.1,http://www.cgal.org/releases.html#release4.5.1
- Bump sover to 10.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- Remove sha256sum.txt
- Update to 4.5.2
  * Fix a bug that prevented the compilation with recent versions
    of Boost (&gt;=1.56) when explicit conversions operators
    (from C++11) are supported. That prevented the compilation with
    Microsoft Visual Studio 2013.
  * 3D Convex Hulls: Fix a non-robust predicate bug that was
    showing up when input points where lexicographically sorted.
  * 3D Mesh Generation: Fix a bug in the sliver perturbation
    optimization method. It could create some holes on the
    surface of the mesh.</changelog>
  <changelog author="mpluskal@suse.com" date="1425124801">- Remove conditionals and use only cmake macros for building</changelog>
  <changelog author="adrian@suse.de" date="1439985600">- Update to 4.6.1
  * details can be found in CHANGES file</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Fix Source URLs.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 4.6.3
  * details can be found in CHANGES file</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 4.7
  * switch to qt5
  * details can be found in CHANGES file
- Use github for download urls</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1448193600">- fixed build for SLE-12 and some earlier releases</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Redo description and RPM groups
- Rename %_soname to %_sover to better reflect its use</changelog>
  <changelog author="mvetter@suse.com" date="1506427200">- Update to 4.11
  * details can be found in CHANGES file</changelog>
  <changelog author="mvetter@suse.com" date="1506513600">- Remove boost conditionals. They are handled in prj conf.</changelog>
  <changelog author="mvetter@suse.com" date="1506513601">- boo#1060631: Add cgal-4.11-opengl-es-arm.patch
  On armv7 Qt uses OpenGL ES headers.
  cgal included GL/gl.h desktop header, but they cannot be mixed.</changelog>
  <changelog author="mvetter@suse.com" date="1506513602">- Always use Qt5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1512648000">- remove in spec the Requires: qt-devel that is Qt4 related</changelog>
  <changelog author="mvetter@suse.com" date="1519732800">- Update to 4.11.1:
  * Bug fix release
    Please see https://github.com/CGAL/cgal/milestone/28?closed=1
  for the full list of fixed bugs</changelog>
  <changelog author="mvetter@suse.com" date="1524744000">- Remove cgal-4.11-opengl-es-arm.patch: upstreamed
- Update to 4.12:
  * New 2D Movable Separability of Sets
  * Classification: algorithm that classifies a data set into a
    user-defined set of labels
  * Removed Kinetic Data Structures
  * See https://www.cgal.org/2018/04/25/cgal412/ for a complete
    list of changes</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Use %setup logic to extract supplementary source archives.</changelog>
  <changelog author="mvetter@suse.com" date="1554724800">- bsc#1131859: Update to bugfix release 4.12.2:
  See: https://github.com/CGAL/cgal/milestone/37?closed=1 and
  https://github.com/CGAL/cgal/milestone/33?closed=1</changelog>
</package>
<package pkgid="3c670355e085f95cea2130f94b8543dd22dff7f41794a78f8e497e2c50644dca" name="cgal-doc" arch="noarch">
  <version epoch="0" ver="4.12.2" rel="lp150.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 4.5.1,http://www.cgal.org/releases.html#release4.5.1
- Bump sover to 10.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- Remove sha256sum.txt
- Update to 4.5.2
  * Fix a bug that prevented the compilation with recent versions
    of Boost (&gt;=1.56) when explicit conversions operators
    (from C++11) are supported. That prevented the compilation with
    Microsoft Visual Studio 2013.
  * 3D Convex Hulls: Fix a non-robust predicate bug that was
    showing up when input points where lexicographically sorted.
  * 3D Mesh Generation: Fix a bug in the sliver perturbation
    optimization method. It could create some holes on the
    surface of the mesh.</changelog>
  <changelog author="mpluskal@suse.com" date="1425124801">- Remove conditionals and use only cmake macros for building</changelog>
  <changelog author="adrian@suse.de" date="1439985600">- Update to 4.6.1
  * details can be found in CHANGES file</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Fix Source URLs.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 4.6.3
  * details can be found in CHANGES file</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 4.7
  * switch to qt5
  * details can be found in CHANGES file
- Use github for download urls</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1448193600">- fixed build for SLE-12 and some earlier releases</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Redo description and RPM groups
- Rename %_soname to %_sover to better reflect its use</changelog>
  <changelog author="mvetter@suse.com" date="1506427200">- Update to 4.11
  * details can be found in CHANGES file</changelog>
  <changelog author="mvetter@suse.com" date="1506513600">- Remove boost conditionals. They are handled in prj conf.</changelog>
  <changelog author="mvetter@suse.com" date="1506513601">- boo#1060631: Add cgal-4.11-opengl-es-arm.patch
  On armv7 Qt uses OpenGL ES headers.
  cgal included GL/gl.h desktop header, but they cannot be mixed.</changelog>
  <changelog author="mvetter@suse.com" date="1506513602">- Always use Qt5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1512648000">- remove in spec the Requires: qt-devel that is Qt4 related</changelog>
  <changelog author="mvetter@suse.com" date="1519732800">- Update to 4.11.1:
  * Bug fix release
    Please see https://github.com/CGAL/cgal/milestone/28?closed=1
  for the full list of fixed bugs</changelog>
  <changelog author="mvetter@suse.com" date="1524744000">- Remove cgal-4.11-opengl-es-arm.patch: upstreamed
- Update to 4.12:
  * New 2D Movable Separability of Sets
  * Classification: algorithm that classifies a data set into a
    user-defined set of labels
  * Removed Kinetic Data Structures
  * See https://www.cgal.org/2018/04/25/cgal412/ for a complete
    list of changes</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Use %setup logic to extract supplementary source archives.</changelog>
  <changelog author="mvetter@suse.com" date="1554724800">- bsc#1131859: Update to bugfix release 4.12.2:
  See: https://github.com/CGAL/cgal/milestone/37?closed=1 and
  https://github.com/CGAL/cgal/milestone/33?closed=1</changelog>
</package>
<package pkgid="398e6d89a44d1772eed02597756b98f4462d79a8804cc10e67e4a8626f82e04d" name="cgit" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp150.2.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="cbe9b50e5f21ae0749f4729fd91854d3e95e914d6885d2e8756adfd94506f596" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="4b084b1e2d111820f7761a2d197ad62b03918e545dea33c4003624a12049df9e" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="6a645fdffffc2c47557a4c74deeb4c8cc9ef4c836df4415d7dfbdfd556903843" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="ff6069a124e03c566f7a2d8caad4dd9700d4b983cfadbe1e2a9640c40dd62df3" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="a27b3b6bd6ed53ab6bf043ce6766affefd543952f70eda86d4638c0973fee426" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="5cc75e37bebb2fc822da5111afb63c07ebff0f0ea106b837057eb1fb47b1c3d8" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.102" rel="lp150.2.23.2"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="bf798be4f5f50cd5de642a961ff8428d6dcb51d155dc60c7ff2408a58d6ae11c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.110" rel="lp150.2.26.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="e929d532d705b0f309ee5dc07c3ed4121f7ffc560798dc6eb8821f4da4a8e507" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="70.0.3538.67" rel="lp150.2.20.1"/>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
</package>
<package pkgid="e3b0810c29fa40c44784ce6ab1a26aa9a37c6fec41061d3af8fad60749a9a5e4" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="71.0.3578.80" rel="lp150.2.30.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520000">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
</package>
<package pkgid="97ff53398cc040646286a15617b716dd0b1ea0cc7686f477cf0c9cb047b9c19c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="lp150.2.33.1"/>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
</package>
<package pkgid="e206495615a6c5a4c99feac13bcf363eaf2e5b6bb5ccfe149e307c749ae06b31" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="lp150.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235201">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
</package>
<package pkgid="d6f332bef67b54669f0e743f7d6e9ce417cec952c5b5a0aae8facc4abab41223" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="72.0.3626.121" rel="lp150.2.46.1"/>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
</package>
<package pkgid="65d681da6f7a9825756208684f2bf72dc959ebfdaec94a9c440b846d0d64794f" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="72.0.3626.96" rel="lp150.2.41.1"/>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="1adc6ad52b63e3654a7824776cfd8ae81d1f8ca0e626208c9f459c22aebf69f0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="73.0.3683.75" rel="lp150.206.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950400">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
</package>
<package pkgid="7260e36feb471a245fce8934113c798724bf6d4a7954d78c6c032eb063591def" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="74.0.3729.108" rel="lp150.209.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
</package>
<package pkgid="101b2cfbe90fa024ea4b080e6074ce4e99b1470f970e9b17e94a886be59febd7" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp150.212.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="498e7e1c6faa1aa687d06c25e6ecbded9c1a1ee958899cd056b3c12a55e13a88" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp150.221.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="2090f16899bda0c6084ef1dd88bf53953cd8d609fd9bd66bc77d895bdbcfb17a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp150.215.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="b9f04f4bdab514adba369f788714bc4ad4f714c2e55804881734914a9ab3da53" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp150.218.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="e7a5db57caaf45f9345ab8afa556d89717b2efd0a4c2efd162baf05fdc4bef25" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.100" rel="lp150.229.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="584a57a8ba9aa7c65826a91363ab0ab84c0896bcb44d027f82cdb5a994876599" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.132" rel="lp150.234.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="89c3bd26b349459a95f2d7afcd7d125cf864cbc23bcdf5d5d28a8a8b950ac3df" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="76.0.3809.87" rel="lp150.224.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="c426fabee161a4fdb5da9294f75bc0f56fa9c668907329cb3dba16b5568d4d7c" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.120" rel="lp150.245.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="52aafbf8b1242d2b5738b9a4c06256eef310ded07a247cdb933ce2a8b69a8082" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.75" rel="lp150.239.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="8fc15ff2c858a2db62e09e9a03faaa0b697c6f4b003cf9a76b0d13b63c6bf0cb" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="77.0.3865.90" rel="lp150.242.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="8537ff873d81b6a4cf64d5e806538ac3fc8a9c2b28fd69d29db7aca5bf9f8ec1" name="chromium" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="38d016514be12a9fc00533c106f0e27d8848b8b3767b27318a015a2f70118519" name="chromium" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="09a6d98fcebe13447a6d4a0db898bcac9146bfab2d41f185cd49f1a50e97b879" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="b27627fb089ccfed64f9113f27a9f513a6884b5b58be597d0e1c4d74a667ab7a" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="73b0359c2068c4380d0edf55de8b19de873103c6fe9cc14746b9e3965b16d1e6" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="6503605872b724dc3824dcb2111bd52aaa542b18379e6a4a3adf7e580706c4b6" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.102" rel="lp150.2.23.2"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
</package>
<package pkgid="16b76489bec769e5a8afee4b0a3bc0baedd2574d83cc17087dd052be8d3fdc43" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.110" rel="lp150.2.26.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520002">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
</package>
<package pkgid="bcdace98d71cf77578b9de2021f4964ac975f0418544503fb5e67189f74477ef" name="chromium" arch="x86_64">
  <version epoch="0" ver="70.0.3538.67" rel="lp150.2.20.1"/>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
</package>
<package pkgid="8efe87f59c19d79d5caedf9cbca5c42a34dad2b4c5cb6398f7a20aa0ba7f5ac3" name="chromium" arch="x86_64">
  <version epoch="0" ver="71.0.3578.80" rel="lp150.2.30.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520000">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
</package>
<package pkgid="299bd8d949870b8abd3eb905c2175352cd7da7c0b1e40b6a69ca7de7be67e7aa" name="chromium" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="lp150.2.33.1"/>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
</package>
<package pkgid="43359bdb858a3acdfff7653586602dbfb049d690865d10989c6cc018d075ad65" name="chromium" arch="x86_64">
  <version epoch="0" ver="71.0.3578.98" rel="lp150.2.36.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235201">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
</package>
<package pkgid="a37e6415d18843d56c6ac26293c7d5631cc17b07dad47b1f99ac9a85be70be59" name="chromium" arch="x86_64">
  <version epoch="0" ver="72.0.3626.121" rel="lp150.2.46.1"/>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
</package>
<package pkgid="9900b1faf32cbb0a9a55ea7a1343fa8e7652fa6199e6e5c81d256fa6697f7d70" name="chromium" arch="x86_64">
  <version epoch="0" ver="72.0.3626.96" rel="lp150.2.41.1"/>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539777600">- Update to 70.0.3538.67 bsc#1112111:
  * CVE-2018-17462: Sandbox escape in AppCache
  * CVE-2018-17463: Remote code execution in V8
  * CVE to be assigned: Heap buffer overflow in Little CMS in PDFium
  * CVE-2018-17464: URL spoof in Omnibox
  * CVE-2018-17465: Use after free in V8
  * CVE-2018-17466: Memory corruption in Angle
  * CVE-2018-17467: URL spoof in Omnibox
  * CVE-2018-17468: Cross-origin URL disclosure in Blink
  * CVE-2018-17469: Heap buffer overflow in PDFium
  * CVE-2018-17470: Memory corruption in GPU Internals
  * CVE-2018-17471: Security UI occlusion in full screen mode
  * CVE-2018-17472: iframe sandbox escape on iOS
  * CVE-2018-17473: URL spoof in Omnibox
  * CVE-2018-17474: Use after free in Blink
  * CVE-2018-17475: URL spoof in Omnibox
  * CVE-2018-17476: Security UI occlusion in full screen mode
  * CVE-2018-5179: Lack of limits on update() in ServiceWorker
  * CVE-2018-17477: UI spoof in Extensions
- Added patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-pdfium-include.patch
  * chromium-system-libusb.patch
- Removed patches:
  * chromium-old-glibc.patch
  * chromium-vpx-aarch64.patch
- Updated patches:
  * chromium-gcc8-alignof.patch
  * chromium-non-void-return.patch
  * chromium-prop-codecs.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch
- Redo the vaapi patch to be default on as there are no reports of
  issues with it
- Use system libusb-1.0
- Use jumbo build to speed things up
- Use bundled harfbuzz because we need newer than latest release
- Disable gnome-keyring as it crashes the chromium quite often</changelog>
  <changelog author="astieger@suse.com" date="1539950400">- remove trigger word from spec that trips up legal-auto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950401">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
</package>
<package pkgid="2c429bf279b1fe2656341f12f68fb27313d3e45314bb1464598eb6bf790ccbd6" name="chromium" arch="src">
  <version epoch="0" ver="73.0.3683.75" rel="lp150.206.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950400">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
</package>
<package pkgid="c6caeac1b5935c97613e342c2cf8aed0bd821b4877387d1d268b0f9b8906dfc1" name="chromium" arch="x86_64">
  <version epoch="0" ver="73.0.3683.75" rel="lp150.206.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539950400">- Add back chromium-old-glibc.patch to make sure we build on 42.3
- Reduce the merge number on jumbo files to reduce memory usage bit</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540209600">- Add patch trying to get the pkg to build with libva 1.x releases:
  * chromium-libva1.patch
- Update chromium-old-glibc.patch to contain more tweaked locations</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540468800">- Update to 70.0.3538.77:
  * Few feature fixes only
- Do not meintion armv6 and armv7 in the constraints
- Update patch chromium-non-void-return.patch</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1541246400">- Remove noto-emoji-fonts recommends. noto-emoji-fonts has been
  inactive for a long time. noto-coloremoji-fonts is the current
  recommended emoji fonts from noto. And noto-emoji-fonts (monochrome)
  disables noto-coloremoji-fonts (colorful).</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Version update to 70.0.3538.102 bsc#1115537 CVE-2018-17478
  * CVE-2018-17478: Out of bounds memory access in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
</package>
<package pkgid="3eee7b686785528d64ae200d83a6ede00ada959be43804841347de425487b2a7" name="chromium" arch="src">
  <version epoch="0" ver="74.0.3729.108" rel="lp150.209.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
</package>
<package pkgid="930d3be4bb2c1c591361faa49c14d11b393b80c6be499533f2ae0455b66add48" name="chromium" arch="x86_64">
  <version epoch="0" ver="74.0.3729.108" rel="lp150.209.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542801600">- Version update to 70.0.3538.110 bsc#1116608:
  * CVE-2018-17479: Use-after-free in GPU</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Version update to 71.0.3578.80 bsc#1118529:
  - CVE-2018-17480: Out of bounds write in V8
  - CVE-2018-17481: Use after frees in PDFium
  - CVE-2018-18335: Heap buffer overflow in Skia
  - CVE-2018-18336: Use after free in PDFium
  - CVE-2018-18337: Use after free in Blink
  - CVE-2018-18338: Heap buffer overflow in Canvas
  - CVE-2018-18339: Use after free in WebAudio
  - CVE-2018-18340: Use after free in MediaRecorder
  - CVE-2018-18341: Heap buffer overflow in Blink
  - CVE-2018-18342: Out of bounds write in V8
  - CVE-2018-18343: Use after free in Skia
  - CVE-2018-18344: Inappropriate implementation in Extensions
  - Multiple issues in SQLite via WebSQL
  - CVE-2018-18345: Inappropriate implementation in Site Isolation
  - CVE-2018-18346: Incorrect security UI in Blink
  - CVE-2018-18347: Inappropriate implementation in Navigation
  - CVE-2018-18348: Inappropriate implementation in Omnibox
  - CVE-2018-18349: Insufficient policy enforcement in Blink
  - CVE-2018-18350: Insufficient policy enforcement in Blink
  - CVE-2018-18351: Insufficient policy enforcement in Navigation
  - CVE-2018-18352: Inappropriate implementation in Media
  - CVE-2018-18353: Inappropriate implementation in Network Authentication
  - CVE-2018-18354: Insufficient data validation in Shell Integration
  - CVE-2018-18355: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18356: Use after free in Skia
  - CVE-2018-18357: Insufficient policy enforcement in URL Formatter
  - CVE-2018-18358: Insufficient policy enforcement in Proxy.
  - CVE-2018-18359: Out of bounds read in V8
  - Inappropriate implementation in PDFium
  - Use after free in Extensions
  - Inappropriate implementation in Navigation
  - Insufficient policy enforcement in Navigation
  - Insufficient policy enforcement in URL Formatter
  - Various fixes from internal audits, fuzzing and other initiatives
- Updated/refreshed patches:
  * fix_building_widevinecdm_with_chromium.patch
  * chromium-vaapi.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-prop-codecs.patch
  * chromium-non-void-return.patch
- Removed patches:
  * chromium-gcc8-constexpr.patch
  * chromium-libva1.patch
  * chromium-pdfium-include.patch
  * chromium-warnings.patch
- Added patches:
  * chromium-initialize-list.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097601">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
</package>
<package pkgid="4154dfe2db7ec22f195447cf2a4b5ef3f16784e01143e6d5f320591eaf478d79" name="chromium" arch="src">
  <version epoch="0" ver="74.0.3729.157" rel="lp150.212.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="f8d1b83ac0805629327aab08bf2bc1175fea552deb4ca68133066ef61dd37f14" name="chromium" arch="x86_64">
  <version epoch="0" ver="74.0.3729.157" rel="lp150.212.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544097600">- Add patch to build on Leap 42.x:
  * chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Increase %limit_build value to avoid OOM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1544702400">- Version update to 71.0.3578.98 bsc#1119364:
  * CVE-2018-17481: Use after free in PDFium
- Redo chromium-old-libva.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544788800">- Update %arm build, but keep it disabled for now, as ld requires
  lots of RAM</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
</package>
<package pkgid="c35dee751eb60a86e48286f985e4be93cdf6464c349c2855ebd26df047e73719" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.142" rel="lp150.221.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="57733be218634524356b7fa609af77d4ba8d09ecb9b2a70cbe0cd862cb047725" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.142" rel="lp150.221.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
</package>
<package pkgid="8c84289ae8f46592477bdab54e510dba8fb83c7519da3aaa88f3910dafbe9ef1" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.80" rel="lp150.215.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="042bb6db5f7a929d69f3cf6f54ba290834869ca5a7d5c43ee14d2919d74dd360" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.80" rel="lp150.215.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546430400">- Tweak fix_building_widevinecdm_with_chromium.patch to make it
  work again bsc#1120429</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
</package>
<package pkgid="ed6ec193fed5e9b989c2b755536ec1cb66f445a46ea3d58b75c0420f39c09d0c" name="chromium" arch="src">
  <version epoch="0" ver="75.0.3770.90" rel="lp150.218.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="5d6221f0f09cd39971585a8ae4d4da50dd5e7eeb78dcf55577935ade0b342979" name="chromium" arch="x86_64">
  <version epoch="0" ver="75.0.3770.90" rel="lp150.218.4"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1548849600">- Update to 72.0.3626.81 bsc#1123641:
  * CVE-2019-5754: Inappropriate implementation in QUIC Networking. Reported by Klzgrad on 2018-12-12
  * CVE-2019-5782:  Inappropriate implementation in V8. Reported by Qixun Zhao of Qihoo 360 Vulcan Team via Tianfu Cup on 2018-11-16
  * CVE-2019-5755: Inappropriate implementation in V8. Reported by Jay Bosamiya on 2018-12-10
  * CVE-2019-5756: Use after free in PDFium. Reported by Anonymous on 2018-10-14
  * CVE-2019-5757: Type Confusion in SVG. Reported by Alexandru Pitis, Microsoft Browser Vulnerability Research on 2018-12-15
  * CVE-2019-5758: Use after free in Blink. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-11
  * CVE-2019-5759: Use after free in HTML select elements. Reported by Almog Benin on 2018-12-05
  * CVE-2019-5760: Use after free in WebRTC. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-12-05
  * CVE-2019-5761: Use after free in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-13
  * CVE-2019-5762: Use after free in PDFium. Reported by Anonymous on 2018-10-31
  * CVE-2019-5763: Insufficient validation of untrusted input in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-12-13
  * CVE-2019-5764: Use after free in WebRTC. Reported by Eyal Itkin from Check Point Software Technologies on 2018-12-09
  * CVE-2019-5765: Insufficient policy enforcement in the browser. Reported by Sergey Toshin (@bagipro) on 2019-01-16
  * CVE-2019-5766: Insufficient policy enforcement in Canvas. Reported by David Erceg on 2018-11-20
  * CVE-2019-5767: Incorrect security UI in WebAPKs. Reported by Haoran Lu, Yifan Zhang, Luyi Xing, and Xiaojing Liao from Indiana University Bloomington on 2018-11-06
  * CVE-2019-5768: Insufficient policy enforcement in DevTools. Reported by Rob Wu on 2018-01-24
  * CVE-2019-5769: Insufficient validation of untrusted input in Blink. Reported by Guy Eshel on 2018-12-11
  * CVE-2019-5770: Heap buffer overflow in WebGL. Reported by  hemidallt@ on 2018-11-27
  * CVE-2019-5771: Heap buffer overflow in SwiftShader. Reported by Zhe Jin?????Luyao Liu(???) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-11-12
  * CVE-2019-5772: Use after free in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-11-26
  * CVE-2019-5773: Insufficient data validation in IndexedDB. Reported by Yongke Wang of Tencent's Xuanwu Lab (xlab.tencent.com) on 2018-12-24
  * CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. Reported by Junghwan Kang (ultract) and Juno Im on 2018-11-11
  * CVE-2019-5775: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
  * CVE-2019-5776: Insufficient policy enforcement in Omnibox. Reported by Lnyas Zhang on 2018-07-14
  * CVE-2019-5777: Insufficient policy enforcement in Omnibox. Reported by Khalil Zhani on 2018-06-04
  * CVE-2019-5778: Insufficient policy enforcement in Extensions. Reported by David Erceg on 2019-01-02
  * CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. Reported by David Erceg on 2018-11-11
  * CVE-2019-5780: Insufficient policy enforcement. Reported by Andreas Hegenberg (folivora.AI GmbH) on 2018-10-03
  * CVE-2019-5781: Insufficient policy enforcement in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-10-18
- Added patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-fix_swiftshader.patch
  * chromium-webrtc-includes.patch
- Obsoleted patches:
  * chromium-gcc8-alignof.patch
  * chromium-initialize-list.patch
- Updated patches:
  * chromium-dma-buf.patch
  * chromium-non-void-return.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
- Try to reduce constraints to avoid being so much just in
  scheduled state</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1549886400">- Provide web_browser so chromium can be installed instead of firefox.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1549886401">- Update to 72.0.3626.96 bsc#1124936:
  * CVE-2019-5784: Inappropriate implementation in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1550664000">- Update to 72.0.3626.109:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551096000">- Update to 72.0.3626.119:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551528000">- Update to 72.0.3626.121:
  * fixes bsc#1127602 CVE-2019-5786</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1551700800">- Drop direct dependency on libgsm, we just need the devel</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1552478400">- Update to 73.0.3683.75 bsc#1129059:
  * CVE-2019-5787: Use after free in Canvas.
  * CVE-2019-5788: Use after free in FileAPI.
  * CVE-2019-5789: Use after free in WebMIDI.
  * CVE-2019-5790: Heap buffer overflow in V8.
  * CVE-2019-5791: Type confusion in V8.
  * CVE-2019-5792: Integer overflow in PDFium.
  * CVE-2019-5793: Excessive permissions for private API in Extensions.
  * CVE-2019-5794: Security UI spoofing.
  * CVE-2019-5795: Integer overflow in PDFium.
  * CVE-2019-5796: Race condition in Extensions.
  * CVE-2019-5797: Race condition in DOMStorage.
  * CVE-2019-5798: Out of bounds read in Skia.
  * CVE-2019-5799: CSP bypass with blob URL.
  * CVE-2019-5800: CSP bypass with blob URL.
  * CVE-2019-5801: Incorrect Omnibox display on iOS.
  * CVE-2019-5802: Security UI spoofing.
  * CVE-2019-5803: CSP bypass with Javascript URLs'.
  * CVE-2019-5804: Command line command injection on Windows.
- Update patches:
  * chromium-buildname.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch
  * chromium-old-libva.patch
  * chromium-vaapi.patch
- Removed patches:
  * chromium-crashpad-fix_aarch64.patch
  * chromium-webrtc-includes.patch
- Added patches:
  * chromium-gcc.patch
  * chromium-fix_crashpad.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553169600">- Update conditions to use system harfbuzz on TW+
- Require java during build
- Enable using pipewire when available
- Rebase chromium-vaapi.patch to match up the Fedora one</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
</package>
<package pkgid="c0463b44b2dc0363b2bb4e4e912bc32f9d99d1328b019efe4eb1d6ae03ba7179" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.100" rel="lp150.229.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="7967fb1d7b2ba5f6701e46d2573b03fbf2d8f015072c394197fea7f099a8813f" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.100" rel="lp150.229.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
</package>
<package pkgid="d6b8eb0d57d14c4351c5091a2eae875da7496e259f7d26be8eb25f97d8fd185d" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.132" rel="lp150.234.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="9a07ed01b71b6f4b3d918803ff4c8fd4cd97fc3de6aa98591b21d9f527350b80" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.132" rel="lp150.234.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
</package>
<package pkgid="ff75c3b809c1d7e63ed6396b9349e2cc4ed4cb728fa12cb1a04cd1584cd578e2" name="chromium" arch="src">
  <version epoch="0" ver="76.0.3809.87" rel="lp150.224.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="73c86c23ce8c69afadce5bba7b231d22353631b869675cc22ca758e03cb90621" name="chromium" arch="x86_64">
  <version epoch="0" ver="76.0.3809.87" rel="lp150.224.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515200">- Update to 73.0.3683.86:
  * Just feature fixes around
- Refresh patch:
  * chromium-non-void-return.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1553515201">- Add patch for pipewire build:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1554465600">- Update to 73.0.3686.103:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1556625600">- Update to 74.0.3729.108 bsc#1133313:
  * CVE-2019-5805: Use after free in PDFium
  * CVE-2019-5806: Integer overflow in Angle
  * CVE-2019-5807: Memory corruption in V8
  * CVE-2019-5808: Use after free in Blink
  * CVE-2019-5809: Use after free in Blink
  * CVE-2019-5810: User information disclosure in Autofill
  * CVE-2019-5811: CORS bypass in Blink
  * CVE-2019-5813: Out of bounds read in V8
  * CVE-2019-5814: CORS bypass in Blink
  * CVE-2019-5815: Heap buffer overflow in Blink
  * CVE-2019-5818: Uninitialized value in media reader
  * CVE-2019-5819: Incorrect escaping in developer tools
  * CVE-2019-5820: Integer overflow in PDFium
  * CVE-2019-5821: Integer overflow in PDFium
  * CVE-2019-5822: CORS bypass in download manager
  * CVE-2019-5823: Forced navigation from service worker
  * CVE-2019-5812: URL spoof in Omnibox on iOS
  * CVE-2019-5816: Exploit persistence extension on Android
  * CVE-2019-5817: Heap buffer overflow in Angle on Windows
- Add patches:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * old-libva.patch
  * quic.patch
- Remove patches:
  * chromium-73.0.3683.75-pipewire-cstring-fix.patch
  * chromium-fix_crashpad.patch
  * chromium-fix_swiftshader.patch
  * chromium-old-libva.patch
- Rebase patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-old-glibc.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1557230400">- Add patch to fix build on aarch64:
  * chromium-fix-crc32-for-aarch64.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558267200">- Update to 74.0.3729.157:
  * Various security fixes from internal audits, fuzzing and other
    initiatives
- includes security fixes from 74.0.3729.131 (boo#1134218):
  * CVE-2019-5827: Out-of-bounds access in SQLite
  * CVE-2019-5824: Parameter passing error in media player</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559044800">- Update to 74.0.3729.169:
  * Feature fixes update only</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
</package>
<package pkgid="2debaef863ba9595016fba0599292c538f706769ffde3ce58bf5bd2925d688cd" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.120" rel="lp150.245.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="7946064bb1e69de21fcb325d49b6b54e2f73cf195fa1a62c7ea05f13ea5119aa" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.120" rel="lp150.245.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1568894400">- Added patch chromium-vaapi-fix.patch again to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1570795200">- Update to 77.0.3865.120 bsc#1153660:
  * CVE-2019-13693: Use-after-free in IndexedDB
  * CVE-2019-13694: Use-after-free in WebRTC
  * CVE-2019-13695: Use-after-free in audio
  * CVE-2019-13696: Use-after-free in V8
  * CVE-2019-13697: Cross-origin size leak.
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="21254d88a81115778cc6b64f28919f2ca323bdcb65e86dd49a899684d5341459" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.75" rel="lp150.239.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="f0d9f722ec28c57d22bde47bd8bc47c8b00260fd3a2a1a5898101b3314ac74be" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.75" rel="lp150.239.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559908800">- Update to 75.0.3770.80 bsc#1137332:
  * CVE-2019-5828: Use after free in ServiceWorker
  * CVE-2019-5829: Use after free in Download Manager
  * CVE-2019-5830: Incorrectly credentialed requests in CORS
  * CVE-2019-5831: Incorrect map processing in V8
  * CVE-2019-5832: Incorrect CORS handling in XHR
  * CVE-2019-5833: Inconsistent security UI placemen
  * CVE-2019-5835: Out of bounds read in Swiftshader
  * CVE-2019-5836: Heap buffer overflow in Angle
  * CVE-2019-5837: Cross-origin resources size disclosure in Appcache
  * CVE-2019-5838: Overly permissive tab access in Extensions
  * CVE-2019-5839: Incorrect handling of certain code points in Blink
  * CVE-2019-5840: Popup blocker bypass
  * Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2019-5834: URL spoof in Omnibox on iOS
- Remove merged patchsets:
  * 00-basevalue.patch
  * 01-basevalue.patch
  * 02-basevalue.patch
  * 03-basevalue.patch
  * 04-basevalue.patch
  * 05-basevalue.patch
  * 06-basevalue.patch
  * chromium-fix-crc32-for-aarch64.patch
  * quic.patch
- Update patches:
  * chromium-gcc.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
</package>
<package pkgid="90049bbcb30ec6b3d37af23d7e93f2e67e3a66f7e39072807c2095b8f2b51424" name="chromium" arch="src">
  <version epoch="0" ver="77.0.3865.90" rel="lp150.242.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="dbc31f28cffa53eb81af2131511c18a1dfd3fd52dcbbf2ddca81deef493bb357" name="chromium" arch="x86_64">
  <version epoch="0" ver="77.0.3865.90" rel="lp150.242.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1559995200">- Update old-libva.patch to make sure we build on Leap 42.3</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560254400">- Fix build with kernel 5.2 and avoid runtime crash due to pure virtual
  declaration:
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560513600">- Update to 75.0.3770.90 bsc#1137332 bsc#1138287:
  * CVE-2019-5842: Use-after-free in Blink.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1560945600">- Update to 75.0.3770.100:
  * This is just feature fixes update</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1562068800">- Install manpage</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562068801">- Enable LTO for x86_64 - add gcc-enable-lto.patch and
  gcc-lto-rsp-clobber.patch patches.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563278400">- Update to 75.0.3770.142 bsc#1141649:
  * CVE-2019-5847: V8 sealed/frozen elements cause crash
  * CVE-2019-5848: Font sizes may expose sensitive information
- Add patch chromium-renderprocess-crash.patch to hopefully fix
  bsc#1141102</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1563364800">- Update gcc-enable-lto.patch to work on systems without the
  lto</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488000">- Drop patch chromium-non-void-return.patch and just pass
  a cxxflags disabler for the check</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564488001">- Do not use lto flags from prjconf, we need to set them using
  gn buildsystem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1564747200">- Update to 76.0.3809.87 bsc#1143492:
  * CVE-2019-5850: Use-after-free in offline page fetcher
  * CVE-2019-5860: Use-after-free in PDFium
  * CVE-2019-5853: Memory corruption in regexp length check
  * CVE-2019-5851: Use-after-poison in offline audio context
  * CVE-2019-5859: res: URIs can load alternative browsers
  * CVE-2019-5856: Insufficient checks on filesystem: URI permissions
  * CVE-2019-5855: Integer overflow in PDFium
  * CVE-2019-5865: Site isolation bypass from compromised renderer
  * CVE-2019-5858: Insufficient filtering of Open URL service parameters
  * CVE-2019-5864: Insufficient port filtering in CORS for extensions
  * CVE-2019-5862: AppCache not robust to compromised renderers
  * CVE-2019-5861: Click location incorrectly checked
  * CVE-2019-5857: Comparison of -0 and null yields crash
  * CVE-2019-5854: Integer overflow in PDFium text rendering
  * CVE-2019-5852: Object leak of utility functions
  * Various fixes from internal audits, fuzzing and other initiatives
  * Not affected:
    + CVE-2019-5863: Use-after-free in WebUSB on Windows
- Added patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
- Removed patches:
  * chromium-non-void-return.patch
  * chromium-75.0.3770.80-SIOCGSTAMP.patch
  * chromium-75.0.3770.80-pure-virtual-crash-fix.patch
  * chromium-gcc.patch
  * chromium-renderprocess-crash.patch
  * chromium-skia-system-fontconfig.patch
- Refreshed patches:
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-libusb_interrupt_event_handler.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565265600">- Add patches to fix few compilation issues:
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch bsc#1144625
- Remove not properly applying old-glibc patch:
  * chromium-old-glibc.patch
- Disable various gcc warnings as upstream does not care and it
  just bloats the buildlog (from debian)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1565611200">- Update to 76.0.3809.100 bsc#1145242:
  * CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction
  * CVE-2019-5867: Out-of-bounds read in V8</changelog>
  <changelog author="Jan Ritzerfeld &lt;suse@bugs.jan.ritzerfeld.org&gt;" date="1566216000">- Added patch chromium-vaapi-fix.patch to fix boo#1146219</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 76.0.3809.132 bsc#1149143 CVE-2019-5869:
  * CVE-2019-5869: Use-after-free in Blink
  * Various fixes from internal audits, fuzzing and other initiatives
- Refresh patch chromium-76-gcc-ambiguous-nodestructor.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289600">- Update to chromium 77.0.3865.75 bsc#1150425:
  * CVE-2019-5870: Use-after-free in media
  * CVE-2019-5871: Heap overflow in Skia
  * CVE-2019-5872: Use-after-free in Mojo
  * CVE-2019-5874: External URIs may trigger other browsers
  * CVE-2019-5875: URL bar spoof via download redirect
  * CVE-2019-5876: Use-after-free in media
  * CVE-2019-5877: Out-of-bounds access in V8
  * CVE-2019-5878: Use-after-free in V8
  * CVE-2019-5879: Extension can bypass same origin policy
  * CVE-2019-5880: SameSite cookie bypass
  * CVE-2019-5881: Arbitrary read in SwiftShader
  * CVE-2019-13659: URL spoof
  * CVE-2019-13660: Full screen notification overlap
  * CVE-2019-13661: Full screen notification spoof
  * CVE-2019-13662: CSP bypass
  * CVE-2019-13663: IDN spoof
  * CVE-2019-13664: CSRF bypass
  * CVE-2019-13665: Multiple file download protection bypass
  * CVE-2019-13666: Side channel using storage size estimate
  * CVE-2019-13667: URI bar spoof when using external app URIs
  * CVE-2019-13668: Global window leak via console
  * CVE-2019-13669: HTTP authentication spoof
  * CVE-2019-13670: V8 memory corruption in regex
  * CVE-2019-13671: Dialog box fails to show origin
  * CVE-2019-13673: Cross-origin information leak using devtools
  * CVE-2019-13674: IDN spoofing
  * CVE-2019-13675: Extensions can be disabled by trailing slash
  * CVE-2019-13676: Google URI shown for certificate warning
  * CVE-2019-13677: Chrome web store origin needs to be isolated
  * CVE-2019-13678: Download dialog spoofing
  * CVE-2019-13679: User gesture needed for printing
  * CVE-2019-13680: IP address spoofing to servers
  * CVE-2019-13681: Bypass on download restrictions
  * CVE-2019-13682: Site isolation bypass
  * CVE-2019-13683: Exceptions leaked by devtools
- Added patches:
  * chromium-77-blink-include.patch
  * chromium-77-fix-gn-gen.patch
  * chromium-77-gcc-abstract.patch
  * chromium-77-gcc-include.patch
  * chromium-77-system-hb.patch
  * chromium-unbundle-zlib.patch
- Removed merged patches:
  * chromium-76-gcc-ambiguous-nodestructor.patch
  * chromium-76-gcc-blink-constexpr.patch
  * chromium-76-gcc-blink-namespace1.patch
  * chromium-76-gcc-blink-namespace2.patch
  * chromium-76-gcc-gl-init.patch
  * chromium-76-gcc-include.patch
  * chromium-76-gcc-noexcept.patch
  * chromium-76-gcc-private.patch
  * chromium-76-gcc-pure-virtual.patch
  * chromium-76-gcc-uint32.patch
  * chromium-76-gcc-vulkan.patch
  * chromium-76-quiche.patch
  * chromium-angle-inline.patch
  * chromium-fix-char_traits.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-vaapi-fix.patch
  * gcc-lto-rsp-clobber.patch
  - Refreshed patches:
  * chromium-prop-codecs.patch
  * chromium-system-icu.patch
  * chromium-vaapi.patch
  * old-libva.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568289601">- Update patch old-libva.patch to build on openSUSE Leap 15.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635200">- Add patches from gentoo:
  * chromium-77-clang.patch
  * chromium-77-gcc-no-opt-safe-math.patch
  * chromium-77-no-cups.patch
  * chromium-77-std-string.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568635201">- Add patch from Fedora for cert transparency:
  * chromium-77.0.3865.75-certificate-transparency.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568808000">- update to chromium 77.0.3865.90 boo#1151229:
  * CVE-2019-13685: Use-after-free in UI
  * CVE-2019-13688: Use-after-free in media
  * CVE-2019-13687: Use-after-free in media
  * CVE-2019-13686: Use-after-free in offline pages</changelog>
</package>
<package pkgid="fa743c4ce82a5bd2dc384e2c4b214c804ade347b4be38969e6f8d5bd5034d70d" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp150.11.2"/>
  <changelog author="mpost@suse.com" date="1459857600">- Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
  the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
  and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
  libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
  of it anywhere in the build service.
- Modified the description to use some of the information from the
  chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
  will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
  0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
  point to the actual location of the service command, not the symlink
  in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun.</changelog>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
</package>
<package pkgid="bcffddaf404d559338e11e08d1befca2105f7c3e20a6f29e145422a23acfdf02" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp150.11.2"/>
  <changelog author="mpost@suse.com" date="1459857600">- Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
  the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
  and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
  libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
  of it anywhere in the build service.
- Modified the description to use some of the information from the
  chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
  will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
  0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
  point to the actual location of the service command, not the symlink
  in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun.</changelog>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
</package>
<package pkgid="38fee7bb79b29080039e06a3adf4fa0f59803428e16e6226ed7c75b64959d403" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="lp150.8.1"/>
  <changelog author="mpluskal@suse.com" date="1459166400">- Cleanup spec file with spec-cleaner
- Prepare for submission to Factory (see fate#319508)</changelog>
  <changelog author="mpost@suse.com" date="1459857600">- Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
  the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
  and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
  libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
  of it anywhere in the build service.
- Modified the description to use some of the information from the
  chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
  will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
  0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
  point to the actual location of the service command, not the symlink
  in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun.</changelog>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
</package>
<package pkgid="69bc51805e44502bcd3e3a364305ec749512437981c5f5135b3eb97f949ac2be" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp150.8.1"/>
  <changelog author="mpluskal@suse.com" date="1459166400">- Cleanup spec file with spec-cleaner
- Prepare for submission to Factory (see fate#319508)</changelog>
  <changelog author="mpost@suse.com" date="1459857600">- Removed %if for distributions that aren't building chrony.
- Renamed chrony-2.2_logrotate.patch to chrony-logrotate.patch since
  the patch is not particularly version-dependent.
- Added clknetsim for "make check" processing.
- Added Buildrequires for gcc-c++ and timezone for building clknetsim
  and running "make check".
- Changed Buildrequires and Requires to specify the minimum level of
  libseccomp needed to build on s390x and ppc64le.
- Removed "-Recommends: timedatex" since I couldn't find any instance
  of it anywhere in the build service.
- Modified the description to use some of the information from the
  chrony web site.
- Added chrony-include-termios.patch so that it will build on ppc64le.
- Added make-105-ntpauth-more-reliable.patch so that "make check"
  will not report a non-failure as a failure.
- Added --without-nss to ./configure to avoid "interruption code
  0x2003B in chronyd" errors.
- Changed the symbolic links for rcchronyd and rcchronyd-wait to
  point to the actual location of the service command, not the symlink
  in /sbin.
- Added reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun.</changelog>
  <changelog author="mpluskal@suse.com" date="1460116800">- Undo reference to chrony-dnssrv@.service in %pre, %preun, %post,
  and %postun as it would lead to error.
- Change conditions for libseccom, we can use any version on SLE-12
  x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1460116801">- Use correct license
- Drop hardcoded dependency on libseccomp, it is detected during
  build</changelog>
  <changelog author="meissner@suse.com" date="1460376000">- chrony-fix-open.patch: make sure _open and _close are initialized
  in open()/close() override, as libfreebl3 also calls from the
  the ELF constructor. FATE#319508
- enable mozilla-nss</changelog>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
</package>
<package pkgid="bbbb217075af2ce83b884b8e67371ccbce2d03a41dce9a0a2209dd1472deb444" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.8" rel="lp150.2.3.1"/>
  <changelog author="ddiss@suse.com" date="1409486400">- Remove mkinitrd files and spec file logic. Dracut offers cifs support via
  the corresponding module; (bnc#893575).</changelog>
  <changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
  <changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
</package>
<package pkgid="6d3610376efb1d32f3e6aed1d3c9be9cfdeafa834979c1ce9d125d2d00a0f801" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.8" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
  <changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
</package>
<package pkgid="6223dccb2f90de19e68761bb742cd609ff5fe9f0f35a56a7e2cb31c0fdbe9b73" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.8" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1413201600">- Remove dead code associated with cifstab file which is no longer used.</changelog>
  <changelog author="lmuelle@suse.com" date="1413201601">- Fix broken rccifs symbolic link.</changelog>
  <changelog author="lmuelle@suse.com" date="1414497600">- Add README.cifstab.migration to document the cifstab removal; (bnc#902947).</changelog>
  <changelog author="lmuelle@suse.com" date="1414497601">- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="bwiedemann@suse.com" date="1417608000">- Use rccifs -&gt; service symlink for proper status (bnc#908023).</changelog>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
</package>
<package pkgid="06346b78802813d62014bb669fabde9941fc4ea285b2c4e42637e8e8567a4b93" name="cinnamon" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="aa8c06f78905e9913d26fdd285599d641d4fbddb24511b8db0c6e2498cd07b57" name="cinnamon-gschemas" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="bc9be57dd24b1e522cc9902f1fa7cb6c27eab51d0c4179967f30bcc44db9417e" name="cinnamon-gschemas-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="675560efa73a1c663108c4bd61c40e86f4af4bc95ecca78afdfb9af1c0a9624f" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="28e19b878f6d89a735a9e02c47b13948f9110bddc94412bcfee0da37d9864e33" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="69853585af25cd1bf2e1bb9b8fbfdb623fc422fd44bfd77345c9d6998729a3f2" name="clamav" arch="src">
  <version epoch="0" ver="0.100.3" rel="lp150.2.10.1"/>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
</package>
<package pkgid="a9c66f54342898d76c6010c6b4441a83587a23d4b427b0a35c13ab065ef503cf" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp150.2.10.1"/>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
</package>
<package pkgid="7dd866dfe655a1bd6e4ab82fb96eb7c0e7134cf5035bfd5c96ed86674df0061a" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="c5188b0667b730fd6d101e2e73e51a706ded48009331421f691b9f51510ca277" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.2" rel="lp150.2.6.1"/>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
</package>
<package pkgid="40f67d6038bd780849d1aaee793508f300c6fbeb2e0ad70e84138e50a7eaedd2" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.3" rel="lp150.2.10.1"/>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553774400">- Update to version 0.100.3 (bsc#1130721):
  * CVE-2019-1787: An out-of-bounds heap read condition may occur
    when scanning PDF documents. The defect is a failure to
    correctly keep track of the number of bytes remaining in a
    buffer when indexing file data.
  * CVE-2019-1789: An out-of-bounds heap read condition may occur
    when scanning PE files (i.e. Windows EXE and DLL files) that
    have been packed using Aspack as a result of inadequate
    bound-checking.
  * CVE-2019-1788: An out-of-bounds heap write condition may occur
    when scanning OLE2 files such as Microsoft Office 97-2003
    documents. The invalid write happens when an invalid pointer
    is mistakenly used to initialize a 32bit integer to zero. This
    is likely to crash the application.</changelog>
</package>
<package pkgid="328d84f6a4109910cdfe45bb2b06ef9bcfaeb436cfaca82e03969c615540b1f7" name="clang" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="b4d02c2a3d24cdbf85b3a64190d4f48e94f2d29148d03d4440d3de32174d0a19" name="clang-checker" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="1c0be7efce6145336c83fbce83d570f94e2fc4040ca8e2dbce9df53453ec42f2" name="clang-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="d6db8d504d39fba695f2d6fc6d858f2979243fe569743f455e61dda4f41af922" name="clang5" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="e5fd86ca1aff9da4dcc4e648889caed5459f7e63615bafaaa9a8d98c4dc65758" name="clang5-checker" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="1497f9f8194ce816a392842cd1c03b4b3c37df0df0575721c10c8d7d7d88f905" name="clang5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="91e95b135758108aa4610487af2ad274d2509ec89f0f26b77d7690c90dee0505" name="clang5-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.7.3.1"/>
  <changelog author="msrb@suse.com" date="1512129600">- Use LLVM_OPTIMIZED_TABLEGEN to speed up build. (bnc#1064786)
- Fix files of lldb4 to work correctly with update-alternatives.
- Remove Conflicts clang(LLDB) from lldb4-devel - it does not
  exist. It would be provided automatically, but no such cmake file
  is installed.
- llvm-do-not-install-static-libraries.patch
  * Do not install static libraries instead of installing them and
    deleting after.
  * Reduces disk usage during build. (bnc#1064786)
- Do not build unnecessary parts during stage1.
  * Speeds up build a bit. (bnc#1064786)</changelog>
  <changelog author="msrb@suse.com" date="1512388800">- Switch to python3.
- Fix %check tests when used with python3.
  * Define LANG=C.UTF-8 when running the tests.
- Add explicit Provides/Conflicts to llvm5-devel,
  clang5-devel-static and lldb5-devel.
  * These are required to be validated by obs repo-checker.</changelog>
  <changelog author="msrb@suse.com" date="1512993600">- Rename python packages to follow naming conventions.
- Remove unnecessary dependencies on python3.
- Make opt-viewer not require python2.
  * opt-viewer-Do-not-require-python-2.patch</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Rename python3-lldb to python3-lldb5 so it can work with llvm
  meta package.</changelog>
  <changelog author="fcrozat@suse.com" date="1513944000">- Increase minimum memory and disk sizes required for building in
  _constraints.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Update to llvm 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.
- llvm-do-not-install-static-libraries.patch
  * Updated.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Delete intermediate files during build to reduce total disk usage
  (bnc#1074625)</changelog>
  <changelog author="dmueller@suse.com" date="1515412800">- disable debuginfo build for ARM as well</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check error for PowerPC as bypass
  https://bugs.llvm.org/show_bug.cgi?id=35871</changelog>
  <changelog author="msrb@suse.com" date="1515585601">- Place gold plugin to the right directory. (bnc#1073210)
  * It must be in /usr/lib/bfd-plugins on all architectures.
  * Remove llvm5-gold from baselibs.conf - nothing needs a 32bit
    version of it and it would now conflict with the 64bit one.
- Reduce _constraints requirements on 32bit architectures.
  * Since we had to disable debuginfo on them, they require much
    less.</changelog>
  <changelog author="msrb@suse.com" date="1516276800">- n_clang_allow_BUILD_SHARED_LIBRARY.patch
  * Allow buildling clang with BUILD_SHARED_LIBRARY while the rest
    is built with LLVM_LINK_LLVM_DYLIB. (bnc#1065464)
- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1517227200">- Reduce disk size requirement to 30GB in _constraints. We no
  longer need that much since we stopped building static libraries.</changelog>
  <changelog author="msrb@suse.com" date="1517313600">- Limit the amount of parallel link jobs, but no longer limit
  compile jobs. This should prevent running out of memory during
  linking while not longer slowing down compilation.
- Remove build dependency on procps</changelog>
  <changelog author="msrb@suse.com" date="1517400000">- Cleanup %ifarch conditions, remove targets unintentionally added
  to s390/s390x. (bnc#1078436)</changelog>
  <changelog author="msrb@suse.com" date="1518004800">- Use %optflags, except for FORTIFY_SOURCE which is not compatible
  with compiler-rt.
- Exclude static libraries differently.
  * Drop llvm-split-static-library-exports-into-their-own-export-file.diff
  * Drop clang-split-static-library-exports-into-their-own-export-file.diff
  * Update llvm-do-not-install-static-libraries.patch to not use
    EXCLUDE_FROM_ALL which is not available in cmake 3.5.
  - This fixes build on SLE12.
- Do not force gcc6 on OpenSUSE - fixes build.
- Reduce the amount of concurent link jobs by increasing their
  memory requirement - to reduce stalls in OBS.</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- Remove liblldb5 and lldb5-devel from baselibs.conf. They are only
  build for x86_64, so no point having them in baselibs.conf.</changelog>
  <changelog author="msrb@suse.com" date="1521201600">- Use alternatives for clang's bash autocomplete to prevent
  conflicts with future versions.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- llvm-build-tests-with-rtti.patch
  * Fixes build failure with gcc 8. (bnc#1087136)</changelog>
  <changelog author="msrb@suse.com" date="1525867200">- Do not build stage1 with debug info. It was accidentally added
  with the use of %optflags. This should fix out of memory errors
  on 32bit architectures and speed up build everywhere else.
  (bsc#1092697)</changelog>
  <changelog author="msrb@suse.com" date="1540468800">- llvm_build_tablegen_component_as_shared_library.patch
  * Build TableGen component as its own shared library because it
    is not included in the libLLVM library and is needed for ldc.
    (bsc#1111190)</changelog>
</package>
<package pkgid="4fd07d0c83b07794a96aab0a3fa7b653ce03f27f5389998d0324c648d59b7e1f" name="claws-mail" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="8ed0b5af53fe9c5aedfd3073214fea70af4b88deb7970b3cacaa0f39203f884d" name="claws-mail-devel" arch="x86_64">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="a5a8e2310f725632a521ddf7db55dd346d98eb03dbbc64cc718f9758403278bf" name="claws-mail-lang" arch="noarch">
  <version epoch="0" ver="3.16.0" rel="lp150.2.3.1"/>
  <changelog author="lchiquitto@suse.com" date="1413979200">- New build requirement: intltool.</changelog>
  <changelog author="lchiquitto@suse.com" date="1413979201">- Pass --enable-appdata to %configure.</changelog>
  <changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
  <changelog author="kieltux@gmail.com" date="1414843200">- Update to version 3.11.1:
  + Use 'gnutls_priority' hidden account preference for POP3 and
    STARTTLS connections, in addition to SMTP.
  + RSSyl plugin: Enable use of .netrc to store network
    credentials.
  + Remove dependency on intltool.
  + Remove appdata.
  + Updated translations: Norwegian Bokmål.
  + Bug fixed: claws#3306, claws#3308
- Removed intltool BuildRequires: no longer needed.
- Removed --enable-appdata from %configure (dropped in upstream).
- Add fix_categories_and_recover_keywords_in_desktop_file.patch
  from upstream git to fix categories and recover keywords in
  desktop file.
- Add recover_desktop_file_installation.patch from bugzilla
  (claws#3320) and recover_desktop_file_installation_part2.patch
  from upstream git to recover desktop file installation.</changelog>
  <changelog author="kieltux@gmail.com" date="1437652800">- Update to version 3.12.0:
  + New plugin: ManageSieve. Manage sieve filters on a server using
    the ManageSieve protocol.
  + Filtering/Processing:
  - Increase range for age matcher condition.
  - 'mark_as_spam' now only marks as spam, it does not do an
    additional move.
  + Compose window:
  - From line gets its own label with mnemonic.
  - More intuitive right-click behaviour in attachments list.
  + QuickSearch: 'Cc' added to the mixed search:
    From/To/Cc/Subject/Tag.
  + Folder list: Added 'Mark all read recursively' to context menu.
  + Support for Mac-cyrillic encoding.
  + IMAP: Support for SCRAM-SHA-1 authentication mechanism.
  + PGP plugins: Display validity of signatures.
  + Bogofilter plugin: 3rd spam handling option, 'Only mark as
    spam'.
  + RSSyl plugin: Per-feed support for HTTP basic auth.
  + Several layout improvements to preferences pages.
  + Updated user manual.
  + Updated man page.
  + Bugs fixed: claws#1769, claws#1901, claws#2435, claws#2577,
    claws#2601, claws#2965, claws#2981, claws#3211, claws#3321,
    claws#3345, claws#3349, claws#3351, claws#3354, claws#3364,
    claws#3365, claws#3380, claws#3389, claws#3407, claws#3419,
    claws#3421, claws#3432, claws#3438, claws#3466, deb#771360,
    deb#771737, deb#779824.
  + CVE fixed: CVE 2010-5109.
  + Misc bugs fixed:
  - Fix LDAP access using TLS protocol.
  - claws-mail.desktop installation.
  - Compose window Subject mnemonic.
  - Archiver plguin: compatibility with libarchive 2.8.x.
  - Remove draft when cancelling a message written with an
    external editor.
  - Remove superfluous dynamic link against libarchive.
  - Fix labels referring to 'SSL' instead of 'TLS'.
  - Allow single-click to select mailboxes in the mailbox order
    dialog.
  - tbird2claws.py: set encoding to UTF-8.
  + Updated translations.
- Dropped fix_categories_and_recover_keywords_in_desktop_file.patch
  as fixed in upstream
- Dropped recover_desktop_file_installation.patch: fixed upstream.
- Dropped recover_desktop_file_installation_part2.patch: fixed
  upstream.
- Set pkgconfig(libgdata) BuildRequires: conditionally for 1330 and
  newer as the needed version is an unstable branch. Due to this,
  conditionally pass --enable-gdata-plugin to configure. As a
  result, libgdata is not beeing built for any current version of
  openSUSE.</changelog>
  <changelog author="kieltux@gmail.com" date="1444910400">- update to version 3.13.0:
  + Preferences are now saved to disk immediately on pressing OK or
    Apply.
  + New preferences have been added for default sorting of the
    message lists. They are found in the 'Message list' frame of
    the Display/Summaries page of the general preferences. These
    options only apply to newly created folders.
  + The menu item 'Delete thread' has been moved to the Message
    menu. Previously clicking it would not delete the thread, but
    just move it to the Trash folder. Now it will delete the
    thread. An additional menu item has been added, 'Move thread to
    trash', which implements the original behaviour.
  + Compose window: By default it is no longer possible to add
    user-defined headers, with only those pre-defined in the drop
    down menus being possible. To restore the old behaviour, a new
    hidden preference has been added: 'type_any_header', setting
    this to 1 restores the old behaviour.
  + Automatic account selection is now also applied when you reply
    to one of your own messages, e.g. from the Sent folder.
  + Folder list: The Left and Right cursor keys now collapse or
    expand the currently selected folder tree item. The Left cursor
    key also moves the selection to parent folder, if current
    folder is within a collapsed tree.
  + Folder list: The Home and End keys now move the selection to
    the first folder and last folder in the tree.
  + Account Auto-configuration: when errors occur, a more detailed
    error message is shown.
  + GnuPG plugins:
  - An option has been added to specify the location of the GnuPG
    executable.
  - A new hidden preference has been added which limits the
    number of results returned when using your keyring for
    address auto-completion: 'autocompletion_limit'. The default
    value is 0, which means there is no limit, any other number
    will limit the results to that number.
  + Python plugin: Folder has been added to MessageInfo objects.
  + The GeoLocation plugin is no longer included.
  + The user manual has been updated.
  + The man page has been updated.
  + Misc bugs fixed:
  - make 'date' (not thread date) the default sort when
    clicking column header to switch to date sort.
  - Several memory leaks in RSSyl.
  - IPv6 now works on Windows, for connections not handled by
  libetpan.
  - GPG preferences initialization.
  - Possible crash when gpg is upgraded to gpg-v21
  - Save temporary file in mime temporary directory when using
  right-click/Open image instead of saving in current working
  directory.
  - Crash in address completion when matching group name.
  - Correct handling of RFC3339 timestamp format with second
  fraction.
  - Building on GLib older than 2.25.
  + Bugs fixed: claws#2115, claws#3209, claws#3253, claws#3263,
    claws#3296, claws#3352, claws#3454, claws#3473, claws#3475,
    claws#3483, claws#3507, claws#3516, claws#3524, claws#3531.
  + Updated translations.
- Dropped gdata-plugin requirements: gdata-plugin dropped upstream.</changelog>
  <changelog author="kieltux@gmail.com" date="1450699200">- update to version 3.13.1 (CVE-2015-8614, boo#959993):
  + When attaching files with no suffix, e.g. Makefile, the correct
    mime type is now found.
  + Added support for a whole range of extra TLDs.
  + '?' is used instead of '--&gt;' in the Message List when sender is
    yourself. (Only visible if the hidden pref 'enable_swap_from'
    is set to 0.)
  + An external editor can now be embedded in the Compose window.
    This depends upon the 'Text editor' option (/Configuration/
    Preferences/Message View/External Programs) having a suitable
    value, such as 'gvim -f --socketid %w %s'.
  + Address Book: address books can now be searched.
  + A hidden pref has been added, 'next_on_delete'. This controls
    the message selection when a message is deleted. A setting of
    '0' which cause the previous, older message to be selected,
    a setting of '1' will cause the next, newer message to be
    selected.
  + PDF Viewer plugin: Support for encrypted (password protected)
    PDFs.
  + RSSyl plugin: The feed preferences window appearance has been
    improved.
  + The --enable-new-addrbook configure option has been renamed to
  - -enable-alternate-addressbook.
  + Windows: Re-enabled regexps.
  + Updated man page.
  + Misc bugs fixed:
  - better fix for crash after broken pgp keyring update, and
    bogus EOF message on verifying sigs of missing keys
  - building on OpenBSD
  - libetpan version test
  - folder renaming for IMAP on Windows.
  + Bug fixes:
    claws#1959, claws#2490, claws#3151, claws#3375,
    claws#3557, claws#3454, claws#3480, claws#3513,
    claws#3541, claws#3559, claws#3561, claws#3562,
    claws#3563, claws#3566. deb#01375.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1453464000">- Update to version 3.13.2 (CVE-2015-8708):
  + Bugs fixed: claws#2358, claws#3557, claws#3584.
  + Updated translations.</changelog>
  <changelog author="kieltux@gmail.com" date="1470657600">- Update to version 3.14.0:
  + Passwords can now be secured with a Master Passphrase.
  + Passwords: The password storage method has changed. All
    passwords are now stored in a separate file,
    (~/.claws-mail/passwordstorerc),
    and use a stronger encryption than previously. Existing
    passwords are moved to the new file automatically, in the old
    format. The new format will be used whenever old passwords are
    changed or when a Master Passphrase is used. All new passwords
    are saved using the new format, irrespective of whether a
    Master Passphrase is used or not. Further information can be
    found here:
    http://www.claws-mail.org/doc/password_encryption.txt
  + Compose window: Removed the outer scrollbar from header area.
  + Message view: The HTML to plain text converter now indicates
    list items with a hyphen (-), adds a line break after ,
    and indents text within blockquotes.
  + Main window: Changed default /View/Show or hide/Menubar
    shortcut to Ctrl+F12.
  + SSL certificates list: Added automatic scrollbar.
  + Address book: Double-clicking datasources now opens the edit
    dialogue.
  + Forwarding: The external editor is now automatically used when
    forwarding as attachment, if the preference is set.
  + Preferences: Automatic mail checking can now be configured in
    hours, minutes and seconds.
  + Preferences: The 'next_on_delete' hidden preference now
    applies to trashing or moving, in addition to deleting, a
    message.
  + Command line: Added -geometry to set geometry for main window.
  + IMAP: Added SASL 'PLAIN' and 'LOGIN' authentication methods
    for accounts. Renamed the old plaintext 'LOGIN' to
    'plaintext'.
  + IMAP: The acccount preference, 'Move deleted mails to trash
    and expunge immediately' has been removed.
  + Notification plugin: Added 'Get mail from account...' to the
    SysTray module's menu.
  + Notification plugin: Focus the widget between
    iconify/deiconify events.
  + Tools: Added tools/cm-reparent.pl, which can be used to fix
    thread parenting for two or more messages.
  + Documentation: Updated man page and manual.
  + Updated translations.
  + Bug fixes:
    claws#2518, claws#2781, claws#3028, claws#3213,
    claws#3573, claws#3581, claws#3603, claws#3610,
    claws#3616, claws#3623, claws#3629, claws#3652,
    claws#3653, claws#3658</changelog>
  <changelog author="mrueckert@suse.de" date="1479297600">- Update to version 3.14.1:
  * 'hide_timezone', a new hidden preference that sets the timezone
    of date fields sent over the network to the unknown timezone
    value as specified in RFC 5322 3.3.  Default value is false
    (i.e., send available timezone information).
  * 'rewrite_first_from', a new hidden preference which  works
    around a limitation of some servers with 'overly-liberal
    parsers'. When this is turned on and the
    Content-Transfer-Encoding is set to 8bit or 7bit, in a message
    body starting with 'From ' the 'From ' will become '=46rom '
    (i,e, encoded form of 'F') and the Content- Transfer-Encoding
    will be changed to Quoted-Printable. When it is turned off no
    such modification will be made but it is very likely that an
    MTA will convert the 'From ' to '&gt;From '. See RFC 4155 for
    further details. Default value is '1', turned on.
  * Templates: it is now possible to attach a file, using
    '|attach_output{sub_expr}' or '|A{sub_expr}', 'sub_expr' is
    evaluated as a command-line to get the filename name from,
    using an absolute /path/to/filename.
  * IMAP mailboxes which show subscribed folders only are now
    indicated by a green folder icon.
  * The Icon Legend has had the missing folder icons added and
    also has an improved layout.
  * Drafted messages: Do not add Message-ID for draft, unless the
    message already has one. A Message-ID header is now only added
    when queuing a message, and any existing Message-ID and
    References headers in drafts, if there are any, are kept.
  * Disable hiding threads and messages in draft folders.
  * The /View/Go to/... actions now respect the 'Open message when
    selected' option.
  * In the UI 'POP' is used instead of 'POP3', 'IMAP' instead of
    'IMAP4', 'SSL/TLS' instead of 'SSL'.
  * GnuTLS: Enforce "strong enough" Diffie-Hellman prime even when
    using older versions of GnuTLS library.
    Since GnuTLS 3.1.7, this minimum size is dictated by the
    priority string, and currently (GnuTLS 3.3.0) the "safe-enough"
    value is 1008 bits. We set this minimum size explicitly for
    older GnuTLS versions.
    Users who are affected by this (their servers use DH prime
    smaller than 1008 bits) can override this by using a priority
    string starting with the keyword "LEGACY". However, this
    keyword only works with GnuTLS 3.3.0 or newer.
  * RSSyl plugin: Enable keeping old items by default.
  * vCalendar plugin: The ics file name is now used for the WebCal
    subscription folder name.
  * vCalendar plugin: Use hours/minutes for vcalendar alert time.
  * Notification plugin: Add support for unity/messaging menu.
  * PDF Viewer plugin: The icons are now themeable.
  * Updated manual in English and Spanish.
  * Updated translations: Brazilian Portuguese, Catalan, Czech,
    Danish, Dutch, Finnish, French, Hebrew, Indonesian, Italian,
    Norwegian Bokmål, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, and Turkish.
  * Bug fixes:
  - bug 2918, 'Notification Popup icon is hardcoded'
  - bug 3207, 'Claws segfaults when closing LDAP-enabled address
    book'
  - bug 3515, 'Ctrl-Shift-X opens multiple external editors'
  - bug 3638, 'GData Plugin fails after initial Google handshake'
  - bug 3665, 'Fix config script for macOS'
  - bug 3666, 'Typos in Turkish translation'
  - bug 3667, 'segfault in imap_session_authenticate'
  - bug 3675, 'RSSyl crash when opening Atom feed'
  - bug 3676, 'RSSyl crash when opening Atom feed with XML depth
    &gt;= 3'
  - bug 3678, 'Segfault when trying to add new account'
  - bug 3684, 'Socket error with POP3 using TLS client
    certificate'
  - bug 3697, 'Export to mbox' causes crash'
  - bug 3705, 'active account Mail Address corrupted when address
    in Message-ID is used'
  - bug 3711, 'Usage of (s)'
  - bug 3712, 'Name of the example domain in the translation'
  - fix non-resizeable Icon Legend dialogue
  - Fix a potential bug in vcalendar's libical
  - Fix potential crash in vcalendar's icalcomponent_vanew() on
    64-bit archs.
  - Fix regression: show simple text/calendar with plugin.
  - Fix crash in vcalendar passwords handling on prefs save.
  - Few miscellaneous fixes for RSSyl.
  - several memory leaks.
  - Don't check for encrypt() on FreeBSD.
  - Add OpenBSD CA cert path.
  - Do not process folder marks when just refreshing summaryview</changelog>
  <changelog author="olaf@aepfle.de" date="1487246400">- Use xdg-open (instead of gedit) as default mime_open_command
  use-xdg-open-as-default-mime_open_command.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1488456000">- Compface support requires the devel pkg, not just the main pkg</changelog>
  <changelog author="mrueckert@suse.de" date="1492776000">- update to 3.15.0
  * More granular options on when to open a selected message have
    been added. There are now several checkboxes on the
    Display/Summaries page of the Preferences which allow a greater
    flexibility.
  * Compose window: Show the total size of attachments on the
    Attachments tab.
  * Compose window: Bcc has been added to the headers drop-down
    list.
  * Folder list: Top-level folders can now be copied.  They are
    created as regular folders in the target mailbox.
  * Folder selection dialogue: Left/right keys collapse/expand
    rows.  Further keypress will move the cursor to parent or first
    child, respectively.
  * Menu items: 'Mark all unread [recursively]' has been added to
    the folder context menu, message list menu, and the main window
    menu and toolbar.
  * Toolbar actions: Mark, Unmark, Lock, Unlock, Mark [all] read,
    Mark [all] unread, Ignore Thread, Watch Thread, and Delete
    Duplicate Messages have been added to the main window toolbar's
    Actions list.
  * Account compose signature: The value of the signature file now
    takes a path relative to the user's home directory in addition
    to a full path.
  * Icon Themes: Support for SVG themes with icon scaling
    capabilities has been added. This requires libRSVG 2.40.5 or
    newer.
  * Hidden preferences: colours for specifying Tags, QuickSearch,
    and auto-filled header values have been added, both foreground
    and background. Respectively, tags_color, tags_bgcolor,
    qs_active_color, qs_active_bgcolor, qs_error_color,
    qs_error_bgcolor, default_header_color, and
    default_header_bgcolor.
  * Hidden preferences: warn_sending_many_recipients_num, if
    greater than zero, a warning dialogue is shown when the number
    of recipients exceeds the number given.
  * GData plugin: This plugin now requires libgdata version 0.17.2
    or newer.
  * TNEF parser plugin: This plugin now uses an external libytnef.
  * vCalendar plugin: This plugin now uses an external libical,
    version 2.0.0 or newer is required.
  * Mail Archiver plugin: - updated to support some of the
    compression formats up to libarchive 3.2.2
  * Several minor UI improvements.
  * Updated manual in English and Spanish.
  * Updated man page.
  * Updated translations: Brazilian Portuguese, Catalan, Danish,
    Dutch, French, German, Hungarian, Italian, Norwegian Bokmål,
    Russian, Spanish, Swedish, Traditional Chinese, and Turkish.
  * Bug fixes:
    o bug 3251, 'A translated In-Reply-To header is sent
    translated'
    o bug 3571, 'recipient list lost and truncated'
    o bug 3574, 'Template addressing'
    o bug 3582, 'Select folder dialogue does not tell what is
    selecting for'
    o bug 3673, 'Be more friendly instead of "configure: error:
    'encrypt'-function not found."'
    o bug 3734, 'undefined symbol error with flex-2.6.2'
    o bug 3740, 'Templates information dialog can't be closed
    with WM button'
    0 bug 3741, 'Deleting an account doesn't delete imapcache'
    o bug 3742, 'Attaching file with plus sign in filename via
    drag and drop doesn't work'
    o bug 3762, 'redirect fails'
    o bug 3764, 'Use external libical instead of the internal
    copy'
    o bug 3775, 'Error in string at src/mainwindow.c:4726?'
    o bug 3777, 'Weird news dates for some RSS feeds'
    o Debian bug 846170, 'incorrect IMAP UID handling'
    o Allow sending empty messages in Session (just \r\n).
    o fix some main window menu sensitivity issues
    o make up/down key navigation obey 'always_show_msg'
    o fix text selection when double-clicking quoted text and
    'collapse quoted text on double click' is turned off
    o fix 'Go to' moving off current, unopened msg, and dialogue
    to go to next folder
    o obey 'always_show_msg' on "no more [...] msgs. go to next
    folder?"
    o make Go to/[Next|Prev] sort order aware
    o don't ignore auto-account selection when forwarding on IMAP
    and NNTP accounts
    o on first run, use --alternate-config-dir (if set) on prefs
    migration. prevents useless creation of ~/.claws-mail
    directory
    o fix colouring of auto-filled headers
    o don't remove the To when changing account
    o Honour autosave_encrypted preference when using external
    editor.
    o Fix 'search folder' not working in some cases
    o Fix build on OSX.
    o fix memory leaks
    o when renaming folder, only update summaryview folder name
    if the current folder is being renamed
    o sensitise trayicon's 'get mail' and 'exit'
    o Handle timezones correctly in vCalendar.
    o Do not hardcode resolv.conf location
    o fix building with --disable-deprecated
- added BR to enable more features:
  - libical-devel (vcalendar plugin)
  - libgdata-devel (google data plugin)
  - librsvg-devel (scalabable icons support)
  - libcanberra-gtk{,3}-devel enhanced notifications support
- disable the tnef_parse as we are lacking the required library
- drop use-xdg-open-as-default-mime_open_command.patch:
  included upstream
- added claws-mail-3.15.0_libcanberra-gtk3.patch:
  allow finding the gtk3 version of the library if we build with
  gtk3</changelog>
  <changelog author="mrueckert@suse.de" date="1492776001">- add conditional handling for vcalendar plugins to only build on
  distros which still support it
- also prepared conditional build support for tnef</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of descriptions.
  Trim instructions and redundant mentions of license.</changelog>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1542801600">- Fix Reply to all replying to random people (claws#3889, boo#1116917)
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch
- Fix license warning</changelog>
</package>
<package pkgid="9c9afff538926835bc273358dc4e1c112ceb17a67bdca4a1ad4c08936fb9cd40" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp150.2.3.1"/>
  <changelog author="fisiu@opensuse.org" date="1382011200">- Update to 1.2.0:
  * Add support for indexing and playing music from Box, Dropbox, Skydrive,
    and Ubuntu One.
  * Add support for Subsonic.
  * Remote control support for Android.
  * Add a Playlist tab to the sidebar.  Starred playlists are saved in here
    when their tabs are closed.
  * Add configurable blur &amp; opacity to album art when used as a playlist
    background.
  * Support Opus where available.
  * Support .mka and .oga file extensions.
  * Parsing support for WPL playlists.
  * Sort providers by user preference.
  * Add year and bitrate to MPRIS2 messages.
  * Add "not equals" operator to fields in the smart playlist wizard.
  * Add an option to write ratings, play count and scores to files.
  * Add options to show the rating and score on the OSD.
  * Add support for POPM tags.
  * Add support for FMPS tags in Ogg, FLAC, MP4 and ASF files.
  * Compile the bundled Taglib with ASF, MP4 and Opus support.
  * Make it possible to cancel cover searches.
  * Add an option to resume playback on startup.
  * Add support for Performer and Grouping tags.
  * Add Radio GFM.
  * Add an Apply button to the settings dialog.
  * Make it possible to mark all episodes of a podcast as new/listened.
  * Add an option for fading in/out on pause/unpause.
  * Add stereo balance slider to the equalizer.
  * Add a --restart-or-previous commandline flag.
  * Allow files to be transcoded directly from the playlist.
  * Export downloaded album covers
  * Removed iDevice support - it doesn't work well with modern devices and
    libgpod isn't being updated to support them.
  * Many bugfixes
- Drop sites.js and ultimate_providers.xml: fixed upstream.
- Drop clementine-nowerror.patch: fixes upstream.
- Drop Add-a-setting-for-disabling-moodbar-generation.patch: fixed upstream.
- Drop clementine-libimobiledevice-fix.patch: iDevice support dropped upstream</changelog>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="8259dbd3b2b1ddb14e5fb058ab77d01747c781ca71629999fce6155500abf1e7" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp150.2.3.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
</package>
<package pkgid="a06df77a83f899c14eddaee8db106365272b182ccca72a60616ab2ff696ac33d" name="clementine" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp150.2.6.1"/>
  <changelog author="fisiu@opensuse.org" date="1385640000">- Update to 1.2.1:
  * Fix library download in the network remote.
  * Fix removing songs from playlist in the network remote.
  * Fix login failures with box.com.
  * Fix a typo that would prevent the Spotify downloader button from
    ever being shown.</changelog>
  <changelog author="tchvatal@suse.com" date="1395921600">- Version bump to 1.2.2:
  * upstream moved homepage
  * android remote support
  * Rename SkyDrive to OneDrive.
  * Don't include the user's IP address in the log (from the network remote
    settings dialog).
  * (Debian) Fix a bug with HTTPS logins to all cloud storage providers.
  * (Mac OS X) Fix a bug in the workaround for a weird font issue on 10.9.
  * (Mac OS X) Fix rendering of source icons on retina displays.
  * (Android Remote) Don't advertise songs that aren't available.
  * (Android Remote) Fix playing songs with special characters in filenames.
- Cleanup with spec-cleaner
- Remove support for &lt; 12.3 codepaths
- Remove unused patches:
  * clementine-1.1.1-fixboostparseerror.patch
  * clementine-desktop-fix.patch
- Add patches for build from upstream:
  * clementine-1.2.2-add-missing-header.patch
  * clementine-1.2.2-add-missing-include.patch
- Disable building with Werror, it is always bad idea to do so.
- Add dependency over udisks as it is used by build
- Use system projectM again as it seems to build fine.
- Bug workaround: disable DBUS interface as it fails to build for
  some non-aparent reason.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1396008000">- Added clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch,
  fixes build with newer/stricter CMake
- As per patch, re-enable DBus
- Drop udisks BuildRequires, not needed</changelog>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563969600">- Fix boo#1138261 with upstream patch:
  0001-Fix-crash-in-messagereply-6372.patch.
- Fix many memory leaks (see boo#1141444) with:
  delete_the_allocated_memory_in_respective_destructors.patch.</changelog>
</package>
<package pkgid="6ea8ff6fbb18a0fe4abc1a0d466cff8041b28b91f2e596df32daf5a916d211e7" name="clementine" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp150.2.6.1"/>
  <changelog author="seanpwatson@live.com" date="1413374400">- Update to 1.2.3
  * Fix compilation with GCC 4.9
  * Fix poor search performance with sqlite 3.8.
- Dropped clementine-1.2.2-add-missing-header.patch:Fixed upstream
- Dropped clementine-1.2.2-add-missing-include.patch:Fixed upstream</changelog>
  <changelog author="BM-2cTD873dxoyND9nkERkefY9xMV8Vy2ga2w@bitmessage.ch" date="1414929600">- check for 1230 in spec-file and do not use cmake-rpm-macro for 12.3</changelog>
  <changelog author="davejplater@gmail.com" date="1457179200">- Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix
  missing plugins message. See boo#904155</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460808000">- Update to version 1.3.0:
  * VK.com support.
  * Seafile support (server &gt;= 4.4.1).
  * Add Ampache compatibility (through Subsonic service).
  * Add new analyser "Rainbow Dash".
  * Answer to the ultimate question of life, the universe and
    everything.
  * Add "Psychedelic Colour" mode to all analysers.
  * Add left click to fullsize cover on playing widget.
  * Add m4b support for non-drm files.
  * Ignore English articles for library sorting.
  * Improve the organise dialog.
  * Add an option to warn before closing a playlist tab.
  * Add an option to disable the pause notification.
  * Add options to hide some internet services.
  * Add an option to disable inline song metadata editing.
  * Add "details below" and "no details" now playing widget
    options.
  * Add "no song details" now playing widget option.
  * Add icons to the extras menu.
  * Add a source icon for CD tracks.
  * Allow user to remove directories in the Files tab.
  * Add ability to remove unavailable items from playlist.
  * Add a button to the transcode dialog to add all files in a
    directory.
  * Make it impossible to collapse either side of the MainWindow
    splitter.
  * Add menu items for updating and doing a full rescan of
    Google Drive.
  * Increase Soundcloud cover image size.
  * Add the ability to pause Spotify tracks.
  * Add the ability to add or remove a Spotify track to a Spotify
    playlist through context menu.
  * Add Spotify tracks to Spotify playlists by drag and drop.
  * Add ability to get a link to share Spotify playlists and songs.
  * Improve handling of Spotify Top Tracks and compilations.
  * Add playlist actions to Spotify songs.
  * Add ability to automatically set podcast as listened after
    successfully sending it to a device.
  * Add ability to order podcasts by age.
  * Allow user to download multiple podcasts at the same time.
  * Add ability to cancel podcast downloads in progress.
  * Allow user to hide listened podcast episodes.
  * Huge improvement of the speed at startup.
  * Improve performance of mass rating changes.
  * Improve ripping performance.
  * Persistent cache for pixmaps. Huge improvement of the
    performance when scrolling the library for example.
  * Add AppData file for Clementine (for GNOME and KDE Software
    Centres).
  * Add iPod-like behaviour to previous button.
  * Add HipHop and Kuduro equalisers.
  * Remember current playlist between restarts.
  * IDv3 tag lyrics support.
  * Scroll to last played track when switching playlists.
  * Add stop after each song repeat mode.
  * Sort discs numerically when using Group by disc.
  * Add ability for sort by group and performer in the library view.
  * Parse the year of a disc from musicbrainz.
  * Add track intro mode.
  * Add ability to add a search term with tab and space in the
    smart playlist window.
  * Add love/ban (Last.fm) global shortcuts.
  * Add support for "original year" tags.
  * Send album artist to Last.fm with liblastfm &gt;= 1.0.0.
  * Add sample rate selection.
  * Add option to change the time step when seeking using the
    keyboard.
  * Playlist sort by album considers disc and track numbers.
  * Add options for double clicking song in the playlist.
  * Volume slider handles glow effect using system theme.
  * Library view sort line themable.
  * Show track durations in the CD ripper dialog.
  * Add ability to read REM DISC tag from Cue sheet.
  * Add ability to lock/unlock rating edit status.
  * Add the support of trackNum elements in XSPF.
  * Add "Smart Playlists" for Subsonic.
  * Add lyrics from AZLyrics.
  * Add lyrics from bollywoodlyrics.com.
  * Add lyrics from hindilyrics.net.
  * Add lyrics from lololyrics.com.
  * Add lyrics from Musixmatch.
  * Add lyrics from Tekstowo.pl.
  * Fix crash when click on a SoundCloud entry in internet tab.
  * Fix crash when marking podcast as listened.
  * Fix crash after pressing OK in the device properties window.
  * Fix stop after track which doesn't remove now playing.
  * Fix play bleeding into next track after auto stop.
  * Fix analyser framerate when mouseover play scrubber.
  * Fix issues with buffers sent to analyser.
  * Fix block analyser framerate.
  * Fix divide-by-zero possibility with small buffers at end of
    track.
  * Fix divide-by-zero possibility in moodbar.
  * Fix oversized album cover art.
  * Clean cover art from /tmp.
  * Fix the rendering of the little numbers in the boxes on queued
    items in the playlist.
  * Fix parsing of MusicBrainz data for discid.
  * Fix random artifacting on nyanalyser on startup.
  * Fix podcasts length issues (which caused issues with seeking
    for example).
  * Fix too small equaliser window size.
  * Fix labels which don't inherit system text colours in the edit
    tag dialog.
  * Fix the mess of the queue manager after playlist re-sort.
  * Fix for queue ordering issue in the playlist view when using
    Ctrl+D to dequeue a track.
  * Fix detection of parent-relative paths in playlist saving.
  * Fix path seperators issue when reading playlists.
  * Fix m3u parser issue when an artist's name has a hyphen.
  * Fix bug with percents when fetch the Jamendo catalogue.
  * Fix a little dropout when transition to next track.
  * Fix broken RockRadio.com for premium users.
  * Fix Subsonic login with + characters in the password.
  * Fix accents issue in when save playlist in xspf format.
  * Fix issues with some songs length thanks to Taglib. People with
    Taglib installed on their system will have to wait a new
    release of Taglib.
  * Fix moodbars not generating correctly.
  * Fix socket leak in moodbar.
  * Fix memory leak in tagreader.
  * Fix crash when trying to fingerprint but missing a plugin.
  * Fix infinite scan with Subsonic when the library is empty.
  * Fix performer tag for mpeg.
  * Fix parsing issues with "innovative" datetime formats.
  * Fix playback breaks in Spotify.
  * Fix memory leaks.
  * Fix crash when stopping song that is fading after pausing.
  * Fix crash when trying to download a track but there is no
    current one playing.
  * Fix default spinner gif image which shows white pixels around
    the image.
  * Fix setting album artist tag for FLAC files if it already
    exists.
  * Fix crash when Clementine lists the albums on Ampache.
  * Fix Last.fm scrobbling after seek.
  * Fix metadata not processed properly for some streams (Akamai).
  * Fix save state when the song was paused.
  * Fix some issues in Boom and Turbine analysers.
  * Fix song continuously rewinding when seeking using keyboard
    arrow keys.
  * Fix OSD re-posistioning which doesn't work on multiple monitors.
  * Fix Sonogram state while paused.
  * Fix crash when changing 'group by' while album covers are still
    loading.
  * Fix loss of valid data from an mp3 file when using the metadata
    editor.
  * Fix track slider twitching.
  * Fix Di.fm stations stuck when try to play them without Internet.
  * Make mood files hidden in NTFS.
  * Fix time labels blinking when playing streams without known
    duration.
  * Fix tag fetcher which applies incorrect tags for songs without
    any results.
  * Fix Clementine getting stuck when transitioning from a local
    track to a Spotify track with crossfade disabled.
  * Fix previous track when playing a dynamic random mix.
  * Fix fullscreen album covers for monitors in portrait mode.
  * Don't scale down star icons by 1 pixel.
  * Remove Ubuntu One support.
  * Remove Discogs support.
  * Remove GrooveShark support.
  * Remove Radio GFM support.
  * Update to GStreamer 1.x.
  * Don't compile vreen with link-time optimisations.
  * Use the system's sha2 library if it's available.
  * Remove libindicate-qt.
  * Remove internal copy of libechonest and add it as dependency.
  * Use libcrypto++ instead of QCA.
  * Update TagLib to 1.10.0.
  * Follow freedesktop.org specifications for icons.
  * Add a 128x128 version of the Clementine icon.
  * Remove internal copy of chromaprint and add it as
    dependency.
  * Don't depend on libplist or usbmuxd.
- Use built-in libmygpo-qt: Clementine needs currently
  not released libmygpo-qt 1.0.9+.
- Add sni-qt to recommendations.
- Remove
  clementine-1.2.2-dont-use-hacks-but-proper-sintax-for-non-wrapping-in-namespace.patch:
  merged upstream.
- Some spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460894400">- Add clementine-fix-sqlite.patch (fix startup with default
  SQLite 3.12+) from
  https://github.com/clementine-player/Clementine/issues/5297#issuecomment-196211148
- Add -fno-strict-aliasing to CXXFLAGS (strict-aliasing-punning).</changelog>
  <changelog author="olaf@aepfle.de" date="1460894401">- Remove unused ffmpeg-devel</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461153600">- Update to version 1.3.1:
  * Fix ratings being deleted when upgrading from older versions.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1466337600">- Added udisks2-support-for-devicemanager.patch from upstream</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1466769600">- Add clementine-1.3.1-fix-library-clicks.patch: fix a misbehaviour
  while clicking on tree items, from upstream commit b85d09c by
  Ivan Leontiev.</changelog>
  <changelog author="davejplater@gmail.com" date="1468238400">- Fix factory build for x86_64 with clementine-moodbar-fpic.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1491220800">- Fix gcc 7 build with clementine-gcc7fix.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1500984000">- Added clementine-1.3.1-support-chromaprint-1.4.patch to fix
  build</changelog>
  <changelog author="tchvatal@suse.com" date="1500984001">- Do not recommend fluendo as mp3 is enabled out of the box now in gst
- Remove if0 conditional that is never triggered</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- Do not build against Qt WebKit 4</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1562932800">- Fix boo#1103041 - VUL-0: CVE-2018-14332 with git patch:
  0001-Fix-MoodbarPipeline-crash-on-gstreamer-error.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563969600">- Fix boo#1138261 with upstream patch:
  0001-Fix-crash-in-messagereply-6372.patch.
- Fix many memory leaks (see boo#1141444) with:
  delete_the_allocated_memory_in_respective_destructors.patch.</changelog>
</package>
<package pkgid="8062f33884e46f03fbcccad6d107354eb20ea18561063c62662af7dcd23a9363" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.31.1" rel="lp150.11.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Format with spec-cleaner
- Use python3 to run the install/build script as python2 is being
  phased out
- State exclusivearch for all of ix86 and then specify we build as
  i686 which is bit more obvious</changelog>
  <changelog author="coolo@suse.com" date="1519041600">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519473600">- Update to 1.24.0
- Language changes:
  + External `sysv64` ffi is now available.
    eg. `extern "sysv64" fn foo () {}`
- Compiler changes:
  + rustc now uses 16 codegen units by default for release builds.
    For the fastest builds, utilize `codegen-units=1`.
- Libraries:
  + `str::find::&lt;char&gt;` now uses memchr. This should lead to a 10x
    improvement in performance in the majority of cases.
  + `time::{SystemTime, Instant}` now implement `Hash`.
  + impl `From&lt;bool&gt;` for `AtomicBool`
  + impl `From&lt;{CString, &amp;CStr}&gt;` for `{Arc&lt;CStr&gt;, Rc&lt;CStr&gt;}`
  + impl `From&lt;{OsString, &amp;OsStr}&gt;` for `{Arc&lt;OsStr&gt;, Rc&lt;OsStr&gt;}`
  + impl `From&lt;{PathBuf, &amp;Path}&gt;` for `{Arc&lt;Path&gt;, Rc&lt;Path&gt;}`
  + float::from_bits now just uses transmute. This provides some
    optimisations from LLVM.
  + Copied `AsciiExt` methods onto `char`
  + Remove `T: Sized` requirement on `ptr::is_null()`
  + impl `From&lt;RecvError&gt;` for `{TryRecvError, RecvTimeoutError}`
  + Optimised `f32::{min, max}` to generate more efficient x86
    assembly
  + `[u8]::contains` now uses memchr which provides a 3x speed
    improvement
- Compatibility Notes:
  + Floating point types `Debug` impl now always prints a decimal
    point.
  + `Ipv6Addr` now rejects superfluous `::`'s in IPv6 addresses
    This is in accordance with IETF RFC 4291 2.2.
  + Unwinding will no longer go past FFI boundaries, and will
    instead abort.
  + `Formatter::flags` method is now deprecated. The `sign_plus`,
    `sign_minus`, `alternate`, and `sign_aware_zero_pad` should be
    used instead.
  + Leading zeros in tuple struct members is now an error
  + `column!()` macro is one-based instead of zero-based
  + `fmt::Arguments` can no longer be shared across threads
  + Access to `#[repr(packed)]` struct fields is now unsafe
  + Cargo sets a different working directory for the compiler</changelog>
  <changelog author="mmanu84@outlook.de" date="1521720000">- Update to 1.24.1
  + Do not abort when unwinding through FFI
  + Make the error index generator work again
- Update Cargo to v0.25.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1525348800">- Patch disabled
  * update-config-guess.patch
- Update to 1.25.0
- Language changes:
  + Stabilised `#[repr(align(x))]`.[47006] [RFC 1358]
  + You can now use nested groups of imports.[47948]
    e.g. `use std::{fs::File, io::Read, path::{Path, PathBuf}};`
  + You can now have `|` at the start of a match arm.[47947] e.g.
- Compiler changes:
  + Upgraded to LLVM 6.[47828]
  + Added `-C lto=val` option.[47521]
  + Added `i586-unknown-linux-musl` target[47282]
- Library changes:
  + Impl Send for `process::Command` on Unix.[47760]
  + Impl PartialEq and Eq for `ParseCharError`.[47790]
  + `UnsafeCell::into_inner` is now safe.[47204]
  + Implement libstd for CloudABI.[47268]
  + `Float::{from_bits, to_bits}` is now available in libcore.[46931]
  + Implement `AsRef&lt;Path&gt;` for Component[46985]
  + Implemented `Write` for `Cursor&lt;&amp;mut Vec&lt;u8&gt;&gt;`[46830]
  + Moved `Duration` to libcore.[46666]
- Stabilized APIs
  + `Location::column`
  + `ptr::NonNull`
- Misc
  + Rust by example is now shipped with new releases[46196]
- Compatibility Notes:
  + Deprecated `net::lookup_host`.[47510]
  + `rustdoc` has switched to pulldown as the default markdown renderer.[47398]
  + The borrow checker was sometimes incorrectly permitting overlapping borrows
    around indexing operations (see [#47349][47349]). This has been fixed (which also
    enabled some correct code that used to cause errors (e.g. [#33903][33903] and [#46095][46095]).
  + Removed deprecated unstable attribute `#[simd]`.[47251]</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1526126400">- Update to version 1.26.0:
  + Language:
  - Closures now implement `Copy` and/or `Clone` if all captured
    variables implement either or both traits.
  - The inclusive range syntax is now stable.
  - Stablise `'_`. The underscore lifetime can be used anywhere
    where a lifetime can be elided.
  - `impl Trait` is now stable allowing you to have abstract
    types in returns or in function parameters.
  - Pattern matching will now automatically apply dereferences.
  - 128-bit integers in the form of `u128` and `i128` are now
    stable.
  - `main` can now return `Result&lt;(), E: Debug&gt;` in addition to
    `()`.
  - A lot of operations are now available in a const context.
  - Fixed entry slice patterns are now stable. e.g.
  + Compiler:
  - LLD is now used as the default linker for `wasm32-unknown-\
    unknown`.
  - Fixed exponential projection complexity on nested types.
    This can provide up to a ~12% reduction in compile times for
    certain crates.
  - Added the `--remap-path-prefix` option to rustc. Allowing you
    to remap path prefixes outputted by the compiler.
  + Libraries:
  - Implemented `From&lt;u16&gt; for usize &amp; From&lt;{u8, i16}&gt; for
    isize`.
  - Added hexadecimal formatting for integers with fmt::Debug.
  - Implemented `Default, Hash` for `cmp::Reverse`.
  - Optimized `str::repeat` being 8x faster in large cases.
  - `ascii::escape_default` is now available in libcore.
  - Trailing commas are now supported in std and core macros.
  - Implemented `Copy, Clone` for `cmp::Reverse`.
  - Implemented `Clone` for `char::{ToLowercase, ToUppercase}`.
  + Stabilized APIs: *const T::add,
  * const T::copy_to_nonoverlapping, *const T::copy_to,
  * const T::read_unaligned, *const T::read_volatile,
  * const T::read, *const T::sub, *const T::wrapping_add,
  * const T::wrapping_sub, *mut T::add, *mut T::copy_to,
  * mut T::copy_to_nonoverlapping, *mut T::read_unaligned,
  * mut T::read_volatile, *mut T::read, mut T::replace,
  * mut T::sub, *mut T::swap, *mut T::wrapping_add,
  * mut T::wrapping_sub, *mut T::write_bytes,
  * mut T::write_unaligned, *mut T::write_volatile,
  * mut T::write, Box::leak, FromUtf8Error::as_bytes,
    LocalKey::try_with, Option::cloned, iter::FusedIterator,
    btree_map::Entry::and_modify, s::read_to_string, fs::read,
    fs::write, hash_map::Entry::and_modify, String::retain,
    ops::RangeInclusive, ops::RangeToInclusive, process::id,
    slice::rotate_left, slice::rotate_right.
  + Compatibility Notes:
  - Aliasing a `Fn` trait as `dyn` no longer works.
  - The result of dereferences are no longer promoted to
    `'static`.
  - Deprecate `AsciiExt` trait in favor of inherent methods.
  - `".e0"` will now no longer parse as `0.0` and will instead
    cause an error.
  - Removed hoedown from rustdoc.
  - Bounds on higher-kinded lifetimes a hard error.
- Update cargo_version to 0.26.0.</changelog>
  <changelog author="mmanu84@outlook.de" date="1528286400">- Update to version 1.26.2:
  + Compatibility Notes
  - The borrow checker was fixed to avoid unsoundness when using match ergonomics
- Update to version 1.26.1:
  + Tools
  - RLS now works on Windows
  - Rustfmt stopped badly formatting text in some cases
  + Compatibility Notes
  - `fn main() -&gt; impl Trait` no longer works for non-Termination trait
    This reverts an accidental stabilization
  - `NaN &gt; NaN` no longer returns true in const-fn contexts
  - Prohibit using turbofish for `impl Trait` in method arguments</changelog>
  <changelog author="mschnitzer@suse.com" date="1533816000">- Ship rust-std on SLE-15 (bsc#1096945)
  No new changes came with this update of rust.</changelog>
  <changelog author="qkzhu@suse.com" date="1539259200">- Add CVE-2018-1000622-prevent-rustdoc-loads-uncontrolled-plugins-path.patch:
  + This patch consists of requiring `--plugin-path` to be passed
    whenever `--plugin` is passed
  + rustdoc plugins will be removed entirely on 1.28.0, we should
    drop this patch after 1.28.0(bsc#1100691, CVE-2018-1000622).</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541246400">- Jump from version 1.26.2 to 1.30.0 due to a build issue with using 1.26.x to
  compile 1.27.x. This package release requires %{rust_bootstrap} to be set.
- Enable extra rust tools to be built (cargo, rls, rustfmt, analysis)
    + cargo is now packaged with the same version number as the rust release, this
    may break any packages that relied on a cargo version number.
- Remove ccache and ninja from BuildRequires.
- Switch build configuration to use configure script, remove config.toml.
- Include all bootstraps in source rpm to make bootstrapping easier to manage
  within OBS.
- Remove unused patch: update-config-guess.patch
  Update to version 1.30.0 (2018-10-25)
  + Language
  - Procedural macros are now available.-  These kinds of macros allow for
    more powerful code generation. There is a new chapter available
    in the Rust Programming Language book that goes further in depth.
  - You can now use keywords as identifiers using the raw identifiers
    syntax (`r#`),-  e.g. `let r#for = true;`
  - Using anonymous parameters in traits is now deprecated with a warning and
    will be a hard error in the 2018 edition.-
  - You can now use `crate` in paths.-  This allows you to refer to the
    crate root in the path, e.g. `use crate::foo;` refers to `foo` in `src/lib.rs`.
  - Using a external crate no longer requires being prefixed with `::`.-
    Previously, using a external crate in a module without a use statement
    required `let json = ::serde_json::from_str(foo);` but can now be written
    as `let json = serde_json::from_str(foo);`.
  - You can now apply the `#[used]` attribute to static items to prevent the
    compiler from optimising them away, even if they appear to be unused,-
    e.g. `#[used] static FOO: u32 = 1;`
  - You can now import and reexport macros from other crates with the `use`
    syntax.-  Macros exported with `#[macro_export]` are now placed into
    the root module of the crate. If your macro relies on calling other local
    macros, it is recommended to export with the
    `#[macro_export(local_inner_macros)]` attribute so users won't have to import
    those macros.
  - You can now catch visibility keywords (e.g. `pub`, `pub(crate)`) in macros
    using the `vis` specifier.-
  - Non-macro attributes now allow all forms of literals, not just
    strings.-  Previously, you would write `#[attr("true")]`, and you can now
    write `#[attr(true)]`.
  - You can now specify a function to handle a panic in the Rust runtime with the
    `#[panic_handler]` attribute.-
  + Compiler
  - Added the `riscv32imc-unknown-none-elf` target.-
  - Added the `aarch64-unknown-netbsd` target-
  + Libraries
  - `ManuallyDrop` now allows the inner type to be unsized.-
  + Stabilized APIs
  - `Ipv4Addr::BROADCAST`
  - `Ipv4Addr::LOCALHOST`
  - `Ipv4Addr::UNSPECIFIED`
  - `Ipv6Addr::LOCALHOST`
  - `Ipv6Addr::UNSPECIFIED`
  - `Iterator::find_map`
  - The following methods are replacement methods for `trim_left`, `trim_right`,
    `trim_left_matches`, and `trim_right_matches`, which will be deprecated
    in 1.33.0:
    + `str::trim_end_matches`
    + `str::trim_end`
    + `str::trim_start_matches`
    + `str::trim_start`
  + Cargo
  - `cargo run` doesn't require specifying a package in workspaces.][cargo/5877]
  - `cargo doc` now supports `--message-format=json`.][cargo/5878] This is
    equivalent to calling `rustdoc --error-format=json`.
  - Cargo will now provide a progress bar for builds.][cargo/5995]
  + Misc
  - `rustdoc` allows you to specify what edition to treat your code as with the
    `--edition` option.-
  - `rustdoc` now has the `--color` (specify whether to output color) and
    `--error-format` (specify error format, e.g. `json`) options.-
  - We now distribute a `rust-gdbgui` script that invokes `gdbgui` with Rust
    debug symbols.-
  - Attributes from Rust tools such as `rustfmt` or `clippy` are now
    available,-  e.g. `#[rustfmt::skip]` will skip formatting the next item.
- Update to version 1.29.2 (2018-10-11)
  + Workaround for an aliasing-related LLVM bug, which caused miscompilation.
  + The `rls-preview` component on the windows-gnu targets has been restored.
- Update to version 1.29.1 (2018-09-25)
  + Security Notes
  - The standard library's `str::repeat` function contained an out of bounds write
    caused by an integer overflow. This has been fixed by deterministically
    panicking when an overflow happens.
- Update to version 1.29.0 (2018-09-13)
  + Compiler
  - Bumped minimum LLVM version to 5.0.
  - Added `powerpc64le-unknown-linux-musl` target.
  - Added `aarch64-unknown-hermit` and `x86_64-unknown-hermit` targets.
  + Libraries
  - `Once::call_once` no longer requires `Once` to be `'static`.
  - `BuildHasherDefault` now implements `PartialEq` and `Eq`.
  - `Box&lt;CStr&gt;`, `Box&lt;OsStr&gt;`, and `Box&lt;Path&gt;` now implement `Clone`.
  - Implemented `PartialEq&lt;&amp;str&gt;` for `OsString` and `PartialEq&lt;OsString&gt;`
    for `&amp;str`.
  - `Cell&lt;T&gt;` now allows `T` to be unsized.
  - `SocketAddr` is now stable on Redox.
  + Stabilized APIs
  - `Arc::downcast`
  - `Iterator::flatten`
  - `Rc::downcast`
  + Cargo
  - Cargo can silently fix some bad lockfiles.][cargo/5831] You can use
    `--locked` to disable this behavior.
  - `cargo-install` will now allow you to cross compile an install
    using `--target`.][cargo/5614]
  - Added the `cargo-fix` subcommand to automatically move project code from
    2015 edition to 2018.][cargo/5723]
  - `cargo doc` can now optionally document private types using the
    `--document-private-items` flag.][cargo/5543]
  + Misc
  - `rustdoc` now has the `--cap-lints` option which demotes all lints above
    the specified level to that level. For example `--cap-lints warn`
    will demote `deny` and `forbid` lints to `warn`.
  - `rustc` and `rustdoc` will now have the exit code of `1` if compilation
    fails and `101` if there is a panic.
  - A preview of clippy has been made available through rustup.
    You can install the preview with `rustup component add clippy-preview`.
  + Compatibility Notes
  - `str::{slice_unchecked, slice_unchecked_mut}` are now deprecated.
    Use `str::get_unchecked(begin..end)` instead.
  - `std::env::home_dir` is now deprecated for its unintuitive behavior.
    Consider using the `home_dir` function from
    https://crates.io/crates/dirs instead.
  - `rustc` will no longer silently ignore invalid data in target spec.
  - `cfg` attributes and `--cfg` command line flags are now more
    strictly validated.
- Update to version 1.28.0
  + Language
  - The `#[repr(transparent)]` attribute is now stable.-  This attribute
    allows a Rust newtype wrapper (`struct NewType&lt;T&gt;(T);`) to be represented as
    the inner type across Foreign Function Interface (FFI) boundaries.
  - The keywords `pure`, `sizeof`, `alignof`, and `offsetof` have been unreserved
    and can now be used as identifiers.-
  - The `GlobalAlloc` trait and `#[global_allocator]` attribute are now
    stable.-  This will allow users to specify a global allocator for
    their program.
  - Unit test functions marked with the `#[test]` attribute can now return
    `Result&lt;(), E: Debug&gt;` in addition to `()`.-
  - The `lifetime` specifier for `macro_rules!` is now stable.-  This
    allows macros to easily target lifetimes.
  + Compiler
  - The `s` and `z` optimisation levels are now stable.-  These optimisations
    prioritise making smaller binary sizes. `z` is the same as `s` with the
    exception that it does not vectorise loops, which typically results in an even
    smaller binary.
  - The short error format is now stable.-  Specified with
    `--error-format=short` this option will provide a more compressed output of
    rust error messages.
  - Added a lint warning when you have duplicated `macro_export`s.-
  - Reduced the number of allocations in the macro parser.-  This can
    improve compile times of macro heavy crates on average by 5%.
  + Libraries
  - Implemented `Default` for `&amp;mut str`.-
  - Implemented `From&lt;bool&gt;` for all integer and unsigned number types.-
  - Implemented `Extend` for `()`.-
  - The `Debug` implementation of `time::Duration` should now be more easily
    human readable.-  Previously a `Duration` of one second would printed as
    `Duration { secs: 1, nanos: 0 }` and will now be printed as `1s`.
  - Implemented `From&lt;&amp;String&gt;` for `Cow&lt;str&gt;`, `From&lt;&amp;Vec&lt;T&gt;&gt;` for `Cow&lt;[T]&gt;`,
    `From&lt;Cow&lt;CStr&gt;&gt;` for `CString`, `From&lt;CString&gt;, From&lt;CStr&gt;, From&lt;&amp;CString&gt;`
    for `Cow&lt;CStr&gt;`, `From&lt;OsString&gt;, From&lt;OsStr&gt;, From&lt;&amp;OsString&gt;` for
    `Cow&lt;OsStr&gt;`, `From&lt;&amp;PathBuf&gt;` for `Cow&lt;Path&gt;`, and `From&lt;Cow&lt;Path&gt;&gt;`
    for `PathBuf`.-
  - Implemented `Shl` and `Shr` for `Wrapping&lt;u128&gt;`
    and `Wrapping&lt;i128&gt;`.-
  - `DirEntry::metadata` now uses `fstatat` instead of `lstat` when
    possible.-  This can provide up to a 40% speed increase.
  - Improved error messages when using `format!`.-
  + Stabilized APIs
  - `Iterator::step_by`
  - `Path::ancestors`
  - `SystemTime::UNIX_EPOCH`
  - `alloc::GlobalAlloc`
  - `alloc::Layout`
  - `alloc::LayoutErr`
  - `alloc::System`
  - `alloc::alloc`
  - `alloc::alloc_zeroed`
  - `alloc::dealloc`
  - `alloc::realloc`
  - `alloc::handle_alloc_error`
  - `btree_map::Entry::or_default`
  - `fmt::Alignment`
  - `hash_map::Entry::or_default`
  - `iter::repeat_with`
  - `num::NonZeroUsize`
  - `num::NonZeroU128`
  - `num::NonZeroU16`
  - `num::NonZeroU32`
  - `num::NonZeroU64`
  - `num::NonZeroU8`
  - `ops::RangeBounds`
  - `slice::SliceIndex`
  - `slice::from_mut`
  - `slice::from_ref`
  - `{Any + Send + Sync}::downcast_mut`
  - `{Any + Send + Sync}::downcast_ref`
  - `{Any + Send + Sync}::is`
  + Cargo
  - Cargo will now no longer allow you to publish crates with build scripts that
    modify the `src` directory.][cargo/5584] The `src` directory in a crate should be
    considered to be immutable.
  + Misc
  - The `suggestion_applicability` field in `rustc`'s json output is now
    stable.-  This will allow dev tools to check whether a code suggestion
    would apply to them.
  + Compatibility Notes
  - Rust will consider trait objects with duplicated constraints to be the same
    type as without the duplicated constraint.-  For example the below code will
    now fail to compile.
    ```rust
    trait Trait {}
    impl Trait + Send {
    fn test(&amp;self) { println!("one"); } //~ ERROR duplicate definitions with name `test`
    }
    impl Trait + Send + Send {
    fn test(&amp;self) { println!("two"); }
    }
- Update to version 1.27.2:
  + Compatibility Notes
  - The borrow checker was fixed to avoid an additional potential unsoundness when using
    match ergonomics
- Update to version 1.27.1:
  + Security Notes
  - rustdoc would execute plugins in the /tmp/rustdoc/plugins directory
    when running, which enabled executing code as some other user on a
    given machine. This release fixes that vulnerability; you can read
    more about this on the blog. The associated CVE is [CVE-2018-1000622].
    Thank you to Red Hat for responsibily disclosing this vulnerability to us.
  + Compatibility Notes
  - The borrow checker was fixed to avoid an additional potential unsoundness when using
    match ergonomics
- Update to version 1.27.0:
  + Language
  - Removed 'proc' from the reserved keywords list. This allows `proc` to
    be used as an identifier.
  - The dyn syntax is now available. This syntax is equivalent to the
    bare `Trait` syntax, and should make it clearer when being used in tandem with
    `impl Trait` because it is equivalent to the following syntax:
    `&amp;Trait == &amp;dyn Trait`, `&amp;mut Trait == &amp;mut dyn Trait`, and
    `Box&lt;Trait&gt; == Box&lt;dyn Trait&gt;`.
  - Attributes on generic parameters such as types and lifetimes are
    now stable. e.g.
    `fn foo&lt;#[lifetime_attr] 'a, #[type_attr] T: 'a&gt;() {}`
  - The `#[must_use]` attribute can now also be used on functions as well as
    types. It provides a lint that by default warns users when the
    value returned by a function has not been used.
  + Compiler
  - Added the `armvte-unknown-linux-musleabi` target.
  + Libraries
  - SIMD (Single Instruction Multiple Data) on x/x_ is now stable.
    This includes arch::x &amp; arch::x_ modules which contain
    SIMD intrinsics, a new macro called `is_x_feature_detected!`, the
    `#[target_feature(enable="")]` attribute, and adding `target_feature = ""` to
    the `cfg` attribute.
  - A lot of methods for `[u]`, `f`, and `f` previously only available in
    std are now available in core.
  - The generic `Rhs` type parameter on `ops::{Shl, ShlAssign, Shr}` now defaults
    to `Self`.
  - std::str::replace` now has the `#[must_use]` attribute to clarify
    that the operation isn't done in place.
  - Clone::clone`, `Iterator::collect`, and `ToOwned::to_owned` now have
    the `#[must_use]` attribute] to warn about unused potentially
    expensive allocations.
  + Stabilized APIs
  - DoubleEndedIterator::rfind
  - DoubleEndedIterator::rfold
  - DoubleEndedIterator::try_rfold
  - Duration::from_micros
  - Duration::from_nanos
  - Duration::subsec_micros
  - Duration::subsec_millis
  - HashMap::remove_entry
  - Iterator::try_fold
  - Iterator::try_for_each
  - NonNull::cast
  - Option::filter
  - String::replace_range
  - Take::set_limit
  - hint::unreachable_unchecked
  - os::unix::process::parent_id
  - ptr::swap_nonoverlapping
  - slice::rsplit_mut
  - slice::rsplit
  - slice::swap_with_slice
  + Cargo
  - `cargo-metadata` now includes `authors`, `categories`, `keywords`,
    `readme`, and `repository` fields.
  - `cargo-metadata` now includes a package's `metadata` table.
  - Added the `--target-dir` optional argument. This allows you to specify
    a different directory than `target` for placing compilation artifacts.
  - Cargo will be adding automatic target inference for binaries, benchmarks,
    examples, and tests in the Rust 2018 edition. If your project specifies
    specific targets, e.g. using `[[bin]]`, and have other binaries in locations
    where cargo would infer a binary, Cargo will produce a warning. You can
    disable this feature ahead of time by setting any of the following to false:
    `autobins`, `autobenches`, `autoexamples`, `autotests`.
  - Cargo will now cache compiler information. This can be disabled by
    setting `CARGO_CACHE_RUSTC_INFO=0` in your environment.
  + Compatibility Notes
  - Calling a `CharExt` or `StrExt` method directly on core will no longer
    work. e.g. `::core::prelude::v1::StrExt::is_empty("")` will not
    compile, `"".is_empty()` will still compile.
  - `Debug` output on `atomic::{AtomicBool, AtomicIsize, AtomicPtr, AtomicUsize}`
    will only print the inner type. E.g.
    `print!("{:?}", AtomicBool::new(true))` will print `true`,
    not `AtomicBool(true)`.
  - The maximum number for `repr(align(N))` is now 2?. Previously you
    could enter higher numbers but they were not supported by LLVM. Up to 512MB
    alignment should cover all use cases.
  - The `.description()` method on the `std::error::Error` trait
    has been soft-deprecated. It is no longer required to implement it.
  + Misc
  - Added ?The Rustc book? into the official documentation.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541246401">- Fixing various rpmlint warnings and errors:
  + ExclusiveArch instead of BuildArch for i686
  + Remove conflicts with same package name
  + Remove a few hidden files during prep, does not touch '.clang-format'
  + Remove old patch macro in comment
  + Fix lint warning about bash and zsh completition files
  + Fix various script shebang warnings (incorrect or missing)
  + Adjust rpmlintrc to mask some 'invalid' warnings
- Move Rust and its tools in to their own category under:
  + Development/Languages/Rust</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541332800">- Add ignore-Wstring-conversion.patch: we require patching of
  src/librustc_llvm/build.rs to ignore a flag that
  llvm-config --cxxflags outputs which GCC doesn't recognise.
- Default to building using the distro LLVM where the version is
  &gt;= 5.0, instead of the Rust bundled LLVM which requires
  compilation. This should decrease build times. SLE LLVM is too old.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1541505600">- Fix second-person language and spellos.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1541678400">- Strengthen the dependency on rust-std-static to Requires
  to fix crate package builds in OBS
- Use standard form rich dependencies for SUSE Linux 15 and newer</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541764800">- Add Provides/Obsoletes/Conflicts to rust-std-static and cargo</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1541937600">- Set the bootstrap flag in the spec file temporarily so that rings
  will build rust without intervention. Must be reverted once all
  releases are successful.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1542110400">- Add additional Requires to rls:
  + Requires rust-src
  + Requires rust-analysis
- Add additional Requires to rustfmt:
  + Requires cargo
- Fix rust-src requiring /usr/bin/bash; a script was incorrectly
  edited at build time.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1544097600">- Update to version 1.31.0
  + Language
  - This version marks the release of the 2018 edition of Rust.
  - New lifetime elision rules now allow for eliding lifetimes in functions and
  impl headers. E.g. `impl&lt;'a&gt; Reader for BufReader&lt;'a&gt; {}` can now be
  `impl Reader for BufReader&lt;'_&gt; {}`. Lifetimes are still required to be defined
  in structs.
  - You can now define and use `const` functions. These are currently
  a strict minimal subset of the const fn RFC. Refer to the
  [language reference][const-reference] for what exactly is available.
  - You can now use tool lints, which allow you to scope lints from external
  tools using attributes. E.g. `#[allow(clippy::filter_map)]`.
  - `#[no_mangle]` and `#[export_name]` attributes can now be located anywhere in
  a crate, not just in exported functions.
  - You can now use parentheses in pattern matches.
  + Compiler
  - Updated musl to 1.1.20
  + Libraries
  - You can now convert `num::NonZero*` types to their raw equivalvents using the
  `From` trait. E.g. `u8` now implements `From&lt;NonZeroU8&gt;`.
  - You can now convert a `&amp;Option&lt;T&gt;` into `Option&lt;&amp;T&gt;` and `&amp;mut Option&lt;T&gt;`
  into `Option&lt;&amp;mut T&gt;` using the `From` trait.
  - You can now multiply (`*`) a `time::Duration` by a `u32`.
  + Stabilized APIs
  - `slice::align_to`
  - `slice::align_to_mut`
  - `slice::chunks_exact`
  - `slice::chunks_exact_mut`
  - `slice::rchunks`
  - `slice::rchunks_mut`
  - `slice::rchunks_exact`
  - `slice::rchunks_exact_mut`
  - `Option::replace`
  + Cargo
  - Cargo will now download crates in parallel using HTTP/2.
  - You can now rename packages in your Cargo.toml We have a guide
  on how to use the `package` key in your dependencies.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1546689600">- Update to version 1.31.1
  + Fix Rust failing to build on `powerpc-unknown-netbsd`
  + Fix broken go-to-definition in RLS
  + Fix infinite loop on hover in RLS</changelog>
  <changelog author="federico@suse.com" date="1548158400">- Remove
  CVE-2018-1000622-prevent-rustdoc-loads-uncontrolled-plugins-path.patch,
  since rustdoc plugins are fixed since version 1.27.1 (bsc#1100691,
  CVE-2018-1000622).</changelog>
</package>
<package pkgid="ba907d9f93f8d1ecd44c754d4aab7253898db115d4b5b244f6e4b52f0cbd1cab" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="lp150.16.2"/>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551268800">- Put each exported environment variable in a separate line so the
  specfile will work on SLE SP0/SP1/SP2.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551268801">- Move export vars directly to where used.
- Change codegen units to 2 for Arm and x86 builds in attempt to
  reduce memory use by LLVM.</changelog>
  <changelog author="jones_ld@protonmail.com" date="1551268802">- Use same version bootstrap as package source
- Fixes to build with correct LLVM for SLE and Leap releases</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1551355200">- Use cmake3, not cmake, in SLE-12 SP2 and earlier.  The stock cmake
  package there was 2.x, and building llvm requires cmake 3.5.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551441600">- Bump minimum LLVM to 7.0
- Add conditions to build SLE versions with bundled libgit2 and
  libssh2</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551528000">- Update to version 1.33.0
  + Language
  - You can now use the `cfg(target_vendor)` attribute. E.g.
    `#[cfg(target_vendor="linux")] fn main() { println!("Hello Linux!"); }`
  - Integer patterns such as in a match expression can now be exhaustive.
    E.g. You can have match statement on a `u8` that covers `0..=255` and
    you would no longer be required to have a `_ =&gt; unreachable!()` case.
  - You can now have multiple patterns in `if let` and `while let`
    expressions. You can do this with the same syntax as a `match`
    expression. E.g.
    ```
    enum Creature {
  Crab(String),
  Lobster(String),
  Person(String),
    }
    fn main() {
  let state = Creature::Crab("Ferris");
  if let Creature::Crab(name) | Creature::Person(name) = state {
  println!("This creature's name is: {}", name);
  }
    }
    ```
  - You can now have irrefutable `if let` and `while let` patterns. Using
    this feature will by default produce a warning as this behaviour can be
    unintuitive. E.g. `if let _ = 5 {}`
  - You can now use `let` bindings, assignments, expression statements,
    and irrefutable pattern destructuring in const functions.
  - You can now call unsafe const functions. E.g.
    ```
    const unsafe fn foo() -&gt; i32 { 5 }
    const fn bar() -&gt; i32 {
  unsafe { foo() }
    }
    ```
  - You can now specify multiple attributes in a `cfg_attr` attribute.
    E.g. `#[cfg_attr(all(), must_use, optimize)]`
  - You can now specify a specific alignment with the `#[repr(packed)]`
    attribute. E.g. `#[repr(packed(2))] struct Foo(i16, i32);` is a struct
    with an alignment of 2 bytes and a size of 6 bytes.
  - You can now import an item from a module as an `_`. This allows you to
    import a trait's impls, and not have the name in the namespace. E.g.
    ```
    use std::io::Read as _;
    // Allowed as there is only one `Read` in the module.
    pub trait Read {}
    ```
  - extern` functions will now abort by default when panicking.
    This was previously undefined behaviour.
  + Compiler
  - You can now set a linker flavor for `rustc` with the `-Clinker-flavor`
    command line argument.
  - The mininum required LLVM version has been bumped to 6.0.
  - Added support for the PowerPC64 architecture on FreeBSD.
  - The `x86_64-fortanix-unknown-sgx` target support has been upgraded to
    tier 2 support. Visit the [platform support][platform-support] page for
    information on Rust's platform support.
  - Added support for the `thumbv7neon-linux-androideabi` and
    `thumbv7neon-unknown-linux-gnueabihf` targets.
  - Added support for the `x86_64-unknown-uefi` target.
  + Libraries
  - The methods `overflowing_{add, sub, mul, shl, shr}` are now `const`
    functions for all numeric types.
  - The methods `rotate_left`, `rotate_right`, and `wrapping_{add, sub, mul, shl, shr}`
    are now `const` functions for all numeric types.
  - The methods `is_positive` and `is_negative` are now `const` functions for
    all signed numeric types.
  - The `get` method for all `NonZero` types is now `const`.
  - The methods `count_ones`, `count_zeros`, `leading_zeros`, `trailing_zeros`,
    `swap_bytes`, `from_be`, `from_le`, `to_be`, `to_le` are now `const` for all
    numeric types.
  - Ipv4Addr::new` is now a `const` function
  + Stabilized APIs
  - unix::FileExt::read_exact_at
  - unix::FileExt::write_all_at
  - Option::transpose
  - Result::transpose
  - convert::identity
  - pin::Pin
  - marker::Unpin
  - marker::PhantomPinned
  - Vec::resize_with
  - VecDeque::resize_with
  - Duration::as_millis
  - Duration::as_micros
  - Duration::as_nanos
  + Cargo
  - Cargo should now rebuild a crate if a file was modified during the initial
    build.][cargo/6484]
  + Compatibility Notes
  - The methods `str::{trim_left, trim_right, trim_left_matches, trim_right_matches}`
    are now deprecated in the standard library, and their usage will now produce a warning.
    Please use the `str::{trim_start, trim_end, trim_start_matches, trim_end_matches}`
    methods instead.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551700800">- add depreciated-trim_left_matches.patch: replaces depreciated
  function call in src/tools/tidy with trim_start_matches to fix
  error when bootstrapping with system 1.33.0</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1551873600">- Separate the bootstrap version from the minimum required system
  version for package builds.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1552737600">- Remove miri complete instead of excluding. This is experimental
  and so should not be included.
- BuildRequires ccache in attempt to reduce compile times.
- Remove more extraneous directories from src that will never be
  used.
- Extra patterns in rpmlintrc to catch more false positives:
  + Rust has no stable API, ignore SONAME warnings
  + Tool versions don't update in step with rust, ignore warnings</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1553256000">- Explicitly build only a subset of tools</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1553515200">- Use the system's LLVM in SLE15-SP1.  That distribution has LLVM7,
  and we need to use it there, instead of any other version.
- Prevent auto-provides from being created for things under
  rustlibdir, so the RPM does not inadvertently have a Provides for a
  bundled LLVM and the Rust library files.
- Sync changes files between SLE and openSUSE, for ease of maintenance.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1554984000">- Update to version 1.34.0
  + Language
  - You can now use `#[deprecated = "reason"]` as a shorthand for
    `#[deprecated(note = "reason")]`. This was previously allowed
    by mistake but had no effect.
  - You can now accept token streams in `#[attr()]`,`#[attr[]]`, and
    `#[attr{}]` procedural macros.
  - You can now write `extern crate self as foo;` to import your
    crate's root into the extern prelude.
  + Compiler
  - You can now target `riscv64imac-unknown-none-elf` and
    `riscv64gc-unknown-none-elf`.
  - You can now enable linker plugin LTO optimisations with
    `-C linker-plugin-lto`. This allows rustc to compile your Rust
    code into LLVM bitcode allowing LLVM to perform LTO optimisations
    across C/C++ FFI boundaries.
  - You can now target `powerpc64-unknown-freebsd`.
  + Libraries
  - The trait bounds have been removed on some of `HashMap&lt;K, V, S&gt;`'s
    and `HashSet&lt;T, S&gt;`'s basic methods. Most notably you no longer
    require the `Hash` trait to create an iterator.
  - The `Ord` trait bounds have been removed on some of
    `BinaryHeap&lt;T&gt;`'s basic methods. Most notably you no longer require
    the `Ord` trait to create an iterator.
  - The methods `overflowing_neg` and `wrapping_neg` are now `const`
    functions for all numeric types.
  - Indexing a `str` is now generic over all types that
    implement `SliceIndex&lt;str&gt;`.
  - `str::trim`, `str::trim_matches`, `str::trim_{start, end}`, and
    `str::trim_{start, end}_matches` are now `#[must_use]` and will
    produce a warning if their returning type is unused.
  - The methods `checked_pow`, `saturating_pow`, `wrapping_pow`, and
    `overflowing_pow` are now available for all numeric types. These are
    equivalvent to methods such as `wrapping_add` for the `pow` operation.
  + Stabilized APIs
  - std &amp; core
    + Any::type_id
    + Error::type_id
    + atomic::AtomicI16
    + atomic::AtomicI32
    + atomic::AtomicI64
    + atomic::AtomicI8
    + atomic::AtomicU16
    + atomic::AtomicU32
    + atomic::AtomicU64
    + atomic::AtomicU8
    + convert::Infallible
    + convert::TryFrom
    + convert::TryInto
    + iter::from_fn
    + iter::successors
    + num::NonZeroI128
    + num::NonZeroI16
    + num::NonZeroI32
    + num::NonZeroI64
    + num::NonZeroI8
    + num::NonZeroIsize
    + slice::sort_by_cached_key
    + str::escape_debug
    + str::escape_default
    + str::escape_unicode
    + str::split_ascii_whitespace
  - std
    + Instant::checked_add
    + Instant::checked_sub
    + SystemTime::checked_add
    + SystemTime::checked_sub
  + Cargo
  - You can now use alternative registries to crates.io.
  + Misc
  - You can now use the `?` operator in your documentation
    tests without manually adding `fn main() -&gt; Result&lt;(), _&gt; {}`.
  + Compatibility Notes
  - `Command::before_exec` is now deprecated in favor of the
    unsafe method `Command::pre_exec`.
  - Use of `ATOMIC_{BOOL, ISIZE, USIZE}_INIT` is now deprecated.
    As you can now use `const` functions in `static` variables.
- Remove depreciated-trim_left_matches.patch.
- Rustfmt version bumped to 1.0.3
  + Change description not provided.
- rls version now in sync with rustc.
- Misc fixes to rust.spec</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133283).</changelog>
  <changelog author="federico@suse.com" date="1558094400">- Fix regexp for .rlib files in rust-rpmlintrc.</changelog>
  <changelog author="Aaron Puchert &lt;aaronpuchert@alice-dsl.net&gt;" date="1558785600">- Add fix-llvm8-build.patch: Fix linker errors with llvm8 by
  limiting internalization in ThinLTO.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1559131200">- Update to version 1.35.0
  + Language
  - `FnOnce`, `FnMut`, and the `Fn` traits are now implemented for `Box&lt;FnOnce&gt;`,
    `Box&lt;FnMut&gt;`, and `Box&lt;Fn&gt;` respectively.
  - You can now coerce closures into unsafe function pointers. e.g.
    unsafe fn call_unsafe(func: unsafe fn()) {
    func()
    }
    pub fn main() {
    unsafe { call_unsafe(|| {}); }
    }
  + Compiler
  - Added the `armv6-unknown-freebsd-gnueabihf` and
    `armv7-unknown-freebsd-gnueabihf` targets.
  - Added the `wasm32-unknown-wasi` target.
  + Libraries
  - `Thread` will now show its ID in `Debug` output.
  - `StdinLock`, `StdoutLock`, and `StderrLock` now implement `AsRawFd`.
  - `alloc::System` now implements `Default`.
  - Expanded `Debug` output (`{:#?}`) for structs now has a trailing comma on the
    last field.
  - `char::{ToLowercase, ToUppercase}` now
    implement `ExactSizeIterator`.
  - All `NonZero` numeric types now implement `FromStr`.
  - Removed the `Read` trait bounds
    on the `BufReader::{get_ref, get_mut, into_inner}` methods.
  - You can now call the `dbg!` macro without any parameters to print the file
    and line where it is called.
  - In place ASCII case conversions are now up to 4× faster.
    e.g. `str::make_ascii_lowercase`
  - `hash_map::{OccupiedEntry, VacantEntry}` now implement `Sync`
    and `Send`.
  + Stabilized APIs
  - `f32::copysign`
  - `f64::copysign`
  - `RefCell::replace_with`
  - `RefCell::map_split`
  - `ptr::hash`
  - `Range::contains`
  - `RangeFrom::contains`
  - `RangeTo::contains`
  - `RangeInclusive::contains`
  - `RangeToInclusive::contains`
  - `Option::copied`
  + Cargo
  - You can now set `cargo:rustc-cdylib-link-arg` at build time to pass custom
    linker arguments when building a `cdylib`. Its usage is highly
    platform specific.
- version 1.34.2
  + Destabilize the `Error::type_id` function due to a security
  vulnerability (CVE-2019-12083)
- version 1.34.1
  + Fix false positives for the `redundant_closure` Clippy lint
  + Fix false positives for the `missing_const_for_fn` Clippy lint
  + Fix Clippy panic when checking some macros</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1562068800">- Add support for ppc</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562587200">- Update to version 1.36.0
  + Language
  - Non-Lexical Lifetimes are now enabled on the 2015 edition
  - The order of traits in trait objects no longer affects the semantics of that
    object. e.g. `dyn Send + fmt::Debug` is now equivalent to
    `dyn fmt::Debug + Send`, where this was previously not the case.
  + Libraries
  - `HashMap`'s implementation has been replaced with `hashbrown::HashMap` implementation
  - `TryFromSliceError` now implements `From&lt;Infallible&gt;`
  - `mem::needs_drop` is now available as a const fn
  - `alloc::Layout::from_size_align_unchecked` is now available as a const fn
  - `String` now implements `BorrowMut&lt;str&gt;`
  - `io::Cursor` now implements `Default`
  - Both `NonNull::{dangling, cast}` are now const fns
  - The `alloc` crate is now stable. `alloc` allows you to use a subset
    of `std` (e.g. `Vec`, `Box`, `Arc`) in `#![no_std]` environments if the
    environment has access to heap memory allocation.
  - String` now implements `From&lt;&amp;String&gt;`
  - You can now pass multiple arguments to the `dbg!` macro. `dbg!` will
    return a tuple of each argument when there is multiple arguments.
  - `Result::{is_err, is_ok}` are now `#[must_use]` and will produce a warning if
    not used.
  + Stabilized APIs
  - VecDeque::rotate_left
  - VecDeque::rotate_right
  - Iterator::copied
  - io::IoSlice
  - io::IoSliceMut
  - Read::read_vectored
  - Write::write_vectored
  - str::as_mut_ptr
  - mem::MaybeUninit
  - pointer::align_offset
  - future::Future
  - task::Context
  - task::RawWaker
  - task::RawWakerVTable
  - task::Waker
  - task::Poll
  + Cargo
  - Cargo will now produce an error if you attempt to use the name of a required dependency as a feature
  - You can now pass the `--offline` flag to run cargo without accessing the network
  + Clippy
  - New lints: `find_map`, `filter_map_next`
  - New lint: `path_buf_push_overwrite`
  - Move `path_buf_push_overwrite` to the nursery
  - Split `redundant_closure` into `redundant_closure` and `redundant_closure_for_method_calls`
  - Allow allowing of `toplevel_ref_arg` lint
  - Fix false negative in `or_fun_call` pertaining to nested constructors
  - Fixed false positive in `or_fn_call` pertaining to enum variant constructors
  - Fix false positive in `useless_let_if_seq` pertaining to interior mutability
  - Fix false positive in `redundant_closure` pertaining to non-function types
  - Fix false positive in `let_and_return` pertaining to attributes on `let`s
  - Fix false positive in `module_name_repetitions` lint pertaining to attributes
  - Fix false positive on `assertions_on_constants` pertaining to `debug_assert!`
  - Improve suggestion in `map_clone` to suggest `.copied()` where applicable
  - Improve suggestion for `search_is_some`
  - Improve suggestion applicability for `naive_bytecount`
  - Improve suggestion applicability for `while_let_loop`
  - Improve diagnostics for `too_many_arguments`
  - Improve diagnostics for `cast_lossless`
  - Deal with macro checks in desugarings better
  - Add macro check for `unnecessary_cast`
  - Remove `approx_constant`'s documentation's "Known problems" section
  - Fix ICE in `suspicious_else_formatting`
  - Fix ICE in `decimal_literal_representation`
  + Compatibility Notes
  - With the stabilisation of `mem::MaybeUninit`, `mem::uninitialized` use is no
    longer recommended, and will be deprecated in 1.38.0.</changelog>
  <changelog author="Luke Jones &lt;jones_ld@protonmail.com&gt;" date="1562673600">- Remove fix-llvm8-build.patch, fixed upstream</changelog>
  <changelog author="federico@suse.com" date="1568116800">- Use gcc7 on all of SLE12, since the embedded LLVM wants at least gcc 5.1.
- Add rust-revert-llvm-build-info.patch - reverts upstream patches which
  cause LLVM to be rebuilt during the installation phase.</changelog>
</package>
<package pkgid="3910ce1253d8d33931afc4ce1cadf39c2992aef66db8ba7bb47f0c402d9d74ea" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="17ea55c754f40917826c0ff722ebb0f2604adf165b152cdb27abaada18559c68" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="184982c2636396f5ec523a6189fc166e75e1275943b18ad7085ebc1f38a1cfe2" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.4" rel="lp150.2.9.1"/>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
</package>
<package pkgid="4eb18fdd96900d4c096ae4e7d46cca1634b8d5fa2722199fb095921c1cd300e1" name="cloud-init" arch="src">
  <version epoch="0" ver="18.5" rel="lp150.2.13.1"/>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
</package>
<package pkgid="c80d8ac7de4b29314ef9023fbc433eb3e55692c46873fb18b3ad9ec71f2c0b40" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.5" rel="lp150.2.13.1"/>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
</package>
<package pkgid="4417b85d064e91276b0eb0a6580fbb4027cde7934e72c0e9983a987360e795c2" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp150.2.16.1"/>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
</package>
<package pkgid="f57abdef31188a0da1410d6a15d5b745a67e1e7df94ba1c387e9dfcf23dc5929" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp150.2.16.1"/>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
</package>
<package pkgid="3f8de57560e8e80b3154663ce27a9e8810d6c8277c5d49d1f4deda986dd49166" name="cloud-init" arch="src">
  <version epoch="0" ver="19.1" rel="lp150.2.19.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="a23b96f73c52a8c4e81183c32560d3f3b9ef3382765491f41f87d1763e5287b0" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp150.2.19.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="8304a6192f0bef8d6145abe6ccb37ad3f0e3a2a0e12fbb5b9447b01468a8eb28" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="bcff542b4abb1032bc02b52afa0b66be6abd1d472972a2ee273a0251efe6de27" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="c6270df5b347a6270522ecad116ad1cf5250b3759a8c72db3dbe00df426cdc7b" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.4" rel="lp150.2.9.1"/>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
</package>
<package pkgid="dc36413ffdf00e5e4d670c3e0536949c40c1b918b391dabe417826fe2bbe06a7" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.5" rel="lp150.2.13.1"/>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
</package>
<package pkgid="2c4a3e508a35c7e273011cb7ad24d5a96afc4299ee315e7295319d09c9a5c1c0" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp150.2.16.1"/>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
</package>
<package pkgid="2bf0df11b8041ad878da5ef40caeb0c00b3cbe42dd9ae7acc23438862fadf18f" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp150.2.19.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="4f17275f41cdb54c6eff351161082ef5b1d401243fcfe54f4348f1ed6c58eeba" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="a517b9095cc8c5d98f6d898811e5e89da7c51b67ac5604344e8117e2f50cafb0" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="f9ab006a00b6804c0b614e2ecbb92499ce32e706729b767bf6e215a3e9270a8e" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.4" rel="lp150.2.9.1"/>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
</package>
<package pkgid="404595156914418cb05e4f2532b9a617eb1c16936a0637cc96aad8110272c4e9" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.5" rel="lp150.2.13.1"/>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
  <changelog author="bwiedemann@suse.com" date="1530100800">- Let distribution default to opensuse/sles (boo#1099340)
- do not disable root user to make it easier to work with
- Run metadata detection after network-online (boo#1097388)</changelog>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
</package>
<package pkgid="5065153f739f7f3a8e013a4c0312b77735d2000313321896e33667a99a0da7d8" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp150.2.16.1"/>
  <changelog author="rjschwei@suse.com" date="1530792000">- The distribution inidcator is set to suse during template expansion,
  we do not replace anything set to ubuntu
- Do not run cloud-init after network-online, this breaks functionality in
  cloud-init. Certain parts of the code running in this phase expect to run
  before the network is on-line. This "re-introduces" boo#1097388. But the
  changes made are not generic enough.
- Root should not be enabled by default. For image builders/users that want
  root access by default they should provide an appropriate configuration
  file during image build or image setup</changelog>
  <changelog author="rjschwei@suse.com" date="1535112000">- Remove fix-default-systemd-unit-dir.patch
  + No longer needed, proper systemd config dir is queried from pckg-config</changelog>
  <changelog author="rjschwei@suse.com" date="1535112001">- Add a modified version of fix-default-systemd-unit-dir.patch
  + Removed pre-maturely, still needs 1 part of the patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
</package>
<package pkgid="d2a99d7b9a1fe8b7c830b75b0324570009cf919c0d80e9103ea056fb378a559a" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="19.1" rel="lp150.2.19.1"/>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540468800">- Update to version 18.4 (bsc#1087331, bsc#1097388, boo#1111427, bsc#1095627)
  + Remove cloud-init-no-user-lock-if-already-locked.patch
    cloud-init 18.4 is not supported on SLE 11 code base
  + Remove 0001-Support-chrony-configuration-lp-1731619.patch
    Included upstream
  + Remove 0003-Distro-dependent-chrony-config-file.patch
    Included upstream
  + Remove 0001-switch-to-using-iproute2-tools.patch
    Included upstream
  + Remove cloud-init-no-python-linux-dist.patch
    Included upstream
  + Remove cloud-init-no-trace-empt-sect.patch
    Included upstream
  + Remove cloud-init-setpath-dsitentify.patch
    Included upstream
  + Modify fix-default-systemd-unit-dir.patch
    Use pkg-config, only modify the generator
  + Remove cloud-init-sysconfig-netpathfix.patch
    Fixed upstream
  + Removed cloud-init-skip-ovf-tests.patch
    Fixed upstream
  + Removed cloud-init-translate-netconf-ipv4-keep-gw.patch
    Fixed upstream
  + Add cloud-init-template-py2.patch avoid Python 3 dependency when we build
    for distros with Python 2 support
  + Add 0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
  + Add 0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
  + Add cloud-init-sysconf-path.patch
  + Add cloud-init-sysconf-ethsetup.patch
  + Add 0001-Fix-the-service-order-for-SUSE-distributions.patch
  + Add dhcp-client as requirement
    cloud-init uses dhclient to setup temporary network for
    metadata retrieval. THis is needed until lp#1733226 is addressed
  + add rtd example docs about new standardized keys
  + use ds._crawled_metadata instance attribute if set when writing
    instance-data.json
  + ec2: update crawled metadata. add standardized keys
  + tests: allow skipping an entire cloud_test without running.
  + tests: disable lxd tests on cosmic
  + cii-tests: use unittest2.SkipTest in ntp_chrony due to new deps
  + lxd: adjust to snap installed lxd.
  + docs: surface experimental doc in instance-data.json
  + tests: fix ec2 integration tests. process meta_data instead of meta-data
  + Add support for Infiniband network interfaces (IPoIB). [Mark Goddard]
  + cli: add cloud-init query subcommand to query instance metadata
  + tools/tox-venv: update for new features.
  + pylint: ignore warning assignment-from-no-return for _write_network
  + stages: Fix bug causing datasource to have incorrect sys_cfg.
    (LP: #1787459)
  + Remove dead-code _write_network distro implementations.
  + net_util: ensure static configs have netmask in translate_network result
    [Thomas Berger] (LP: #1792454)
  + Fall back to root:root on syslog permissions if other options fail.
    [Robert Schweikert]
  + tests: Add mock for util.get_hostname. [Robert Schweikert] (LP: #1792799)
  + ds-identify: doc string cleanup.
  + OpenStack: Support setting mac address on bond.
    [Fabian Wiesel] (LP: #1682064)
  + bash_completion/cloud-init: fix shell syntax error.
  + EphemeralIPv4Network: Be more explicit when adding default route.
    (LP: #1792415)
  + OpenStack: support reading of newer versions of metdata.
  + OpenStack: fix bug causing 'latest' version to be used from network.
    (LP: #1792157)
  + user-data: jinja template to render instance-data.json in cloud-config
    (LP: #1791781)
  + config: disable ssh access to a configured user account
  + tests: print failed testname instead of docstring upon failure
  + tests: Disallow use of util.subp except for where needed.
  + sysconfig: refactor sysconfig to accept distro specific templates paths
  + Add unit tests for config/cc_ssh.py [Francis Ginther]
  + Fix the built-in cloudinit/tests/helpers:skipIf
  + read-version: enhance error message [Joshua Powers]
  + hyperv_reporting_handler: simplify threaded publisher
  + VMWare: Fix a network config bug in vm with static IPv4 and no gateway.
    [Pengpeng Sun] (LP: #1766538)
  + logging: Add logging config type hyperv for reporting via Azure KVP
    [Andy Liu]
  + tests: disable other snap test as well [Joshua Powers]
  + tests: disable snap, fix write_files binary [Joshua Powers]
  + Add datasource Oracle Compute Infrastructure (OCI).
  + azure: allow azure to generate network configuration from IMDS per boot.
  + Scaleway: Add network configuration to the DataSource [Louis Bouchard]
  + docs: Fix example cloud-init analyze command to match output.
    [Wesley Gao]
  + netplan: Correctly render macaddress on a bonds and bridges when
    provided. (LP: #1784699)
  + tools: Add 'net-convert' subcommand command to 'cloud-init devel'.
  + redhat: remove ssh keys on new instance. (LP: #1781094)
  + Use typeset or local in profile.d scripts. (LP: #1784713)
  + OpenNebula: Fix null gateway6 [Akihiko Ota] (LP: #1768547)
  + oracle: fix detect_openstack to report True on OracleCloud.com DMI data
    (LP: #1784685)
  + tests: improve LXDInstance trying to workaround or catch bug.
  + update_metadata re-config on every boot comments and tests not quite
    right [Mike Gerdts]
  + tests: Collect build_info from system if available.
  + pylint: Fix pylint warnings reported in pylint 2.0.0.
  + get_linux_distro: add support for rhel via redhat-release.
  + get_linux_distro: add support for centos6 and rawhide flavors of redhat
    (LP: #1781229)
  + tools: add '--debug' to tools/net-convert.py
  + tests: bump the version of paramiko to 2.4.1.
  + docs: note in rtd about avoiding /tmp when writing files (LP: #1727876)
  + ubuntu,centos,debian: get_linux_distro to align with platform.dist
    (LP: #1780481)
  + Fix boothook docs on environment variable name (INSTANCE_I -&gt;
    INSTANCE_ID) [Marc Tamsky]
  + update_metadata: a datasource can support network re-config every boot
  + tests: drop salt-minion integration test (LP: #1778737)
  + Retry on failed import of gpg receive keys.
  + tools: Fix run-container when neither source or binary package requested.
  + docs: Fix a small spelling error. [Oz N Tiram]
  + tox: use simplestreams from git repository rather than bzr.
- From 18.3
  + docs: represent sudo:false in docs for user_groups config module
  + Explicitly prevent `sudo` access for user module
    [Jacob Bednarz] (LP: #1771468)
  + lxd: Delete default network and detach device if lxd-init created them.
    (LP: #1776958)
  + openstack: avoid unneeded metadata probe on non-openstack platforms
    (LP: #1776701)
  + stages: fix tracebacks if a module stage is undefined or empty
    [Robert Schweikert] (LP: #1770462)
  + Be more safe on string/bytes when writing multipart user-data to disk.
    (LP: #1768600)
  + Fix get_proc_env for pids that have non-utf8 content in environment.
    (LP: #1775371)
  + tests: fix salt_minion integration test on bionic and later
  + tests: provide human-readable integration test summary when --verbose
  + tests: skip chrony integration tests on lxd running artful or older
  + test: add optional --preserve-instance arg to integraiton tests
  + netplan: fix mtu if provided by network config for all rendered types
    (LP: #1774666)
  + tests: remove pip install workarounds for pylxd, take upstream fix.
  + subp: support combine_capture argument.
  + tests: ordered tox dependencies for pylxd install
  + util: add get_linux_distro function to replace platform.dist
    [Robert Schweikert] (LP: #1745235)
  + pyflakes: fix unused variable references identified by pyflakes 2.0.0.
  + Do not use the systemd_prefix macro, not available in this environment
    [Robert Schweikert]
  + doc: Add config info to ec2, openstack and cloudstack datasource docs
  + Enable SmartOS network metadata to work with netplan via per-subnet
    routes [Dan McDonald] (LP: #1763512)
  + openstack: Allow discovery in init-local using dhclient in a sandbox.
    (LP: #1749717)
  + tests: Avoid using https in httpretty, improve HttPretty test case.
    (LP: #1771659)
  + yaml_load/schema: Add invalid line and column nums to error message
  + Azure: Ignore NTFS mount errors when checking ephemeral drive
    [Paul Meyer]
  + packages/brpm: Get proper dependencies for cmdline distro.
  + packages: Make rpm spec files patch in package version like in debs.
  + tools/run-container: replace tools/run-centos with more generic.
  + Update version.version_string to contain packaged version. (LP: #1770712)
  + cc_mounts: Do not add devices to fstab that are already present.
    [Lars Kellogg-Stedman]
  + ds-identify: ensure that we have certain tokens in PATH. (LP: #1771382)
  + tests: enable Ubuntu Cosmic in integration tests [Joshua Powers]
  + read_file_or_url: move to url_helper, fix bug in its FileResponse.
  + cloud_tests: help pylint [Ryan Harper]
  + flake8: fix flake8 errors in previous commit.
  + typos: Fix spelling mistakes in cc_mounts.py log messages [Stephen Ford]
  + tests: restructure SSH and initial connections [Joshua Powers]
  + ds-identify: recognize container-other as a container, test SmartOS.
  + cloud-config.service: run After snap.seeded.service. (LP: #1767131)
  + tests: do not rely on host /proc/cmdline in test_net.py
    [Lars Kellogg-Stedman] (LP: #1769952)
  + ds-identify: Remove dupe call to is_ds_enabled, improve debug message.
  + SmartOS: fix get_interfaces for nics that do not have addr_assign_type.
  + tests: fix package and ca_cert cloud_tests on bionic
    (LP: #1769985)
  + ds-identify: make shellcheck 0.4.6 happy with ds-identify.
  + pycodestyle: Fix deprecated string literals, move away from flake8.
  + azure: Add reported ready marker file. [Joshua Chan] (LP: #1765214)
  + tools: Support adding a release suffix through packages/bddeb.
  + FreeBSD: Invoke growfs on ufs filesystems such that it does not prompt.
    [Harm Weites] (LP: #1404745)
  + tools: Re-use the orig tarball in packages/bddeb if it is around.
  + netinfo: fix netdev_pformat when a nic does not have an address
    assigned. (LP: #1766302)
  + collect-logs: add -v flag, write to stderr, limit journal to single
    boot. (LP: #1766335)
  + IBMCloud: Disable config-drive and nocloud only if IBMCloud is enabled.
    (LP: #1766401)
  + Add reporting events and log_time around early source of blocking time
    [Ryan Harper]
  + IBMCloud: recognize provisioning environment during debug boots.
    (LP: #1767166)
  + net: detect unstable network names and trigger a settle if needed
    [Ryan Harper] (LP: #1766287)
  + IBMCloud: improve documentation in datasource.
  + sysconfig: dhcp6 subnet type should not imply dhcpv4 [Vitaly Kuznetsov]
  + packages/debian/control.in: add missing dependency on iproute2.
    (LP: #1766711)
  + DataSourceSmartOS: add locking of serial device.
    [Mike Gerdts] (LP: #1746605)
  + DataSourceSmartOS: sdc:hostname is ignored [Mike Gerdts] (LP: #1765085)
  + DataSourceSmartOS: list() should always return a list
    [Mike Gerdts] (LP: #1763480)
  + schema: in validation, raise ImportError if strict but no jsonschema.
  + set_passwords: Add newline to end of sshd config, only restart if
    updated. (LP: #1677205)
  + pylint: pay attention to unused variable warnings.
  + doc: Add documentation for AliYun datasource. [Junjie Wang]
  + Schema: do not warn on duplicate items in commands. (LP: #1764264)
  + net: Depend on iproute2's ip instead of net-tools ifconfig or route
  + DataSourceSmartOS: fix hang when metadata service is down
    [Mike Gerdts] (LP: #1667735)
  + DataSourceSmartOS: change default fs on ephemeral disk from ext3 to
    ext4. [Mike Gerdts] (LP: #1763511)
  + pycodestyle: Fix invalid escape sequences in string literals.
  + Implement bash completion script for cloud-init command line
    [Ryan Harper]
  + tools: Fix make-tarball cli tool usage for development
  + renderer: support unicode in render_from_file.
  + Implement ntp client spec with auto support for distro selection
    [Ryan Harper] (LP: #1749722)
  + Apport: add Brightbox, IBM, LXD, and OpenTelekomCloud to list of clouds.
  + tests: fix ec2 integration network metadata validation
  + tests: fix integration tests to support lxd 3.0 release
  + correct documentation to match correct attribute name usage.
    [Dominic Schlegel] (LP: #1420018)
  + cc_resizefs, util: handle no /dev/zfs [Ryan Harper]
  + doc: Fix links in OpenStack datasource documentation.
    [Dominic Schlegel] (LP: #1721660)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1540987200">- Add cloud-init-static-net.patch (boo#1114160)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1541160000">- Add cloud-init-ostack-metadat-dencode.patch (bsc#1101894)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1546862400">- Update to version 18.5 (bsc#1121878, boo#1116767)
  + Remove
    0001-Fix-the-service-order-for-SUSE-distributions.patch
    0001-Follow-the-ever-bouncing-ball-for-openSUSE-distribut.patch
    0002-Add-tests-for-additional-openSUSE-distro-condition-m.patch
    included upstream
  + Forward port cloud-init-sysconf-ethsetup.patch
  + Add cloud-init-write-routes.patch
  + Add cloud-init-handle-def-route-set.patch
  + tests: add Disco release [Joshua Powers]
  + net: render 'metric' values in per-subnet routes (LP: #1805871)
  + write_files: add support for appending to files. [James Baxter]
  + config: On ubuntu select cloud archive mirrors for armel, armhf, arm64.
    (LP: #1805854)
  + dhclient-hook: cleanups, tests and fix a bug on 'down' event.
  + NoCloud: Allow top level 'network' key in network-config. (LP: #1798117)
  + ovf: Fix ovf network config generation gateway/routes (LP: #1806103)
  + azure: detect vnet migration via netlink media change event
    [Tamilmani Manoharan]
  + Azure: fix copy/paste error in error handling when reading azure ovf.
  + [Adam DePue]
  + tests: fix incorrect order of mocks in test_handle_zfs_root.
  + doc: Change dns_nameserver property to dns_nameservers. [Tomer Cohen]
  + OVF: identify label iso9660 filesystems with label 'OVF ENV'.
  + logs: collect-logs ignore instance-data-sensitive.json on non-root user
    (LP: #1805201)
  + net: Ephemeral*Network: add connectivity check via URL
  + azure: _poll_imds only retry on 404. Fail on Timeout (LP: #1803598)
  + resizefs: Prefix discovered devpath with '/dev/' when path does not
    exist [Igor GaliÄ?]
  + azure: retry imds polling on requests.Timeout (LP: #1800223)
  + azure: Accept variation in error msg from mount for ntfs volumes
    [Jason Zions] (LP: #1799338)
  + azure: fix regression introduced when persisting ephemeral dhcp lease
    [asakkurr]
  + azure: add udev rules to create cloud-init Gen2 disk name symlinks
    (LP: #1797480)
  + tests: ec2 mock missing httpretty user-data and instance-identity routes
  + azure: remove /etc/netplan/90-hotplug-azure.yaml when net from IMDS
  + azure: report ready to fabric after reprovision and reduce logging
    [asakkurr] (LP: #1799594)
  + query: better error when missing read permission on instance-data
  + instance-data: fallback to instance-data.json if sensitive is absent.
    (LP: #1798189)
  + docs: remove colon from network v1 config example. [Tomer Cohen]
  + Add cloud-id binary to packages for SUSE [Jason Zions]
  + systemd: On SUSE ensure cloud-init.service runs before wicked
    [Robert Schweikert] (LP: #1799709)
  + update detection of openSUSE variants [Robert Schweikert]
  + azure: Add apply_network_config option to disable network from IMDS
    (LP: #1798424)
  + Correct spelling in an error message (udevadm). [Katie McLaughlin]
  + tests: meta_data key changed to meta-data in ec2 instance-data.json
    (LP: #1797231)
  + tests: fix kvm integration test to assert flexible config-disk path
    (LP: #1797199)
  + tools: Add cloud-id command line utility
  + instance-data: Add standard keys platform and subplatform. Refactor ec2.
  + net: ignore nics that have "zero" mac address. (LP: #1796917)
  + tests: fix apt_configure_primary to be more flexible
  + Ubuntu: update sources.list to comment out deb-src entries. (LP: #74747)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548158400">- Add cloud-init-no-empty-resolv.patch (bsc#1119397)</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548936000">- Modify cloud-init-write-routes.patch (boo#1123694)
  + Drop a '-' in the route file for the last column</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836800">- Add cloud-init-proper-ipv6-varname.patch (bsc#1126101)
  + Use the proper name to designate IPv6 addresses in ifcfg-* files</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836801">- Modify cloud-init-write-routes.patch (bsc#1125992)
  + Fix the order of calls, the SUSE implementation of route config file
    writing must clobber the default implementation.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1550836802">- Add cloud-init-trigger-udev.patch (bsc#1125950)
  + When the user configures a new rules file for network devices
    the rules may not apply immediately, trigger udevadm</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1553947200">- Update cloud-init-trigger-udev.patch (bsc#1125950)
  + Write the udev rules to a different file than the default
  + Settle udev if not all configured devices are in the device tree to
    avoid race condition between udev and cloud-init</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1556107200">- Update cloud-init-write-routes.patch (bsc#1132692)
  + Properly accumulate all the defined routes for a given network device.
    Previously only the last defined route was written to the routes file.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1559304000">- Update to version 19.1 (bsc#1136440)
  + Remove, included upstream
  - fix-default-systemd-unit-dir.patch
  - cloud-init-sysconf-ethsetup.patch
  - cloud-init-handle-def-route-set.patch
  - cloud-init-no-empty-resolv.patch
  - cloud-init-proper-ipv6-varname.patch
  + Forward port
  - cloud-init-trigger-udev.patch
  + Add cloud-init-detect-nova.diff (bsc#1136440)
  + Modify cloud-init-python2-sigpipe.patch, import signal and constants
  + Update spec to account for new location of bash completion
  + freebsd: add chpasswd pkg in the image [Gonéri Le Bouder]
  + tests: add Eoan release [Paride Legovini]
  + cc_mounts: check if mount -a on no-change fstab path
    [Jason Zions (MSFT)] (LP: #1825596)
  + replace remaining occurrences of LOG.warn [Daniel Watkins]
  + DataSourceAzure: Adjust timeout for polling IMDS [Anh Vo]
  + Azure: Changes to the Hyper-V KVP Reporter [Anh Vo]
  + git tests: no longer show warning about safe yaml.
  + tools/read-version: handle errors [Chad Miller]
  + net/sysconfig: only indicate available on known sysconfig distros
    (LP: #1819994)
  + packages: update rpm specs for new bash completion path
    [Daniel Watkins] (LP: #1825444)
  + test_azure: mock util.SeLinuxGuard where needed
    [Jason Zions (MSFT)] (LP: #1825253)
  + setup.py: install bash completion script in new location [Daniel Watkins]
  + mount_cb: do not pass sync and rw options to mount
    [Gonéri Le Bouder] (LP: #1645824)
  + cc_apt_configure: fix typo in apt documentation [Dominic Schlegel]
  + Revert "DataSource: move update_events from a class to an instance..."
    [Daniel Watkins]
  + Change DataSourceNoCloud to ignore file system label's case.
    [Risto Oikarinen]
  + cmd:main.py: Fix missing 'modules-init' key in modes dict
    [Antonio Romito] (LP: #1815109)
  + ubuntu_advantage: rewrite cloud-config module
  + Azure: Treat _unset network configuration as if it were absent
    [Jason Zions (MSFT)] (LP: #1823084)
  + DatasourceAzure: add additional logging for azure datasource [Anh Vo]
  + cloud_tests: fix apt_pipelining test-cases
  + Azure: Ensure platform random_seed is always serializable as JSON.
    [Jason Zions (MSFT)]
  + net/sysconfig: write out SUSE-compatible IPv6 config [Robert Schweikert]
  + tox: Update testenv for openSUSE Leap to 15.0 [Thomas Bechtold]
  + net: Fix ipv6 static routes when using eni renderer
    [Raphael Glon] (LP: #1818669)
  + Add ubuntu_drivers config module [Daniel Watkins]
  + doc: Refresh Azure walinuxagent docs [Daniel Watkins]
  + tox: bump pylint version to latest (2.3.1) [Daniel Watkins]
  + DataSource: move update_events from a class to an instance attribute
    [Daniel Watkins] (LP: #1819913)
  + net/sysconfig: Handle default route setup for dhcp configured NICs
    [Robert Schweikert] (LP: #1812117)
  + DataSourceEc2: update RELEASE_BLOCKER to be more accurate
    [Daniel Watkins]
  + cloud-init-per: POSIX sh does not support string subst, use sed
    (LP: #1819222)
  + Support locking user with usermod if passwd is not available.
  + Example for Microsoft Azure data disk added. [Anton Olifir]
  + clean: correctly determine the path for excluding seed directory
    [Daniel Watkins] (LP: #1818571)
  + helpers/openstack: Treat unknown link types as physical
    [Daniel Watkins] (LP: #1639263)
  + drop Python 2.6 support and our NIH version detection [Daniel Watkins]
  + tip-pylint: Fix assignment-from-return-none errors
  + net: append type:dhcp[46] only if dhcp[46] is True in v2 netconfig
    [Kurt Stieger] (LP: #1818032)
  + cc_apt_pipelining: stop disabling pipelining by default
    [Daniel Watkins] (LP: #1794982)
  + tests: fix some slow tests and some leaking state [Daniel Watkins]
  + util: don't determine string_types ourselves [Daniel Watkins]
  + cc_rsyslog: Escape possible nested set [Daniel Watkins] (LP: #1816967)
  + Enable encrypted_data_bag_secret support for Chef
    [Eric Williams] (LP: #1817082)
  + azure: Filter list of ssh keys pulled from fabric [Jason Zions (MSFT)]
  + doc: update merging doc with fixes and some additional details/examples
  + tests: integration test failure summary to use traceback if empty error
  + This is to fix https://bugs.launchpad.net/cloud-init/+bug/1812676
    [Vitaly Kuznetsov]
  + EC2: Rewrite network config on AWS Classic instances every boot
    [Guilherme G. Piccoli] (LP: #1802073)
  + netinfo: Adjust ifconfig output parsing for FreeBSD ipv6 entries
    (LP: #1779672)
  + netplan: Don't render yaml aliases when dumping netplan (LP: #1815051)
  + add PyCharm IDE .idea/ path to .gitignore [Dominic Schlegel]
  + correct grammar issue in instance metadata documentation
    [Dominic Schlegel] (LP: #1802188)
  + clean: cloud-init clean should not trace when run from within cloud_dir
    (LP: #1795508)
  + Resolve flake8 comparison and pycodestyle over-ident issues
    [Paride Legovini]
  + opennebula: also exclude epochseconds from changed environment vars
    (LP: #1813641)
  + systemd: Render generator from template to account for system
    differences. [Robert Schweikert]
  + sysconfig: On SUSE, use STARTMODE instead of ONBOOT
    [Robert Schweikert] (LP: #1799540)
  + flake8: use ==/!= to compare str, bytes, and int literals
    [Paride Legovini]
  + opennebula: exclude EPOCHREALTIME as known bash env variable with a
    delta (LP: #1813383)
  + tox: fix disco httpretty dependencies for py37 (LP: #1813361)
  + run-container: uncomment baseurl in yum.repos.d/*.repo when using a
    proxy [Paride Legovini]
  + lxd: install zfs-linux instead of zfs meta package
    [Johnson Shi] (LP: #1799779)
  + net/sysconfig: do not write a resolv.conf file with only the header.
    [Robert Schweikert]
  + net: Make sysconfig renderer compatible with Network Manager.
    [Eduardo Otubo]
  + cc_set_passwords: Fix regex when parsing hashed passwords
    [Marlin Cremers] (LP: #1811446)
  + net: Wait for dhclient to daemonize before reading lease file
    [Jason Zions] (LP: #1794399)
  + [Azure] Increase retries when talking to Wireserver during metadata walk
    [Jason Zions]
  + Add documentation on adding a datasource.
  + doc: clean up some datasource documentation.
  + ds-identify: fix wrong variable name in ovf_vmware_transport_guestinfo.
  + Scaleway: Support ssh keys provided inside an instance tag. [PORTE Loïc]
  + OVF: simplify expected return values of transport functions.
  + Vmware: Add support for the com.vmware.guestInfo OVF transport.
    (LP: #1807466)
  + HACKING.rst: change contact info to Josh Powers
  + Update to pylint 2.2.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1562328000">- Follow the ever changing inconsistencies of version definitions and
  detection in the build service.
  + No more suse_version in SUSE internal instance for SLES 15 SP1</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1565956800">- Update cloud-init-write-routes.patch (bsc#1144881)
  + If no routes are set for a subnet but the subnet has a gateway
    specified, set the gateway as the default route for the interface</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216000">- Update cloud-init-trigger-udev.patch (bsc#1144363)
  - The __str__ implementation no longer delivers the name of the interface,
    use the "name" attribute instead to form a proper path in the
    sysfs tree</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1566216001">- Add cloud-init-add-static-routes.diff (bsc#1141969)
  + Properly handle static routes. The EphemeralDHCP context manager did
    not parse or handle rfc3442 classless static routes which prevented
    reading datasource metadata in some clouds.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569240000">- Follow up to (bsc#1144363)
  - In this implementation the "name" is not yet an attribute, use
    get() to obtain the value from a dict. Source code version confusion.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326400">- Add cloud-init-noresolv-merge-no-dns-data.diff
  - Avoid writing resolv.conf if the network configuration contains no
    dns entries.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1569326401">- Add cloud-init-after-wicked.patch
  - Change the service order, the cloud-init service wants to run after
    networking is started</changelog>
</package>
<package pkgid="e1fea1445cfaa840c50737ddc8a7aaf6e8e2dfbc9541fd08680f9b3cbdedb575" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="21613f4ef4c6a727003a57ef916ca7107afcc1f6e536ba280db6b1e3e22164ca" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="0.9" rel="lp150.4.6.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
</package>
<package pkgid="8e3511310bbb96b0e9c401f13189bf7c0b24da89928ec6b14dfd728a65e01222" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp150.4.10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="cc40738913361b29e4983f860447b06b63d9b0d9731f478990a57c9e2114b201" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.0" rel="lp150.4.10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="0166933a0bd1d171b0dd6b411a9d359cc85dca6106537bd4920b5f8069e7a077" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="3c3286a6db67889cd5fcd43336d5853e3fb9d5f9cc03242303a255c7520a8719" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="0.9" rel="lp150.4.6.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
</package>
<package pkgid="9cb190bb8fb0b2f772a32da4dd7485d82a27908dce308508a7196d932157769c" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp150.4.10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="629bdc019c0531a067eb4321ca54e620216021eeda7a20e2ad5e7b4c318f0518" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.0" rel="lp150.4.10.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
</package>
<package pkgid="4bd143c95132b3147ce00cd0f0d8c1a9ef19b6a86b36ce919ede0c2497ba4490" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1534346580.be86a9f2" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476187200">- Update to version 1.0.12+git.1476172419.3e86358:
  * Upstream is now github.com/ClusterLabs/cluster-glue.git
  * stonith: describe -E option</changelog>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
</package>
<package pkgid="97a8101b84a135adf448975ae5f7d9d919ca54bca44aacd0425fb3a7551e8da4" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1534346580.be86a9f2" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1476187200">- Update to version 1.0.12+git.1476172419.3e86358:
  * Upstream is now github.com/ClusterLabs/cluster-glue.git
  * stonith: describe -E option</changelog>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
</package>
<package pkgid="5498010bace678189c7bda145ec3246a7bc90c32e6e2f44c68538af8d5839766" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="8e3b3a72949628dbb95f85f5d15a9cb2f04a7ecbf31a5dac70eea528d5af9365" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1560323319.fd5a3bef" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1476792000">- Update to version 1.0.12+git.1476707642.08bec62:
  * low: cl_plumbing: Fix incorrect negations
- Drop merged patches:
  * Remove cluster-glue-gcc5.patch
  * Remove remove-unused-constants.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1476964800">- Update to version 1.0.12+v1.git.1476869614.524e5d0:
  * Adjust version to correct sorting</changelog>
  <changelog author="kgronlund@suse.com" date="1478088000">- Update to version 1.0.12+v1.git.1478088779.afaeeb2:
  * Low: stonith: Convert gethostbyname() usage to getaddrinfo()
  * Low: apcmastersnmp: Convert gethostbyname() usage to getaddrinfo()
  * Low: ipmilan_command: Convert gethostbyname() to getaddrinfo()
  * Low: wti_mpc: Convert gethostbyname() usage to getaddrinfo()</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 1.0.12+v1.git.1485976882.03d61cd:
  * Low: ipc: fix poll function parameter type
  * Medium: hb_report: invoke crm to create a report</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)
- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
</package>
<package pkgid="88e590530b827bfc78493e6279eae08f0713c46e221bb21da010e615e217f7d2" name="cmake" arch="src">
  <version epoch="0" ver="3.10.2" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1484481600">- update to 3.7.2:
  * server-mode: Do not ignore the first cacheArgument on configure
  * server-mode: Call ResetErrorOccured before configure
  * server-mode: Do not crash when running into INTERFACE_LIBRARY
  * FindPostgreSQL: automatically find installations from
    yum.postgresql.org
  * FindBoost: Add support for 1.63
  * cmake-server: Do not try watching subdirectories with empty names
  * fixes for other platforms</changelog>
  <changelog author="pgajdos@suse.com" date="1490702400">- find ImageMagick 7
  + cmake-ImageMagick7.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1490788800">- Add reproducible.patch and reproducible2.patch
  to allow for reproducible builds of freerdp and other packages</changelog>
  <changelog author="foss@grueninger.de" date="1491912000">- update to 3.8.0:
  * support C#
  * support CUDA s a first-class language
  * improve try_compile
  * improve compile_features
  full changelog: https://blog.kitware.com/cmake-3-8-0-available-for-download/
- update system-libs.patch
- drop reproducible.patch and reproducible2.patch which are part
  of upstream</changelog>
  <changelog author="foss@grueninger.de" date="1493726400">- update to 3.8.1:
  * FindOpenSSL: Add more library name alternatives
  * FindBoost: Restore tolerance of backslashes in paths
  * Tests: Fix FindModulesExecuteAll when KDE4 is installed
  * source_group: Fix TREE with root that is not current source dir
  * FindMatlab: Add support for Matlab 2017a</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Use system rhash</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 3.8.2:
  * FindDevIL: Restore IL_FOUND result variable
  * FindOpenSSL: Restore support for crypto-only result
  * source_group: Restore TREE support for relative paths
  * VS: Fix debugging of C++ executables if CSharp is enabled</changelog>
  <changelog author="coolo@suse.com" date="1502107200">- Buildrequire libcurl-mini-devel for TW to avoid cycles</changelog>
  <changelog author="foss@grueninger.de" date="1502193600">- update to 3.9.0:
  * CMake is now aware of the C and C++ standards and their
    associated meta-features for the following compiler ids:
    Cray, PGI, and XL.
  * The add_library() command IMPORTED option learned to support
    Object Libraries.
  * All find_ commands now have a PACKAGE_ROOT search path group
    that is first in the search heuristics. If a find_ command is
    called from inside a find module, then the CMake variable and
    environment variable named _ROOT are used as prefixes
    and are the first set of paths to be searched.
  * The install(TARGETS) command learned a new OBJECTS option to
    specify where to install Object Libraries.
  * The install(EXPORT) command learned how to export Object
    Libraries.
  * A BUILD_WITH_INSTALL_NAME_DIR target property and corresponding
    CMAKE_BUILD_WITH_INSTALL_NAME_DIR variable were added to control
    whether to use the INSTALL_NAME_DIR target property value for
    binaries in the build tree.
  * A CUDA_PTX_COMPILATION target property was added to Object
    Libraries to support compiling to .ptx files instead of host
    object files.
  * A new GoogleTest module was added to provide the
    gtest_add_tests() function independently of the FindGTest
    module. The function was also updated to support keyword arguments,
    with functionality expanded to allow a test name prefix and suffix
    to be specified, the dependency on the source files to be optional
    and the list of discovered test cases to be returned to the caller.
  * The Ninja generator has loosened the dependencies of object
    compilation. Object compilation now depends only on custom targets
    and custom commands associated with libraries on which the object?s
    target depends and no longer depends on the libraries themselves.
    Source files in dependent targets may now compile without waiting
    for their targets? dependencies to link.
  * Interprocedural optimization (IPO) is now supported for GNU and
    Clang compilers using link time optimization (LTO) flags. See the
    INTERPROCEDURAL_OPTIMIZATION target property and
    CheckIPOSupported module.
  * The TARGET_OBJECTS generator expression is now supported by
    the add_custom_command() and file(GENERATE) commands.
- Removed cmake-ImageMagick7.patch which became part of upstream.</changelog>
  <changelog author="astieger@suse.com" date="1505044800">- cmake 3.9.2:
  * Various AUTOUIC fixes
  * FindOpenMP: Restore OpenMP_FOUND result variable
  * Clang: Find version-suffixed LLVM/Clang binutils
  * FindOpenMP: Restore OpenMP_FOUND result variable
- includes changes from 3.9.1:
  * The ?find_? command ?PACKAGE_ROOT? search path group added by
    CMake 3.9.0 has been removed for the 3.9 series due to
    regressions caused by new use of ?&lt;PackageName&gt;_ROOT?
    variables. The behavior may be re-introduced in the future in
    a more-compatible way.</changelog>
  <changelog author="riafarov@suse.com" date="1507204800">- update to 3.9.4:
  * FindBoost: Finish reverting "Simplify search in lists" for 3.9
- includes changes from 3.9.3:
  * VS: Do not consider MAP_IMPORTED_CONFIG_ on non-imported targets
  bootstrap: Fix running multiple times in-source
  * vim: Remove default setting of expandtab
  * FindBoost: Add support for Boost 1.65.0 and 1.65.1 to CMake 3.9
  * CTest: fix crash if source file for coverage cannot be found
  * Autogen: Backport autogen target dependency as file dependency fix
  * Autogen: Tests: Backport tests for _autogen target dependencies</changelog>
  <changelog author="aavindraa@gmail.com" date="1509710400">- update to 3.9.5:
  * Autogen: Don't add AUTOMOC_MOC_OPTIONS to moc-predefs command</changelog>
  <changelog author="jmatejek@suse.com" date="1510056000">- switch to python3-base for requirements
- switch to python3 for cmake.prov</changelog>
  <changelog author="foss@grueninger.de" date="1511870400">- Update to 3.10.0
  * The flang Fortran compiler is now supported, with compiler id
    ?Flang?.
  * The ?include_guard()? command was introduced.
  * ?FindMPI? received a major overhaul. It now features language
    specific components, better Fortran support, and support for
    statically linked MPI implementations.
  * A ?FindOpenACC? module was added.
  full changelog: https://cmake.org/cmake/help/v3.10/release/3.10.html
- update form.patch</changelog>
  <changelog author="foss@grueninger.de" date="1513425600">- Update to 3.10.1
  * CUDA: Treat /usr/include as an implicit include directory
  * FindMPI: Correct legacy variable handling, Fix multiple configure
    runs, Fix various legacy problems
  * IAR: FindBinUtils should work for CXX as well as C
  * GoogleTest: Fix multiple discovery on same target, Improve
    gtest_discover_tests messages, Add timeout to discovery,
    Add test for missing test executable
  * Do not mistake clang-cl 6.0 for GNU-like clang
  full changelog: https://blog.kitware.com/cmake-3-10-1-available-for-download/</changelog>
  <changelog author="virtuousfox@gmail.com" date="1514980800">- Add cmake-3.10.1_boost-1.66.patch to fix detection of Boost 1.66
  (fixes boo#1074314 among other boost-dependant cmake-users)</changelog>
  <changelog author="tchvatal@suse.com" date="1515067200">- Do not add no-undefined on module linking, should reduce us a bit
  of redefining as most modules dynamically load stuff</changelog>
  <changelog author="sflees@suse.de" date="1515067201">- Add feature-suse-python-interp-search-order.patch to make sure
  that python3 is found before python2
- switch to using %autopatch</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- Update to 3.10.2:
  * KWIML: Backport RISC-V update to CMake 3.10
  * FindPostgreSQL: Add support for PG10
  * cmGraphVizWriter: Updated to create and follow dependers for
  * interface targets
  * Autogen: Fix for problematic nested list separator
  * Autogen: Ignore not existing source files in cmMakefile
- cleanup spec file</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1552478400">- Add support for %cmake_build macro for compat with newer systems
  (bsc#1129024)</changelog>
</package>
<package pkgid="397105acd57d5fde5444c9fcab95bae7b1f2a566c5e12ddc4dc80a662653450f" name="cmake" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1484481600">- update to 3.7.2:
  * server-mode: Do not ignore the first cacheArgument on configure
  * server-mode: Call ResetErrorOccured before configure
  * server-mode: Do not crash when running into INTERFACE_LIBRARY
  * FindPostgreSQL: automatically find installations from
    yum.postgresql.org
  * FindBoost: Add support for 1.63
  * cmake-server: Do not try watching subdirectories with empty names
  * fixes for other platforms</changelog>
  <changelog author="pgajdos@suse.com" date="1490702400">- find ImageMagick 7
  + cmake-ImageMagick7.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1490788800">- Add reproducible.patch and reproducible2.patch
  to allow for reproducible builds of freerdp and other packages</changelog>
  <changelog author="foss@grueninger.de" date="1491912000">- update to 3.8.0:
  * support C#
  * support CUDA s a first-class language
  * improve try_compile
  * improve compile_features
  full changelog: https://blog.kitware.com/cmake-3-8-0-available-for-download/
- update system-libs.patch
- drop reproducible.patch and reproducible2.patch which are part
  of upstream</changelog>
  <changelog author="foss@grueninger.de" date="1493726400">- update to 3.8.1:
  * FindOpenSSL: Add more library name alternatives
  * FindBoost: Restore tolerance of backslashes in paths
  * Tests: Fix FindModulesExecuteAll when KDE4 is installed
  * source_group: Fix TREE with root that is not current source dir
  * FindMatlab: Add support for Matlab 2017a</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Use system rhash</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 3.8.2:
  * FindDevIL: Restore IL_FOUND result variable
  * FindOpenSSL: Restore support for crypto-only result
  * source_group: Restore TREE support for relative paths
  * VS: Fix debugging of C++ executables if CSharp is enabled</changelog>
  <changelog author="coolo@suse.com" date="1502107200">- Buildrequire libcurl-mini-devel for TW to avoid cycles</changelog>
  <changelog author="foss@grueninger.de" date="1502193600">- update to 3.9.0:
  * CMake is now aware of the C and C++ standards and their
    associated meta-features for the following compiler ids:
    Cray, PGI, and XL.
  * The add_library() command IMPORTED option learned to support
    Object Libraries.
  * All find_ commands now have a PACKAGE_ROOT search path group
    that is first in the search heuristics. If a find_ command is
    called from inside a find module, then the CMake variable and
    environment variable named _ROOT are used as prefixes
    and are the first set of paths to be searched.
  * The install(TARGETS) command learned a new OBJECTS option to
    specify where to install Object Libraries.
  * The install(EXPORT) command learned how to export Object
    Libraries.
  * A BUILD_WITH_INSTALL_NAME_DIR target property and corresponding
    CMAKE_BUILD_WITH_INSTALL_NAME_DIR variable were added to control
    whether to use the INSTALL_NAME_DIR target property value for
    binaries in the build tree.
  * A CUDA_PTX_COMPILATION target property was added to Object
    Libraries to support compiling to .ptx files instead of host
    object files.
  * A new GoogleTest module was added to provide the
    gtest_add_tests() function independently of the FindGTest
    module. The function was also updated to support keyword arguments,
    with functionality expanded to allow a test name prefix and suffix
    to be specified, the dependency on the source files to be optional
    and the list of discovered test cases to be returned to the caller.
  * The Ninja generator has loosened the dependencies of object
    compilation. Object compilation now depends only on custom targets
    and custom commands associated with libraries on which the object?s
    target depends and no longer depends on the libraries themselves.
    Source files in dependent targets may now compile without waiting
    for their targets? dependencies to link.
  * Interprocedural optimization (IPO) is now supported for GNU and
    Clang compilers using link time optimization (LTO) flags. See the
    INTERPROCEDURAL_OPTIMIZATION target property and
    CheckIPOSupported module.
  * The TARGET_OBJECTS generator expression is now supported by
    the add_custom_command() and file(GENERATE) commands.
- Removed cmake-ImageMagick7.patch which became part of upstream.</changelog>
  <changelog author="astieger@suse.com" date="1505044800">- cmake 3.9.2:
  * Various AUTOUIC fixes
  * FindOpenMP: Restore OpenMP_FOUND result variable
  * Clang: Find version-suffixed LLVM/Clang binutils
  * FindOpenMP: Restore OpenMP_FOUND result variable
- includes changes from 3.9.1:
  * The ?find_? command ?PACKAGE_ROOT? search path group added by
    CMake 3.9.0 has been removed for the 3.9 series due to
    regressions caused by new use of ?&lt;PackageName&gt;_ROOT?
    variables. The behavior may be re-introduced in the future in
    a more-compatible way.</changelog>
  <changelog author="riafarov@suse.com" date="1507204800">- update to 3.9.4:
  * FindBoost: Finish reverting "Simplify search in lists" for 3.9
- includes changes from 3.9.3:
  * VS: Do not consider MAP_IMPORTED_CONFIG_ on non-imported targets
  bootstrap: Fix running multiple times in-source
  * vim: Remove default setting of expandtab
  * FindBoost: Add support for Boost 1.65.0 and 1.65.1 to CMake 3.9
  * CTest: fix crash if source file for coverage cannot be found
  * Autogen: Backport autogen target dependency as file dependency fix
  * Autogen: Tests: Backport tests for _autogen target dependencies</changelog>
  <changelog author="aavindraa@gmail.com" date="1509710400">- update to 3.9.5:
  * Autogen: Don't add AUTOMOC_MOC_OPTIONS to moc-predefs command</changelog>
  <changelog author="jmatejek@suse.com" date="1510056000">- switch to python3-base for requirements
- switch to python3 for cmake.prov</changelog>
  <changelog author="foss@grueninger.de" date="1511870400">- Update to 3.10.0
  * The flang Fortran compiler is now supported, with compiler id
    ?Flang?.
  * The ?include_guard()? command was introduced.
  * ?FindMPI? received a major overhaul. It now features language
    specific components, better Fortran support, and support for
    statically linked MPI implementations.
  * A ?FindOpenACC? module was added.
  full changelog: https://cmake.org/cmake/help/v3.10/release/3.10.html
- update form.patch</changelog>
  <changelog author="foss@grueninger.de" date="1513425600">- Update to 3.10.1
  * CUDA: Treat /usr/include as an implicit include directory
  * FindMPI: Correct legacy variable handling, Fix multiple configure
    runs, Fix various legacy problems
  * IAR: FindBinUtils should work for CXX as well as C
  * GoogleTest: Fix multiple discovery on same target, Improve
    gtest_discover_tests messages, Add timeout to discovery,
    Add test for missing test executable
  * Do not mistake clang-cl 6.0 for GNU-like clang
  full changelog: https://blog.kitware.com/cmake-3-10-1-available-for-download/</changelog>
  <changelog author="virtuousfox@gmail.com" date="1514980800">- Add cmake-3.10.1_boost-1.66.patch to fix detection of Boost 1.66
  (fixes boo#1074314 among other boost-dependant cmake-users)</changelog>
  <changelog author="tchvatal@suse.com" date="1515067200">- Do not add no-undefined on module linking, should reduce us a bit
  of redefining as most modules dynamically load stuff</changelog>
  <changelog author="sflees@suse.de" date="1515067201">- Add feature-suse-python-interp-search-order.patch to make sure
  that python3 is found before python2
- switch to using %autopatch</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- Update to 3.10.2:
  * KWIML: Backport RISC-V update to CMake 3.10
  * FindPostgreSQL: Add support for PG10
  * cmGraphVizWriter: Updated to create and follow dependers for
  * interface targets
  * Autogen: Fix for problematic nested list separator
  * Autogen: Ignore not existing source files in cmMakefile
- cleanup spec file</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1552478400">- Add support for %cmake_build macro for compat with newer systems
  (bsc#1129024)</changelog>
</package>
<package pkgid="8c943531fedeb094cc35dca57442ab2200d9472cdcdaf49bb7dc2080bbb95488" name="cmake-gui" arch="src">
  <version epoch="0" ver="3.10.2" rel="lp150.2.3.1"/>
  <changelog author="foss@grueninger.de" date="1469361600">- update to CMake 3.6.1
  no changes specific to CMake-GUI
  full changelog: https://blog.kitware.com/cmake-3-6-1-available-for-download/</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Remove wrong FIXME from spec
- Require qt5 gui everywhere as it on all supported platforms</changelog>
  <changelog author="foss@grueninger.de" date="1473768000">- update to CMake 3.6.2
  no changes specific to CMake-GUI
  full changelog: https://blog.kitware.com/cmake-3-6-2-available-for-download/</changelog>
  <changelog author="foss@grueninger.de" date="1479297600">- update to CMake 3.7.0
  no changes specific to CMake-GUI for Linux
  full changelog: https://blog.kitware.com/cmake-3-7-0-available-for-download/</changelog>
  <changelog author="foss@grueninger.de" date="1479297601">- use libuv which is shipped in CMake's tarball for older systems
  that do not provide this lib on their own</changelog>
  <changelog author="sflees@suse.de" date="1479384000">- Fix typo in libuv detection</changelog>
  <changelog author="foss@grueninger.de" date="1480507200">- update to CMake 3.7.1
  no changes specific to CMake-GUI for Linux
  full changelog: https://blog.kitware.com/cmake-3-7-1-available-for-download/</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- update to 3.7.2:
  * no changes specific to CMake-GUI for Linux</changelog>
  <changelog author="foss@grueninger.de" date="1491912000">- update to 3.8.0:
  * no changes specific to CMake-GUI for Linux</changelog>
  <changelog author="foss@grueninger.de" date="1493726400">- update to 3.8.1:
  * no changes specific to CMake-GUI</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Use system rhash</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 3.8.2:
  * No changes in CMake-GUI</changelog>
  <changelog author="foss@grueninger.de" date="1502193600">- Update to version 3.9.0:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1502712000">- fix moved .desktop file</changelog>
  <changelog author="astieger@suse.com" date="1505044800">- gmake-gui 3.9.2
  * No changes specific to CMake-GUI</changelog>
  <changelog author="riafarov@suse.com" date="1507204800">- Update to version 3.9.4:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="aavindraa@gmail.com" date="1509710400">- Update to version 3.9.5:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="foss@grueninger.de" date="1511870400">- Update to version 3.10.0
  * No changes specific to CMake-GUI
- update form.patch</changelog>
  <changelog author="foss@grueninger.de" date="1513425600">- Update to version 3.10.1
  * No changes specific to CMake-GUI</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- Update to version 3.10.2
  * No changes specific to CMake-GUI
- cleanup spec file</changelog>
</package>
<package pkgid="6c786bc7bb7a38bd6618b841231e0e0fcac5e0093321106e2d7d5815773badd0" name="cmake-gui" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="lp150.2.3.1"/>
  <changelog author="foss@grueninger.de" date="1469361600">- update to CMake 3.6.1
  no changes specific to CMake-GUI
  full changelog: https://blog.kitware.com/cmake-3-6-1-available-for-download/</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Remove wrong FIXME from spec
- Require qt5 gui everywhere as it on all supported platforms</changelog>
  <changelog author="foss@grueninger.de" date="1473768000">- update to CMake 3.6.2
  no changes specific to CMake-GUI
  full changelog: https://blog.kitware.com/cmake-3-6-2-available-for-download/</changelog>
  <changelog author="foss@grueninger.de" date="1479297600">- update to CMake 3.7.0
  no changes specific to CMake-GUI for Linux
  full changelog: https://blog.kitware.com/cmake-3-7-0-available-for-download/</changelog>
  <changelog author="foss@grueninger.de" date="1479297601">- use libuv which is shipped in CMake's tarball for older systems
  that do not provide this lib on their own</changelog>
  <changelog author="sflees@suse.de" date="1479384000">- Fix typo in libuv detection</changelog>
  <changelog author="foss@grueninger.de" date="1480507200">- update to CMake 3.7.1
  no changes specific to CMake-GUI for Linux
  full changelog: https://blog.kitware.com/cmake-3-7-1-available-for-download/</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- update to 3.7.2:
  * no changes specific to CMake-GUI for Linux</changelog>
  <changelog author="foss@grueninger.de" date="1491912000">- update to 3.8.0:
  * no changes specific to CMake-GUI for Linux</changelog>
  <changelog author="foss@grueninger.de" date="1493726400">- update to 3.8.1:
  * no changes specific to CMake-GUI</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Use system rhash</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 3.8.2:
  * No changes in CMake-GUI</changelog>
  <changelog author="foss@grueninger.de" date="1502193600">- Update to version 3.9.0:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1502712000">- fix moved .desktop file</changelog>
  <changelog author="astieger@suse.com" date="1505044800">- gmake-gui 3.9.2
  * No changes specific to CMake-GUI</changelog>
  <changelog author="riafarov@suse.com" date="1507204800">- Update to version 3.9.4:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="aavindraa@gmail.com" date="1509710400">- Update to version 3.9.5:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="foss@grueninger.de" date="1511870400">- Update to version 3.10.0
  * No changes specific to CMake-GUI
- update form.patch</changelog>
  <changelog author="foss@grueninger.de" date="1513425600">- Update to version 3.10.1
  * No changes specific to CMake-GUI</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- Update to version 3.10.2
  * No changes specific to CMake-GUI
- cleanup spec file</changelog>
</package>
<package pkgid="de3149224e119914cf6fd288df332bad23a511bfbac9f6f8e9270e4620c907f5" name="cmake-man" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="lp150.2.3.1"/>
  <changelog author="foss@grueninger.de" date="1469361600">- update to CMake 3.6.1
  no changes specific to CMake-GUI
  full changelog: https://blog.kitware.com/cmake-3-6-1-available-for-download/</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Remove wrong FIXME from spec
- Require qt5 gui everywhere as it on all supported platforms</changelog>
  <changelog author="foss@grueninger.de" date="1473768000">- update to CMake 3.6.2
  no changes specific to CMake-GUI
  full changelog: https://blog.kitware.com/cmake-3-6-2-available-for-download/</changelog>
  <changelog author="foss@grueninger.de" date="1479297600">- update to CMake 3.7.0
  no changes specific to CMake-GUI for Linux
  full changelog: https://blog.kitware.com/cmake-3-7-0-available-for-download/</changelog>
  <changelog author="foss@grueninger.de" date="1479297601">- use libuv which is shipped in CMake's tarball for older systems
  that do not provide this lib on their own</changelog>
  <changelog author="sflees@suse.de" date="1479384000">- Fix typo in libuv detection</changelog>
  <changelog author="foss@grueninger.de" date="1480507200">- update to CMake 3.7.1
  no changes specific to CMake-GUI for Linux
  full changelog: https://blog.kitware.com/cmake-3-7-1-available-for-download/</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- update to 3.7.2:
  * no changes specific to CMake-GUI for Linux</changelog>
  <changelog author="foss@grueninger.de" date="1491912000">- update to 3.8.0:
  * no changes specific to CMake-GUI for Linux</changelog>
  <changelog author="foss@grueninger.de" date="1493726400">- update to 3.8.1:
  * no changes specific to CMake-GUI</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Use system rhash</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 3.8.2:
  * No changes in CMake-GUI</changelog>
  <changelog author="foss@grueninger.de" date="1502193600">- Update to version 3.9.0:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1502712000">- fix moved .desktop file</changelog>
  <changelog author="astieger@suse.com" date="1505044800">- gmake-gui 3.9.2
  * No changes specific to CMake-GUI</changelog>
  <changelog author="riafarov@suse.com" date="1507204800">- Update to version 3.9.4:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="aavindraa@gmail.com" date="1509710400">- Update to version 3.9.5:
  * No changes specific to CMake-GUI</changelog>
  <changelog author="foss@grueninger.de" date="1511870400">- Update to version 3.10.0
  * No changes specific to CMake-GUI
- update form.patch</changelog>
  <changelog author="foss@grueninger.de" date="1513425600">- Update to version 3.10.1
  * No changes specific to CMake-GUI</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- Update to version 3.10.2
  * No changes specific to CMake-GUI
- cleanup spec file</changelog>
</package>
<package pkgid="b3b2fdc5be6205431c1e26f9d435ff07b7fd1b1c93006a45c3e5b6d210b4f4f6" name="codec2" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="934c6dbf84d7fc0383a5c6257224094b054bffc7dac1937ca3bc48e1cf948517" name="codec2-devel" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="f84571e01442b9c2569bd54bd3212ca755d3bf6f35b60731b2c4ea3c47f27bf5" name="codec2-examples" arch="noarch">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="bf79087c7aa723b98f3c341b2b05712e3d54a3a948588e616fb1aef20fdc2981" name="collectl" arch="noarch">
  <version epoch="0" ver="4.1.3" rel="lp150.5.1"/>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="tabraham@suse.com" date="1462363200">- Update to 4.0.4
  + if you try to playback a file with --stats and it has recorded
    processes or slabs, ignore them be removing from $subsys
  + playback of process data with -P was not skipping first interval and so
    stats for first entry we not rates but rather raw numbers
  + change 'yikes' message to something more meaningful
  + fixed problem with -sZ -P printing all 0s for thread count
  + added /usr/lib/systemd/system/collectl.service, per sourceforge help
    discussion on 2015-12-28
  + added disk read/write wait timing for disk detail in terminal, plot
    and lexpr format
  + new switch dskremap allows one to change disk names on the fly because
    in some cases such as etherd disks, the names are messy for use with
    other tools like ganlia
  + removed access to disk name remapping file
  + the rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
- Changes from 4.0.3
  + add AnonHuge memory to memory stats, both verbose and detailed as
    well as lexpr
  + if lexpr called with --import, throw an error
  + tighten divide-by-zero test for -sM because it looks like in some cases
    when misses &gt;0 we're getting occasional errors.  could hits be somehow
    negative?</changelog>
  <changelog author="tabraham@suse.com" date="1468497600">- Update to 4.0.5
  + rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
  + needed to initialized anonH for numa stats [thanks andy]
  + added 'hed' to known ethernet devices, used by HP Helion</changelog>
  <changelog author="tabraham@suse.com" date="1476187200">- Update to 4.1.0
  + allow lexpr to pass formatting information for strings and numbers
    [thanks Guy]
  + modify the way misc.ph reports uptime to thousandths of a day [thanks, seb]
  + added OPA interface support for -sx reporting and cleaned up some very
    old code, like quadrics support! [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1488542400">- Update to 4.1.2
  + incorrectly requiring a + with --rawdskfilt to be at beginning
  + when added support for 64bit IB counters it looks like I was only
    saving 3 of the 4 values (loop only went to 3 instead of 4)
    around line 4403. [thanks seb]
- Changes from 4.1.1
  + added packet loss and fast restransmissions to TCP Extended versbose
    output and renamed AkNoPy and PreAck to PurAck and HPAcks to be
    consistent with earlier versions [thanks Sophie]
  + add support for nvme disks [thanks fred]
  + it turns out some people re-enable lustre support for the sake of
    monitoring clients and to support that I had to add a check for
    the lustre-client module which is now in a differetn location than
    others [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1491912000">- include colmux
- Update to 4.1.3
  + correct use of uninitialized variable on output of distro info
    on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1523448000">- Cleanup spec file with spec-cleaner
- Use correct systemd build dependency
- Reduce duplicities in package via fdupes</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="30dd0559e8e39f48f533af7e1aee791da747589b6182cfc41c8b7abc8f64551b" name="collectl" arch="src">
  <version epoch="0" ver="4.1.3" rel="lp150.5.1"/>
  <changelog author="hvogel@suse.de" date="1215086400">- Initial package, Version 2.6.4</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="tabraham@suse.com" date="1462363200">- Update to 4.0.4
  + if you try to playback a file with --stats and it has recorded
    processes or slabs, ignore them be removing from $subsys
  + playback of process data with -P was not skipping first interval and so
    stats for first entry we not rates but rather raw numbers
  + change 'yikes' message to something more meaningful
  + fixed problem with -sZ -P printing all 0s for thread count
  + added /usr/lib/systemd/system/collectl.service, per sourceforge help
    discussion on 2015-12-28
  + added disk read/write wait timing for disk detail in terminal, plot
    and lexpr format
  + new switch dskremap allows one to change disk names on the fly because
    in some cases such as etherd disks, the names are messy for use with
    other tools like ganlia
  + removed access to disk name remapping file
  + the rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
- Changes from 4.0.3
  + add AnonHuge memory to memory stats, both verbose and detailed as
    well as lexpr
  + if lexpr called with --import, throw an error
  + tighten divide-by-zero test for -sM because it looks like in some cases
    when misses &gt;0 we're getting occasional errors.  could hits be somehow
    negative?</changelog>
  <changelog author="tabraham@suse.com" date="1468497600">- Update to 4.0.5
  + rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
  + needed to initialized anonH for numa stats [thanks andy]
  + added 'hed' to known ethernet devices, used by HP Helion</changelog>
  <changelog author="tabraham@suse.com" date="1476187200">- Update to 4.1.0
  + allow lexpr to pass formatting information for strings and numbers
    [thanks Guy]
  + modify the way misc.ph reports uptime to thousandths of a day [thanks, seb]
  + added OPA interface support for -sx reporting and cleaned up some very
    old code, like quadrics support! [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1488542400">- Update to 4.1.2
  + incorrectly requiring a + with --rawdskfilt to be at beginning
  + when added support for 64bit IB counters it looks like I was only
    saving 3 of the 4 values (loop only went to 3 instead of 4)
    around line 4403. [thanks seb]
- Changes from 4.1.1
  + added packet loss and fast restransmissions to TCP Extended versbose
    output and renamed AkNoPy and PreAck to PurAck and HPAcks to be
    consistent with earlier versions [thanks Sophie]
  + add support for nvme disks [thanks fred]
  + it turns out some people re-enable lustre support for the sake of
    monitoring clients and to support that I had to add a check for
    the lustre-client module which is now in a differetn location than
    others [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1491912000">- include colmux
- Update to 4.1.3
  + correct use of uninitialized variable on output of distro info
    on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1523448000">- Cleanup spec file with spec-cleaner
- Use correct systemd build dependency
- Reduce duplicities in package via fdupes</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="6d9a85afdf2728d6d455af94114535ec57b984723f2489507ff924daca960d80" name="conman" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1478520000">- Initial packaging of conman v 0.2.7.</changelog>
  <changelog author="pmladek@suse.com" date="1479124800">- Call %fillup_only without -d parameter. Otherwise, it installed
  the file into /etc/sysconfig/%{2}/conman because none subdir was
  not defined.</changelog>
  <changelog author="eich@suse.com" date="1479729600">- List directories under /lib explicitely to avoid conflicts
  with directories for debuginfo.</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Removed %clean section.</changelog>
  <changelog author="eich@suse.com" date="1484654400">- Removed stray file.
- Conditionalized support for freeipmi to distro version.
- Set use of tcpwrappers to 'off' by default.
- Fixed build for pre-systemd versions.</changelog>
  <changelog author="eich@suse.com" date="1487160000">- Cleaned up spec file: add generic defines to the top.</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Replace unnecessary %__ macro indirections</changelog>
  <changelog author="eich@suse.com" date="1494244800">- conman.conf: make differences between openSUSE and SLES explicit.</changelog>
  <changelog author="jjolly@suse.com" date="1496404800">- conman-suse-fix-expect-scripts.patch:
  Fixed ssh expect script for SUSE-specific output.</changelog>
  <changelog author="jjolly@suse.com" date="1496491200">- conman service configured to start as conman:conman user</changelog>
  <changelog author="eich@suse.com" date="1502712000">- Enable tcpwrappers on all platforms by default.
- Fix systemd-specific conditionals in spec file.
- Remove Provides: group/user(): these are only
  used by conman, there is no intention to provide
  them to other packages.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Updated to version 0.2.8:
  * Changed project homepage to &lt;https://dun.github.io/conman/&gt;. (#21)
  * Changed conman.conf default loopback setting to ON.
  * Changed rpm spec file from sysvinit to systemd.
  * Added 'server nofile' config directive to increase NOFILE limit. (#17)
  * Added '-P' cmdline opt to daemon for specifying pidfile. (#20)
  * Added test console device to aid in development and testing.
  * Fixed telnet option negotiation loop. (#9)
  * Fixed arbitrary limit on number of IPMI SOL consoles. (#15)
  * Fixed 4-character limit on timezones. (#16)
  * Fixed 1-second delay when connecting the client to a console.
  * Fixed UDS console reconnect delay to use exponential timeout.
  * Fixed UDS console reconnect delay to require min connect time before reset.
  * Fixed UDS console resource leak of pathname during config processing.
  * Fixed all gcc, clang, and Coverity Scan warnings.
  * Improved scalability of daemon.
  (FATE#324170).</changelog>
  <changelog author="eich@suse.com" date="1507550400">- Set usr/group for conman to root/root on SLE12 for backward
  compatibility.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="eich@suse.com" date="1515585600">- Fix conman for non-root user:
  * create rundir
  * create logdir
  * set user/group only when set to non-root
  * fix rundir and logdir in config file on update (boo#1081217).</changelog>
  <changelog author="eich@suse.com" date="1518782400">- Add the conman user to the group of the ttyS* devices
  (boo#1081217).
- Only update config file for new user once, save backup
  copy.</changelog>
  <changelog author="eich@suse.com" date="1520510400">- Do not look for the ttyS* group - it should be dialout
  always (boo#1084571).
- Fix shebang - remove /usr/bin/env.</changelog>
  <changelog author="eich@suse.com" date="1531915200">- If-connect-fails-let-other-side-accept-connection-and-come-back.patch:
  Make sure conmand connects to a newly created UNIX socket with
  minimal delay. The implementation uses inotify, however this triggers
  when the other side bind()s to the socket, however a connection is
  not possible until the other side calls listen().
  Thus if the connection fails, reset the poll() timeout to return to
  connect() as soon as possible (bsc#1101647).
- Support %license in a backward compatible way.</changelog>
  <changelog author="eich@suse.com" date="1535025600">- Replace
  If-connect-fails-let-other-side-accept-connection-and-come-back.patch
  by:
  Reset-delay-for-unixsock-connect-from-inotify.patch:
  Upstream chose to fix bsc#1101647 slightly differently.</changelog>
  <changelog author="eich@suse.com" date="1535025601">- Update to version 0.2.9:
  - Allowed IPMI defaults to be overridden via libipmiconsole.conf. (#27)
  - Updated recognized strings for IPMI workaround-flags (FATE#326641).</changelog>
</package>
<package pkgid="2f38c41a5249c7cafe728b4d1fb67b2a1cb57c9184298d474005e626e386fcff" name="console-setup" arch="noarch">
  <version epoch="0" ver="1.134" rel="lp150.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1437134400">- package created; it's required by kbd in order to convert xkb
  layouts from xkeyboard-config to console keymaps (FATE#318426)</changelog>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 1.134</changelog>
  <changelog author="sndirsch@suse.com" date="1453982400">- removed unneeded requires to kbd in order to resolve build cycle
  kbd &lt;-&gt; console-setup (bnc#963942)</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add console-setup-1.134-perl526.patch to work with perl 5.26,
  fixed upstream in 1.143</changelog>
  <changelog author="bwiedemann@suse.com" date="1515153600">- Add console-setup-1.134-reproducible.patch to make package build
  reproducible (boo#1062303)</changelog>
  <changelog author="sndirsch@suse.com" date="1548331200">- u_fix-iso-left-tab.patch
  * fix Shift-Tab mapping (bsc#1122361)</changelog>
</package>
<package pkgid="75bf20bb19d6fd6de7b8ac3be6f240350c7a59a1d413e18f9101d106824807ac" name="console-setup" arch="src">
  <version epoch="0" ver="1.134" rel="lp150.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1437134400">- package created; it's required by kbd in order to convert xkb
  layouts from xkeyboard-config to console keymaps (FATE#318426)</changelog>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 1.134</changelog>
  <changelog author="sndirsch@suse.com" date="1453982400">- removed unneeded requires to kbd in order to resolve build cycle
  kbd &lt;-&gt; console-setup (bnc#963942)</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- add console-setup-1.134-perl526.patch to work with perl 5.26,
  fixed upstream in 1.143</changelog>
  <changelog author="bwiedemann@suse.com" date="1515153600">- Add console-setup-1.134-reproducible.patch to make package build
  reproducible (boo#1062303)</changelog>
  <changelog author="sndirsch@suse.com" date="1548331200">- u_fix-iso-left-tab.patch
  * fix Shift-Tab mapping (bsc#1122361)</changelog>
</package>
<package pkgid="22169fa05ffd1866ba7804c28dc7972038fb9bf102021bb625f4b0f4b13a97d0" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.4.3.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="c19737cd1d023bc13df061484c752fc0682dc04100caa7c2ed762218b367e8c0" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.4.6.1"/>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="f722506dcdba7de8fe662fea472138328fd9e14bf8621e46390266c93ddbaed2" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp150.4.10.1"/>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
</package>
<package pkgid="452ccc0477d4f533280cc20e209827218668857036579beafa9115564e7115dd" name="containerd" arch="src">
  <version epoch="0" ver="1.2.5" rel="lp150.4.14.3"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="fb0449d9d79770218b2c5c6b3bf3e3493fcb0493b7007b10474bfd93df48fe3c" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp150.4.14.3"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="4d666ffc012550b790308ee78946fbc81b7b6020cf56e6e93f7166d8a759ae33" name="containerd" arch="src">
  <version epoch="0" ver="1.2.6" rel="lp150.4.17.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="4ad2077476d4941d064c59d593f38754b5d56fa445f72deca77267a7a3841241" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="lp150.4.17.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="94659ffa7e7f2dfa7b55001f8248d8b9b0aa32b21c9f899270645b2e655a1ad1" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.4.3.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="c94b660db402b47fee41cbbb193322d24b13e7d3849030f8cabfc1fa0204d0d9" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.4.6.1"/>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="52c8e35daf31324abc9b8b9fd43afc30364d1a9416a878f06d11045c1829eee5" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="lp150.4.10.1"/>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
</package>
<package pkgid="de4a21c0f5b2e992015f3ec51fee89dada1005e9beed29244dcfbf2f1cb0a11e" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.5" rel="lp150.4.14.3"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="70e8fd050d72ab3ce5855bf6a1bcac0ab47bc95d0cff0f9aab3f8ebf35a1f6b5" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="lp150.4.17.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="10fb38975a7af2503ba35aa1348734de2b0b8fa706a397038af479ea60c7f53e" name="containerd-kubic" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.4.3.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="3cad4620ee8548068e31ad9af974ceb6df7b8790e7ebe028b69b99a0099cb7a8" name="containerd-kubic-ctr" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.4.3.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="f83aea1e25219e402e9dfa362051d3c5e775b204cf7b1dee897a1b14f00166cb" name="containerd-kubic-test" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="lp150.4.3.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="f85be21dc73458e76c46aafc355309fb27b62fa80543ca1b088aa6e8b137a77d" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="lp150.4.3.1"/>
  <changelog author="thipp@suse.de" date="1499342400">- change dependency to docker-runc</changelog>
  <changelog author="asarai@suse.com" date="1501761600">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="d62763a8097c774c288d55b76b9469ca33a541d6cc8888e89196d94f7802f23a" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="lp150.4.6.1"/>
  <changelog author="asarai@suse.com" date="1508328000">- Update to containerd@3addd840653146c90a254301d6c3a663c7fd6429, which is
  required by Docker 17.07.0_ce (this commit is effectively v0.2.9 with a few
  bugfixes missing).</changelog>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="d829369f18681bd78c16cf0f03314c2be3347622bf20be91ba7432d85c36a4da" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.2.2" rel="lp150.4.10.1"/>
  <changelog author="asarai@suse.com" date="1509019200">- Use the upstream makefile so that Docker can get the commit ID in `docker
  info`. This also will avoid possible future warnings being spit out like
  bsc#1065109 and boo#1053532.
- Backport https://github.com/containerd/containerd/pull/1686, which is
  required for the above fix. bsc#1065109 boo#1053532
  + bsc1065109-0001-makefile-add-support-for-build_flags.patch</changelog>
  <changelog author="asarai@suse.com" date="1509019201">- Set --start-timeout=2m by default to match upstream. bsc#1064926</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
</package>
<package pkgid="c4bce62e82a575df1ad368a0cb3433ba4a702cd9d5e03992b48cf7c61a54ca1b" name="containerd-test" arch="noarch">
  <version epoch="0" ver="1.2.5" rel="lp150.4.14.3"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to containerd@06b9cb35161009dcb7123345749fef02f7cea8e0, which is
  requried by Docker 17.09.1_ce.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put containerd under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review obsoletes tag to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
  * bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
</package>
<package pkgid="cf575c17cc8b136199f8da46d0ee4f17c4a2d17d7e92d7dc193589eea95682cc" name="cpp" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="0fc4b977734080401654108df63a6e574b9f583e00294a01b105cb5ea77e2948" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="bc054dd41d4463a81f79c226912d485674cd951c13f8dbc25f542d698a3b670d" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="a83acb9f76436eff478ae9c35954565292e67251d03a67791cd291b3f84fccc3" name="cpp7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="51e3da47a7b32706e2413e63e901ffc17dac394b44669234c0aa6e1ece1fe344" name="cpp8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="af36487cc8635b883e07492bee3adeadbd2b989db42662ab7dc0fffc216eb9d6" name="cpupower" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="2576a12aeb30417222897503f20337abb7f03ada45c84fabc24ed4eab0a7c741" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="668223e812bd39e692a8ede74b731bb9769084be5650071e1d5ebe39d945d3c8" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="4.15" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1396008000">- Update to latest turbostat version (git 2d6e532279ddf30188d5fbd)
  bnc#866862, bnc#869071, bnc#869809
- Adjust MSR include path
  add make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1396267200">- If root, try to load msr driver on x86 if /dev/cpu/0/msr is not avail
  Add cpupower-always_try_to_load_msr_driver_as_root.patch</changelog>
  <changelog author="trenn@suse.de" date="1396353600">- Do return 0 if cpupower info -b is called instead of the perf bias value
  which is already printed to stdout.
  Add cpupower-return_zero_on_success.patch
- Remove mc and smt scheduler knobs. These do not exist anymore in latest
  kernels for quite a while now.
  Add cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Update turbostat to latest 3.17 kernel version (in fact it is 3.16-rc7)
  This fixes bnc#891523</changelog>
  <changelog author="trenn@suse.de" date="1407931200">- Fix cpupower_export_tarball_from_git.sh script and make sure msr-index.h
  is included in the turbostat tarball.</changelog>
  <changelog author="trenn@suse.de" date="1422446400">- Update cpupower and turbostat to latest git kernel HEAD version
  this currently is 3.19-rc6, but it is expected that there are no
  changes anymore and the version gets named 3.19 already.
  The patches are already included mainline and get removed from osc:
    cpupower_disable_by_latency.patch
    add_idle_manpages_in_Makefile.patch
    cpupower-always_try_to_load_msr_driver_as_root.patch
    cpupower-return_zero_on_success.patch
    cpupower-remove_mc_scheduler_bits.patch</changelog>
  <changelog author="trenn@suse.de" date="1422446401">- Make sources also build against 13.1 and older by providing
  asm-index.h which is included in linux-glibc-devel in newer
  distributions
  * Add turbostat_set_asm_header_fixed.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1452081600">- Drop dead link.
- Fix Obsoletes statement, cpufrequtils package versions were
  greater than cpupower package versions so we must obsolete all
  versions of cpufrequtils.</changelog>
  <changelog author="trenn@suse.de" date="1453809600">- Move from kernel version to turbostat internal version for turbostat
- Add latest turbostat sources (latest git commit: 30f05309bde492)
- Adds Skylake, Broadwell and Knights Landing support for turbostat
  (fate#319798, fate#319183, fate#319516)</changelog>
  <changelog author="trenn@suse.de" date="1461153600">- Add cpuidle functions to public libcpupower
  * Add library_cleanup.patch</changelog>
  <changelog author="trenn@suse.de" date="1461844800">- Update turbostat to version 4.12
- Update cpupower to latest sources
- Let turbostat only build against a local msr-index.h
  Also add the msr-index.h export to the tarball from git repo script
  * Delete make_header_file_passable_from_outside.patch</changelog>
  <changelog author="trenn@suse.de" date="1490184000">- Update cpupower and turbostat to latest kernel v4.10 sources
  D library_cleanup.patch
- Change .c file header file modification, modify in Makefile instead:
  D turbostat_set_asm_header_fixed.patch
  A turbostat_makefile_fix_asm_header.patch
- fate #320908: KBL: Turbostat for KBL H/S &amp; U/Y
- fate #321191: [KNL] turbostat reports to report corect MSR_TURBO_RATIO_LIMIT
  information
- fate #321193: [KNL] turbostat should report correct cpu clock values for
  Knights Landing
- fate #321285: turbostat support for Skylake-SP server
- fate #321286: turbostat support for Harrisonville (Denverton SoC)
- fate #321925: [HPC, KNM, kernel] turbostat support</changelog>
  <changelog author="trenn@suse.de" date="1493812800">- Update to latest mainline sources
- turbostat changed versioning scheme (we now have version 17.04.12)</changelog>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
- By that fix a sysfs read bug missing the final '\0' (bsc#1103294)
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
</package>
<package pkgid="70cc69a36b1a21cb9444e0f9a2042ebcd3ae365c332e3d15f7b6cf400eddfea5" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="0dcedde6301ce035a673424d1d4130eda964631e298b729244608a71680ac9b6" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="5ddeca6a735ff27628d76b5286e20f7e816d153e0931f8654d039bfbc546327e" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="461a69b08f160ceff3d625e605121196ee5bac9ea09af0965ea81caa5f2869b6" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="5ed4cc25340495f1c707469c56bfa1dd550315f112bfda8b72947941361f9c03" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.8.1"/>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
</package>
<package pkgid="ec99b06da727287e1c1c4d607125aa5c4b4c69f3dadf2f4a676a121314cab610" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="1f8c6bba010a9463c0029529981cbf7c778c2f36fe702fc6db242b0516becb13" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="17a82ed61d93c712e825f4ff180117ea17a0b1b1c7a0900d21243a46b07224c0" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="37693be9f42cd5673df59756bf4091f2023fd3c0987d99678296aa8c37a79fad" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.8.1"/>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
</package>
<package pkgid="ad54db1f92b606689e6634e09c2bbc55c6d1436e6d5ee8a2be8b3d2413353bf9" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="dfee16eee1f981fdc43341c93e50a7f6bf84e83689ecf6668011a500abbbc337" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="f50a946e8913e5b0ba8d8c969546525ec0d6abc8150e27b0abd6c1a8a438cde8" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="02f4d1aee03cbd9290618904b94a6231d5ed10ce4ecf99b4d4c59d684322840c" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.8.1"/>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
</package>
<package pkgid="383e7a07afa6bc07d7c69412d64f6dab0ef9ba55a622a7cfea9e4cf61fa1dc2e" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="9fe74c005b2b76ed8f2d1edfc9551289a57c7e9dd0949a7ef3f3931d7bb273d9" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="85544ed4f4d69c7e5c6d334d5138ee83ce60c6c679384783c2021ea8c21823f6" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="48ece6c8dfa12b7bd67363c8494e8a7f00f80fc625e288bb7195c0d325a86157" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.8.1"/>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
</package>
<package pkgid="37f8dc1f2fd363fc2ab41008af0591fec7f087132b1d58c173ed74ac5460a223" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="e597d4eaa40f94b0f5111e8f843e0bd40a4b9e0deca18aeeffb9bf7546598ca3" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="2a20f9ed815fa1fa759eb6bc750a66d0415a392a0808c5b1472e97e1705d5e99" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="81f2a5dd14b84c88a73148de9b655fc8b5d58c5c2aada91b922b3f88c72f7b52" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.8.1"/>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
</package>
<package pkgid="579006037956ba1c49180310744042ce5a81bc5bd8477a3c7f806a9187ce60ef" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="302e17dd72b74396d06be84aea45da3d558f505775538a2bd36ac2f66a4a9f8c" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.16" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="3c5fe1b495f7dff868e27ea1a4c1d0bb3901e4b46cb679954fe98078c98ef99b" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.48" rel="lp150.2.8.1"/>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
</package>
<package pkgid="cbf8d6a0ad9512bae5fb0da8baf91fa3b7873b9fdb36afeda6023809e66e8b19" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.58" rel="lp150.2.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1553169600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
    crash-xen-invalid-pcpu-vaddr-use-hware-domain-sym.patch</changelog>
</package>
<package pkgid="76807672eb9841d2196102311aeb2661131dbfd007d1c816ef9e5f07ca7f6623" name="createrepo_c" arch="src">
  <version epoch="0" ver="0.12.1" rel="lp150.4.3.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1446120000">- Initial package based on Mageia package</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1454328000">- Update to 0.10.0, add Python 3 bindings</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1454328001">- Disable Python 3 bindings for SLE</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1467720000">- Run fdupes to eliminate duplicate .js files</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1477915200">- updated upstream sources
- Added patch 000-Ensure_that_provides-requires_versions_are_factored_into_dep_filtering.diff</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1486555200">- Updated upstream sources
- Removed patch 000-Ensure_that_provides-requires_versions_are_factored_into_dep_filtering.diff
  (upstream included equal patch)
- Added missing copyright statements
- Fixed license tag and other misc cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487505600">- Enable Python bindings for openSUSE Tumbleweed.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487505601">- Enable Python bindings for openSUSE Leap.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1516622400">- Switch to singlespec buidling of python bindings
- Make sure to use cmake macros to have it easier to gork what is
  happending by overriding %__builddir
- Sort out with spec-cleaner
- Fix embedding of date and time to documentation</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1518523200">- Disable tests on SLE12 due to the python-nose requirements</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1519214400">- [bnc#1075670] changed to provide createrepo as update-alternative
  because createrepo_c will replace createrepo because of switch to
  python3
- also provide createrepo-implementation</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1522929600">- fix spelling of old weakdeps feature switch (bsc#1088328)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="FSchreiner@suse.com" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
</package>
<package pkgid="614bbd657fcbbf2867c6461000a0190789c6bd931a84f15344108f378cdcc0e0" name="createrepo_c" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="lp150.4.3.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1446120000">- Initial package based on Mageia package</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1454328000">- Update to 0.10.0, add Python 3 bindings</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1454328001">- Disable Python 3 bindings for SLE</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1467720000">- Run fdupes to eliminate duplicate .js files</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1477915200">- updated upstream sources
- Added patch 000-Ensure_that_provides-requires_versions_are_factored_into_dep_filtering.diff</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1486555200">- Updated upstream sources
- Removed patch 000-Ensure_that_provides-requires_versions_are_factored_into_dep_filtering.diff
  (upstream included equal patch)
- Added missing copyright statements
- Fixed license tag and other misc cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487505600">- Enable Python bindings for openSUSE Tumbleweed.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487505601">- Enable Python bindings for openSUSE Leap.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1516622400">- Switch to singlespec buidling of python bindings
- Make sure to use cmake macros to have it easier to gork what is
  happending by overriding %__builddir
- Sort out with spec-cleaner
- Fix embedding of date and time to documentation</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1518523200">- Disable tests on SLE12 due to the python-nose requirements</changelog>
  <changelog author="Frank Schreiner &lt;FSchreiner@suse.com&gt;" date="1519214400">- [bnc#1075670] changed to provide createrepo as update-alternative
  because createrepo_c will replace createrepo because of switch to
  python3
- also provide createrepo-implementation</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1522929600">- fix spelling of old weakdeps feature switch (bsc#1088328)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1533124800">- Update to 0.11.1
  + Add support for RPMs with large files
  + Identify Requires(missingok) as Recommends correctly
  + Enable legacy tags by default
  + Fix missing packages in mergerepo_c with multiple VR of same name
  + Add mergerepo_c --repo-prefix-search and --repo-prefix-replace
  + Build against Python 3 by default for bindings
- Drop snapshot source service and snapshot tarball
- Use license macro for license file
- Drop trailing whitespace
- Fix comment about drpm support
- [boo#1125044] fix for huge rpm packages</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281600">- Update to 0.12.0
  + Add basic support for zchunk metadata
  + Add support for building wheels to upload to PyPI
- Drop Python 2 subpackage
- Enable drpm support
- Enable zchunk for openSUSE Leap 15.1+ and Tumbleweed
- Adjust changes entries to use full author identities</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549281601">- Backport fixes from upstream
  * 0001-zck_end_chunk-returns-number-of-bytes-written-or-1-f.patch
  * 0002-Add-missing-sentinal.patch
  * 0003-Fix-misc-test.patch</changelog>
  <changelog author="FSchreiner@suse.com" date="1551441600">- Added upstream patches
  * 0001-Find-correct-nosetests-version-even-when-which-comma.patch
  * 0002-fix-linking-when-Wl-no-undefined-is-set.patch
- Disable drpm support
- Update to version 0.12.1:
  * Release 0.12.1
  * For make test, xz and zchunk (not just *-devel) are required.
  * Make cmake variable PYTHON_EXECUTABLE global
  * Add zchunk support already to Fedora 29
  * [spec] Fix spec to work for epel 7
  * Add CMake support for python interpreter path
  * Add space after if statement
  * Fix misc test
  * Add missing sentinal
  * Add zchunk support to mergerepo_c for extra files</changelog>
</package>
<package pkgid="92f94ad534e89d86677cd5b86be648e37afc01024259d0d62e85b9be739f304c" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="261f44975d0c1e8e61d45ef1cf92af1f34c52100c4dca587bcb8b31aac563500" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="d2b3d28b50def74a178306e63c2faae15d68c545d99d587b4b71613d730872d8" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="bcdb16467f77e376ec4a4a1d2f4bbb0fc48edb9817a6c8512e5f88ee9a8dbf7d" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp150.2.13.1"/>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="XLiang@suse.com" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch
- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * medium: cibverify: Increase log level for verification (bsc#1116559)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)</changelog>
</package>
<package pkgid="fe4db4381a545f12836abf7ff8922cd4561efcddef00ef7339632fb271ae27c5" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp150.2.13.1"/>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="XLiang@suse.com" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch
- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * medium: cibverify: Increase log level for verification (bsc#1116559)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)</changelog>
</package>
<package pkgid="807ecd3f75578a95f0d0feaa375ced01f793cdde33a1b50b37e41576e1d74d53" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="3905355f89c49ee5b5ee5c3327ca9ff3590e4fdb62d97b57f3d9b14315aa0db3" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="ce7de3b5a8cef8c6bfab14ae10409fd297b61f99532978aeb56bdb3d34714012" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="9ee8a270ef48375f827575852a11075572fa866624848d6492ac7e1fd60e8315" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp150.2.13.1"/>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="XLiang@suse.com" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch
- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * medium: cibverify: Increase log level for verification (bsc#1116559)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)</changelog>
</package>
<package pkgid="428230321348f1ddde30fc5b89fdd1ec3bd14af60b7caa4699cea323a2d7488e" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="0c6a86e9d4acda410b1277164aab0e37ff64506982a7d707ded91353d045d71a" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1537967262.68a0bd1e" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
</package>
<package pkgid="4f9e922c901d4cac4a9f92b6f0da7fac1679c191bdc6a8de8522ba1c985ae5d2" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1542103310.dd114188" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
</package>
<package pkgid="833f03117a8e18ac29be7b5ee0747851a52c4c1fb252cba29e151438cee8be98" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1553262403.5da14df5" rel="lp150.2.13.1"/>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Always require python3-parallax (bsc#1103832)</changelog>
  <changelog author="kgronlund@suse.com" date="1537876800">- Update to version 4.0.0+git.1537860833.be41d63c:
  * fix: bootstrap: non interactive unicast cluster init and join(bsc#1109172)
  * medium: bootstrap: Disable strict host key checking on all ssh invocations
  * medium: support ocfs2 log collecting
  * hbreport: process name change for pacemaker 2.0(bsc#1106052)
  * Fix: bootstrap: "-i" option doesn't work(bsc#1103833, bsc#1103834)
  * Low: bootstrap: No warning message when using '-q'
  * high: ra: Support Pacemaker 2.0 daemon names
  * high: config: Locate pacemaker daemons more intelligently (#67) (bsc#1096783)
  * Fix: TypeError in logparser.py(bsc#1093433)</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.0.0+git.1537967262.68a0bd1e:
  * Fix incorrect bindnetaddr in corosync.conf (bsc#1103833) (bsc#1103834)</changelog>
  <changelog author="kgronlund@suse.com" date="1538481600">- Update to version 4.0.0+git.1538492109.4b1170b0:
  * medium: bootstrap: Correctly check rrp_mode flag (bsc#1110463)
  * medium: bootstrap: Pick first match for multiple routes (bsc#1106946)
  * medium: utils: Use cloud metadata service to discover IP (bsc#1106946)
  * Fix: bootstrap: change default ip address way for both mcast and unicat(bsc#1109975,bsc#1109974)</changelog>
  <changelog author="kgronlund@suse.com" date="1539000000">- Update to version 4.0.0+git.1539006450.f80a6308:
  * medium: bootstrap: Skip netmask check on GCP (bsc#1106946)
  * medium: utils: Detect local IP on GCP (bsc#1106946)</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.0.0+git.1540390310.315a48ed:
  * ui_cluster: restart cluster is added (bsc#1052088)
  * auto-commit enabling/disabling maintenance mode for a whole cluster (bsc#1112593)</changelog>
  <changelog author="kgronlund@suse.com" date="1542196800">- Update to version 4.0.0+git.1542103310.dd114188:
  * high: cibconfig: Normalize - to _ in param names (bsc#1111579)
  * medium: ra: Handle obsoletes attribute (bsc#1111579)</changelog>
  <changelog author="XLiang@suse.com" date="1567080000">- low: hb_report: collect output of "sbd dump" and "sbd list"(bsc#1129383)
  * Add 0001-low-hb_report-collect-output-of-sbd-dump-and-sbd-lis.patch
- dev: hb_report: Using Tempfile class to manage tempfiles
  * Add 0002-dev-hb_report-Using-Tempfile-class-to-manage-tempfil.patch
- fix: hb_report: handle UnicodeDecodeError(bsc#1130715)
  * Add 0003-fix-hb_report-handle-UnicodeDecodeError-bsc-1130715.patch
- Fix: hb_report: analysis.txt should includes warning, error, critical messages(bsc#1135696)
  * Add 0004-Fix-hb_report-analysis.txt-should-includes-warning-e.patch
- Update to version 4.0.0+git.1553262403.5da14df5:
  * low: msg: add timestamp for DEBUG messages(bsc#1129380)
  * Fix: bsc#1129719: check command and related files exist
  * High: constants: add "promotable", "promoted-max" and "promoted-node-max" in clone meta attributes
  * Fix: cibconfig: #425 The ID attribute is not required for select and select_attributes
  * medium: scripts: Set kind for order constraints, not score (bsc#1123187)
  * low: utils: add support for dpkg
  * low: utils: add support for apt-get
  * low: utils: convert string contstants to bytes
  * Fix: bsc#1120587,1120586 bootstrap warning messages should better start with like "WARNING:" instead of "!"
  * Fix: bsc#1120554, bsc#1120555 crmsh crashed when using configure&gt;template&gt;apply
  * medium: cibverify: Increase log level for verification (bsc#1116559)
  * High: hbreport: fix UnicodeEncodeError while print(bsc#1093564)</changelog>
</package>
<package pkgid="9743586a92eddca8b8a0ebe0cd37c578d3cecdbd5f36d25159314e0a8b36b9e7" name="cron" arch="x86_64">
  <version epoch="0" ver="4.2" rel="lp150.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="7c560edd7f19ca4e7bcd6d029ced43615c81a8a7d571ede6ae876f548b90a900" name="cronie" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp150.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="8a9c859621796bfc1c0584a73627de34ee5a657ada1d3a72440ce1bcc20f5ea6" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp150.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="e0faed622d4c5f1a3d032e9874ba4bf555341f28bd54727310e525134949fa7b" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="lp150.3.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre scripts</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- cron.service: Start After=nss-user-lookup.target not
  after ypbind.service nscd.service
-cron.service: Crons run at wall-time, order after time-sync.target</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 1.5.0
  * crond: Job environment variables are set also when executing
    sendmail.
  * crond: Adding duplicate orphans on reload is now prevented.
  * crond: The regular crond shutdown is now logged.
  * crontab: PAM is not called in crontab command if the caller's
    uid is 0.
  * crond: PAM is not called from crond for system cron jobs
    (/etc/crontab, /etc/cron.d) which are run for uid 0.
  * crond: The existence of an user is checked at time when job is
    run and not when the crontab is parsed on database reload.
- use spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Redo the post/pre update approach to fix migration from SLE11.
  Should fix bnc#919028</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Start cron after sssd.service bnc#926961</changelog>
  <changelog author="jmatejek@suse.com" date="1435233600">- add support for MAILFROM, MAIL_CONFIG and different mailer binaries
  in run-crons (bnc#812367, bnc#366762)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435233601">- revert last change, it is a bug in sssd.service, fixed in
  SR#313709</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1435752000">- cron.service: Use KillMode=process like upstream does.</changelog>
  <changelog author="tchvatal@suse.com" date="1473336000">- Add fix for bnc#983925 to run crons even when not on AC_POWER
  * Nowdays it does not make much sense to not run crons when on
    battery and actually it can even confuse people</changelog>
  <changelog author="kstreitova@suse.com" date="1475236800">- remove the omc xml config that is useless nowdays</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1490702400">- update to 1.5.1
  * crontab: Use temporary file name that is ignored by crond.
  * crond: Inherit PATH from the crond environment if -P option
    is used.
  * crond: Remove hardcoded "system_u" SELinux user, use the
    SELinux user
    of the running crond.
  * anacron: Small cleanups and fixes.
  * crond: Fix longstanding race condition on repeated crontab
    modification.
- refresh cronie-pam_config.diff
- get rid of %{name} macros in the patch names
- use %{ext_man} macro for anacron man pages
- fedorahosted.org was retired on March 1st, 2017
  * update Url and Source address</changelog>
  <changelog author="kukuk@suse.de" date="1503316800">- Require group trusted if we use them</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- Requires smtp_daemon (not just Recommends) as it's needed by
  run-crons script [bsc#1064834]</changelog>
  <changelog author="jsegitz@suse.com" date="1511784000">- Ensure that /etc/cron.{hourly,daily,weekly,monthly} have proper
  permissions and owner. This is racy but prevents some LPE vectors</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Requires mail as it's really needed by cron-crons script, not
  smtp_daemon [bsc#1070565] [bsc#1064834]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1552824000">- add cronie-1.5.1-huge_crontab_DoS.patch to fix two security issues
  where users can cause DoS of the crond by loading huge crontab
  files. We now allow maximum 1000 environment variables and 1000
  crontab entries. Also the comments and whitespace between the
  entries and variables are now limited to 32768 characters.
  [bnc#1128937] [CVE-2019-9704] and [bnc#1128935] [CVE-2019-9705]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1553860800">- update cronie-1.5.1-huge_crontab_DoS.patch to fix a regression
  that caused that only the first job from a crontab was being run
  [bsc#1130746]</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- remove cronie-nofork-nopid.patch that allowed running of multiple
  "cron -n" instances at once which is an unwanted behaviour
  [bsc#1133100]</changelog>
</package>
<package pkgid="2655cd56ce8e93ba1d04f26864506026e79f4bf87ac4a8583d2efd4680278690" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="b982786992bf843d268f603bb5adaa2a8ff2f1e65a08f633519cb85491aa2a6f" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="cacb03d06e87aaafa404f94320c048777cecce4a8345ae7e671fa976cae510a8" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="47628a386dca59b53f23d56d06d89c6c597e49991ef5e91db4cf9afd4bf409fc" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="c9a043ec8494a9546ac8999af616fdc92c7e700377d7069408f728656e0b2238" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="61e6d7b81e0e615d37c0249f4657b954546e697432f3e99100c9c51905a348a1" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="12e56b18b0844c9ada52ba66049b155058e78185917e988356f9c0976c5bc88f" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="0423d375f371ade08b694bbb6ceb1f8a8535b6bb8df1cd1a12afa20e33434586" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="a18f7b6527bff79aad9fc45d3af3bc9ad6088ca6af46d77593c1ac80c56ae2e9" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="495c3a75e60d390ab958c0c661f9d7cfba2d1175b908811e4fe84c176db2f2d2" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="8100bc34f95a3c1fdf2e01e10b8fddba4858238bd0b0bce86d7ccca4f835ee49" name="cross-nvptx-gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.2.1"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="9ebcc712a86726976f26171fd4c428e48d8d8daef8f9f7af567352b6465c43f7" name="cross-nvptx-newlib8-devel" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.2.1"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="0703d41a33e26c3af31f33d48e48e2c30dc099ce7328508d3ec95b9214393493" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="138af1f8e8a31ae6b71d216f004e980a974c42f9bbec24caf9f5015ac02f0aaf" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="ae841e117e44b03af04d927746b35105f80b45cdd633c5a4fc14ce2d0098a16d" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="2d2a1bdd7f9d9abc0038254618062e09b922df74913efacf3512f33c4911dfd3" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="3f796720ff53bedb77fab58862ca5669ca446877b230554c3e98cfe6d5a37cea" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="1b881030b06a341b4f43a5895d8e73fb43e7c5f98288ae19c9fd6e1936eca948" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="beffb683397290ece82e9fc45ae2c317b27dd62b0e75576f7659f9cfbbadd4e4" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="2d79878665b31412f4956af8e78e682e357b4bca8fb4c0c8b5e6a5a870bd5d58" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="269f4adda2f8a492a397f130d95b33acc2efbc1eb27414c9857da390a47902cd" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="fb02a0eeb37903615ccd40f7bf35b6d108f96aab548b6270c83dd75f095a3cc2" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="lp150.5.3.1"/>
  <changelog author="matz@suse.com" date="1502366400">- Update to 2.29 branch (@de44148c), fixing PR21884, a segfault
  in ld while building memtest86+ .
  Changes binutils-2.29-branch.diff.</changelog>
  <changelog author="matz@suse.com" date="1502452800">- Last fixes for PR21884 weren't complete, adjust
  binutils-2.29-branch.diff some more for this.</changelog>
  <changelog author="matz@suse.com" date="1504094400">- Update to 2.29 (@5d25156), upstream fix for PR21884, as
  well as PRs 18808 18841 21840 21988 21910 21962 21964.</changelog>
  <changelog author="rguenther@suse.com" date="1506600000">- Update to 2.29.1 release, accumulating bugfixes.
- Update binutils-2.29-branch.diff to @a38a1d80 and to be
  relative to the 2.29.1 release fixing following PRs/bnc/CVE:
  22058 [bnc#1057149, CVE-2017-14130]
  21813 [bnc#1052503, CVE-2017-12456, bnc#1052507, CVE-2017-12454,
    bnc#1052509, CVE-2017-12453, bnc#1052511, CVE-2017-12452,
    bnc#1052514, CVE-2017-12450, bnc#1052503, CVE-2017-12456,
    bnc#1052507, CVE-2017-12454, bnc#1052509, CVE-2017-12453,
    bnc#1052511, CVE-2017-12452, bnc#1052514, CVE-2017-12450]
  22148 [bnc#1060599, CVE-2017-14745]
  22163 [bnc#1061241, CVE-2017-14974]
  21933 [bnc#1053347, CVE-2017-12799]
  21787 [bnc#1052518, CVE-2017-12448]
  22018 [bnc#1056312, CVE-2017-13757]
  22170 [bnc#1060621, CVE-2017-14729]
  22047 [bnc#1057144, CVE-2017-14129]
  22059 [bnc#1057139, CVE-2017-14128]
  21990 [bnc#1058480, CVE-2017-14333]
  22113 [bnc#1059050, CVE-2017-14529]
  as well as these PRs:
  22061, 21786, 21916, 21994, 22064, 21995, 21909, 21441, 22060,
  22067, 22032, 21820, 22048, 22199, 21781, 21824, 21861, 22150.</changelog>
  <changelog author="mliska@suse.cz" date="1506686400">- Update binutils-2.29-branch.diff to @a45d8fd5ffbf888 fixing PR 22220.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Add s390x-8fe09d7.diff to fix typo in ELF notes.</changelog>
  <changelog author="afaerber@suse.de" date="1516190400">- Add arm-none-eabi symlinks (bsc#1074741)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Add riscv64 to %target_list</changelog>
  <changelog author="dimstar@opensuse.org" date="1516968000">- Drop bc BuildRequires: no longer needed.</changelog>
  <changelog author="schwab@suse.de" date="1519646400">- Update to binutils 2.30
  * Add --debug-dump=links option to readelf and --dwarf=links option to objdump
    which displays the contents of any .gnu_debuglink or .gnu_debugaltlink
    sections.
    Add a --debug-dump=follow-links option to readelf and a --dwarf=follow-links
    option to objdump which causes indirect links into separate debug info files
    to be followed when dumping other DWARF sections.
  * Add support for loaction views in DWARF debug line information.
  * Add -z separate-code to generate separate code PT_LOAD segment.
  * Add "-z undefs" command line option as the inverse of the "-z defs" option.
  * Add -z globalaudit command line option to force audit libraries to be run
    for every dynamic object loaded by an executable - provided that the loader
    supports this functionality.
  * Tighten linker script grammar around file name specifiers to prevent the use
    of SORT_BY_ALIGNMENT and SORT_BY_INIT_PRIORITY on filenames.  These would
    previously be accepted but had no effect.
  * The EXCLUDE_FILE directive can now be placed within any SORT_* directive
    within input section lists.
- binutils-2.30-branch.diff: 2.30 branch @4cd0043413
- riscv-wrap-relax.patch: Fix linker relaxation with --wrap
- Remove use-hashtype-both-by-default.diff, use
  - -enable-default-hash-style=both instead
- Remove binutils-2.29-branch.diff, s390x-8fe09d7.diff
- Use riscv64-suse-linux as target for cross-riscv64-binutils</changelog>
  <changelog author="matz@suse.com" date="1520337600">- Add binutils-pr22868.diff to fix testsuite fails in LLVM.</changelog>
  <changelog author="schwab@suse.de" date="1520510400">- riscv-relax-size.patch: Fix symbol size bug when relaxation deletes bytes</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update binutils-2.30-branch.diff: 2.30 branch @7c78c26eefbb8
  * Includes more complete fix for PR20882.
  * Includes fix for PR22836.  [boo#1085784]
  * Includes fix for PR22983.</changelog>
  <changelog author="schwab@suse.de" date="1521720000">- riscv-relax-relocatable.patch: RISC-V: Don't enable relaxation in
  relocatable link</changelog>
  <changelog author="matz@suse.com" date="1522756800">- Fix pacemaker libqb problem with section start/stop
  symbols, aka PR21964.  [bnc#1075418]
  Adds binutils-fix-pr21964.diff .
  (this is a change from SLE12, that was already included in 2.31
  binutils tree, mentioned for completeness to not loose tracking)</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Restore riscv64-elf cross prefix via symlinks</changelog>
  <changelog author="schwab@suse.de" date="1528113600">- riscv-relax-versioned-hidden.patch: RISC-V: Fix symbol address problem
  with versioned symbols (PR ld/22756)</changelog>
  <changelog author="rguenther@suse.com" date="1531742400">- Update to binutils 2.31
  * The AArch64 port now supports showing disassembly notes which are emitted
    when inconsistencies are found with the instruction that may result in the
    instruction being invalid.  These can be turned on with the option -M notes
    to objdump.
  * The AArch64 port now emits warnings when a combination of an instruction and
    a named register could be invalid.
  * Added O modifier to ar to display member offsets inside an archive
  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.
  * Add --generate-missing-build-notes=[yes|no] option to create (or not) GNU
    Build Attribute notes if none are present in the input sources.  Add a
  - -enable-generate-build-notes=[yes|no] configure time option to set the
    default behaviour.  Set the default if the configure option is not used
    to "no".
  * Remove -mold-gcc command-line option for x86 targets.
  * Add -O[2|s] command-line options to x86 assembler to enable alternate
    shorter instruction encoding.
  * Add support for .nops directive.  It is currently supported only for
    x86 targets.
  * Speed up direct linking with DLLs for Cygwin and Mingw targets.
  * Add a configure option --enable-separate-code to decide whether
  - z separate-code should be enabled in ELF linker by default.  Default
    to yes for Linux/x86 targets.  Note that -z separate-code can increase
    disk and memory size.
  * Includes riscv-relax-size.patch, riscv-relax-relocatable.patch,
    riscv-relax-versioned-hidden.patch and riscv-wrap-relax.patch
- Refresh enable-targets-gold.diff.
- Adjust cross-avr-omit_section_dynsym.patch.
- Remove binutils-2.30-branch.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1533038400">- Disable -z separate-code everywhere but in Tumbleweed.</changelog>
  <changelog author="matz@suse.com" date="1535457600">- Update to binutils-2_31-branch @e51abf7e3, minor bugfixes in
  the support for the X86_ISA_1_* notes.  Adds
  patch binutils-2.31-branch.diff.gz .
- Add binutils-revert-plt32-in-branches.diff on anything older
  than Tumbleweed to not break old tools not expecting
  PLT32 instead of PC32 relocs on x86_64.
- Includes fixes for these CVEs:
  * from 2.30:
    bnc#1065643 aka CVE-2017-15996 aka PR22361
    bnc#1065689 aka CVE-2017-15939 aka PR22205
    bnc#1065693 aka CVE-2017-15938 aka PR22209
    bnc#1068640 aka CVE-2017-16826 aka PR22376
    bnc#1068643 aka CVE-2017-16832 aka PR22373
    bnc#1068887 aka CVE-2017-16831 aka PR22385
    bnc#1068888 aka CVE-2017-16830 aka PR22384
    bnc#1068950 aka CVE-2017-16829 aka PR22307
    bnc#1069176 aka CVE-2017-16828 aka PR22386
    bnc#1069202 aka CVE-2017-16827 aka PR22306
  * from 2.31:
    bnc#1077745 aka CVE-2018-6323  aka PR22746
    bnc#1079103 aka CVE-2018-6543  aka PR22769
    bnc#1079741 aka CVE-2018-6759  aka PR22794
    bnc#1080556 aka CVE-2018-6872  aka PR22788
    bnc#1081527 aka CVE-2018-7208  aka PR22741
    bnc#1083528 aka CVE-2018-7570  aka PR22881
    bnc#1083532 aka CVE-2018-7569  aka PR22895
    bnc#1086608 aka CVE-2018-8945  aka PR22809
    bnc#1086784 aka CVE-2018-7643  aka PR22905
    bnc#1086786 aka CVE-2018-7642  aka PR22887
    bnc#1086788 aka CVE-2018-7568  aka PR22894
    bnc#1090997 aka CVE-2018-10373 aka PR23065
    bnc#1091015 aka CVE-2018-10372 aka PR23064
    bnc#1091365 aka CVE-2018-10535 aka PR23113
    bnc#1091368 aka CVE-2018-10534 aka PR23110</changelog>
</package>
<package pkgid="ddd340b73bc2adbdc3e957b5113ae3cba51128a30bdedf59dc753acf580d6e81" name="csync" arch="src">
  <version epoch="0" ver="0.50.0" rel="lp150.2.3.1"/>
  <changelog author="anschneider@suse.de" date="1214395200">- Update to version 0.42.0 alpha3
  libcsync:
  * Added a tree merger to write a complete journal
  * Added support to run csync without a journal
  * Fixed kerberos support in csync_smb module
  * Fixed closing of files after the copy
  * Fixed update detection to detect special files (fifo, pipes,
    char devices, ..)
  * Fixed O_NOATIME flag on open() if we don't have the permission
  csync:
  * Add a variable to run csync completely without a journal</changelog>
  <changelog author="anschneider@suse.de" date="1214568000">- Fixed csync on PPC</changelog>
  <changelog author="anschneider@suse.de" date="1215000000">- Update to version 0.42.0 alpha4
  libcsync:
  * Added the possibility to run csync completely without a journal
  * Improved chmod calls during propagation. Most of the time we use the
    default mode and don't need to call chmod.
  * Improved the exclude list handling in the file tree walker. This
    increased the speed of the update detection.
  * Fixed csync on PPC
  * Fixed serveral small bugs
  csync:
  * Added commandline option to run csync completely without a journal</changelog>
  <changelog author="anschneider@suse.de" date="1215086400">- Set the right group for the different packages</changelog>
  <changelog author="anschneider@suse.de" date="1221048000">- Created a subpackage for each plugin and for the user guide
- Update to version 0.42.0 beta1
  libcsync:
  * Added a sftp module using libssh
  * Added user guide (just a start)
  * Added testcase for update detection
  * Added a function to parse an uri to cstdlib
  * Updated the manpage
  * Fixed some segfaults in cstdlib
  * Fixed some memory leaks
  csync:
  * Improved the auth callback</changelog>
  <changelog author="anschneider@suse.de" date="1228478400">- Update to version 0.42.0 rc1
  libcsync:
  * Reduced calls of syscall functions.
  * Added own function to create a temporary filename.
  * Fixed libsmbclient 3.0.x support.</changelog>
  <changelog author="anschneider@suse.de" date="1231416000">- Update to version 0.42.0 rc2
  * Reduced syscalls
  * Fixed a bug in the state database
  * Fixed libsmbclient support
  * Completed userguide</changelog>
  <changelog author="anschneider@suse.de" date="1231416001">- Fix loading of plugins.
- Add requires to the plugins.</changelog>
  <changelog author="anschneider@suse.de" date="1232712000">- Update to version 0.42.0 rc3
  * Added checks for unix extensions.
  * Added more documentation to the userguide.
  * Fixed loading of plugins.
  * Fixed call for deletion functions.
  * Normalize the path to &lt;hostname&gt;/&lt;path&gt; for the statedb filename.
  * More change name of client options to be more descriptive.
- Add recommends for the plugins.</changelog>
  <changelog author="anschneider@suse.de" date="1235649600">- Update to version 0.42.0
  * Small fix in the userguide.</changelog>
  <changelog author="anschneider@exsuse.de" date="1239969600">- Fix Fedora build.
- Change the way how to set CFLAGS.</changelog>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="Klaas Freitag &lt;opensuse@freisturz.de&gt;" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
</package>
<package pkgid="63dbc1f8cf8edb4b059fe912114b909531725e1cd05f51aa762c739d46faf7fa" name="csync" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="lp150.2.3.1"/>
  <changelog author="anschneider@exsuse.de" date="1239969600">- Fix Fedora build.
- Change the way how to set CFLAGS.</changelog>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="Klaas Freitag &lt;opensuse@freisturz.de&gt;" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
</package>
<package pkgid="c150478ad46ef9cea3559dfb035be3e209ea9c5171856d90d7e51a3a9221690f" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="e7e6adc549cf6238c877a3ff77617517afe1c1ead146299d1015a7f3f5271470" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.153.b36ceaf2235" rel="lp150.3.14.1"/>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294); (bsc#1087303);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="ddiss@suse.com" date="1534766400">- Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230);
- Fix vfs_ceph flock stub; (bso#13506);
- Fix ntlm authentications with "winbind use default domain = yes";
  (bso#13126); bsc#(1068059);
- Allow idmap_rid to have primary group other than "Domain Users";
  (bsc#1087931).</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126); (bsc#1068059);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542110400">- Update to 4.7.11;
  + s3: util: Do not take over stderr when there is no log file;
    (bso#13578); (bsc#1101499);
  + s3: smbd: Ensure get_real_filename() copes with empty pathnames;
    (bso#13585);
  + s3: smbd: Prevent valgrind errors in smbtorture3 POSIX test; (bso#13633);
  + Durable Reconnect fails because cookie.allow_reconnect is not set
    redundant for SMB2; (bso#13549);
  + krb5-samba: Interdomain trust uses different salt principal; (bso#13539);
  + Fix possible memory leak in the Samba process; (bso#13362);
  + vfs_fruit: Don't unlink the main file; (bso#13441);
  + smbd: Fix a memleak in async search ask sharemode; (bso#13602);
  + Fix Samba GPO issue when Trust is enabled; (bso#11517);
  + samba-tool: Add virtualKerberosSalt attribute to 'user
    getpassword/syncpasswords'; (bso#13539);
  + smb2_server: Set req-&gt;do_encryption = true earlier; (bso#13624);
  + s3:winbind: Fix regression: winbind normalize names doesn't work for
    users; (bso#12851);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- CVE-2018-14629: dns: CNAME loop prevention using counter;
  (bso#13600); (bsc#1116319);
- CVE-2018-16841: heimdal: Fix segfault on PKINIT with mis-matching principal;
  (bso#13628); (bsc#1116320);
- CVE-2018-16851: ldap_server: Check ret before manipulating blob;
  (bso#13674); (bsc#1116322);
- CVE-2018-16853: build: The Samba AD DC, when build with MIT Kerberos is
  experimental; (bso#13678); (bsc#1116324);</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554465600">- Ensure we build against correct version of ldb; (bsc#1131686);
  (bsc#1125410).</changelog>
</package>
<package pkgid="9608183004dadfbfd1db78f7b59df48b404e1fd6357919dc7e816714aee8ef84" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6fc330519d6ccaa5f77767189c74e19be158190c32f0089b3a4a09504bd1a4ff" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8678d0416a931cfe0d379735a643ee99ab54aa4e55e3e25fca19c6b7c2597605" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="bd2a5877b92d4dd7032c412980f35298972a9c3a06696eac13a14ecb2a2e0886" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.153.b36ceaf2235" rel="lp150.3.14.1"/>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294); (bsc#1087303);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="ddiss@suse.com" date="1534766400">- Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230);
- Fix vfs_ceph flock stub; (bso#13506);
- Fix ntlm authentications with "winbind use default domain = yes";
  (bso#13126); bsc#(1068059);
- Allow idmap_rid to have primary group other than "Domain Users";
  (bsc#1087931).</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126); (bsc#1068059);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542110400">- Update to 4.7.11;
  + s3: util: Do not take over stderr when there is no log file;
    (bso#13578); (bsc#1101499);
  + s3: smbd: Ensure get_real_filename() copes with empty pathnames;
    (bso#13585);
  + s3: smbd: Prevent valgrind errors in smbtorture3 POSIX test; (bso#13633);
  + Durable Reconnect fails because cookie.allow_reconnect is not set
    redundant for SMB2; (bso#13549);
  + krb5-samba: Interdomain trust uses different salt principal; (bso#13539);
  + Fix possible memory leak in the Samba process; (bso#13362);
  + vfs_fruit: Don't unlink the main file; (bso#13441);
  + smbd: Fix a memleak in async search ask sharemode; (bso#13602);
  + Fix Samba GPO issue when Trust is enabled; (bso#11517);
  + samba-tool: Add virtualKerberosSalt attribute to 'user
    getpassword/syncpasswords'; (bso#13539);
  + smb2_server: Set req-&gt;do_encryption = true earlier; (bso#13624);
  + s3:winbind: Fix regression: winbind normalize names doesn't work for
    users; (bso#12851);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- CVE-2018-14629: dns: CNAME loop prevention using counter;
  (bso#13600); (bsc#1116319);
- CVE-2018-16841: heimdal: Fix segfault on PKINIT with mis-matching principal;
  (bso#13628); (bsc#1116320);
- CVE-2018-16851: ldap_server: Check ret before manipulating blob;
  (bso#13674); (bsc#1116322);
- CVE-2018-16853: build: The Samba AD DC, when build with MIT Kerberos is
  experimental; (bso#13678); (bsc#1116324);</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554465600">- Ensure we build against correct version of ldb; (bsc#1131686);
  (bsc#1125410).</changelog>
</package>
<package pkgid="633a1927d654a2a39d6e2db57e0b483cc5ca03e14868a1878dad22b207a2970f" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="80812e3f51a1ecd5ab5f6546b0833e642bd332b1c26e67775a506ccf9dbf2c83" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="628f4013f1244271e13f736d53011c9999ad41e2e4aa0893db545908250b907f" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.10+git.124.8d97fe90926" rel="lp150.3.9.1"/>
  <changelog author="aaptel@suse.com" date="1505390400">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
</package>
<package pkgid="46f4ce28f9ed3a0ee72dbd7714fb9056c14f9bcde42a559301f0eff8629c5e12" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.11+git.153.b36ceaf2235" rel="lp150.3.14.1"/>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294); (bsc#1087303);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
  <changelog author="ddiss@suse.com" date="1534766400">- Fix ctdb_mutex_ceph_rados_helper deadlock; (bso#13540); (bsc#1102230);
- Fix vfs_ceph flock stub; (bso#13506);
- Fix ntlm authentications with "winbind use default domain = yes";
  (bso#13126); bsc#(1068059);
- Allow idmap_rid to have primary group other than "Domain Users";
  (bsc#1087931).</changelog>
  <changelog author="aaptel@suse.com" date="1539259200">- Update to 4.7.10; (bsc#1111528);
  + support the new v4 Performance Co-Pilot API; (bsc#1111374)
  + quotas don't work with SMB2; (bso#13553);
  + Build failure when quota support not detected; (bso#13563);
  + vfs_fruit can leave lock records when testing for netatalk share
    mode locks - causing panic; (bso#13584);
  + vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests;
    (bso#13568);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + deadlock with ctdb_mutex_ceph_rados_helper; (bso#13540);
  + NTLM authentications using default domain/workgroup stopped
    working; (bso#13126); (bsc#1068059);
  + vfs_ceph lies about flock support; (bso#13506);
  + Using sendfile = yes with SMB2 can cause CPU spin; (bso#13537);
  + Durable Handle reconnect fails in
    smbd_smb2_create_durable_lease_check(); (bso#13535);
  + cli_splice() fallback code reads wrong amount on termination
    case; (bso#13527);
  + LDB 1.4.0 breaks Samba &lt; 4.9; (bso#13519);
  + samba-tool trust: support discovery via netr_GetDcName;
    (bso#13538);
  + samba-tool domain trust: fix trust compatibility to Windows Server
    1709 and FreeIPA; (bso#13308);
  + conn-&gt;vuid is invalid after a SMB session reauth; (bso#13351);
  + Durable Handles reconnect fails in a cluster when the cluster fs
    uses different device ids; (bso#13318);
  + cli_splice() doesn't correctly return written bytes as it's
    uninitialized in libsmbclient code; (bso#13511);
  + Threading support in talloc_tos() crashes when enabled;
    (bso#13505);
  + Incorrect talloc_stackframe handling in python ACL test code
    (make_simple_acl); (bso#13474);
  + Fail renaming file if that file has open streams; (bso#13451);
  + vfs_fruit: delete 0 byte size streams if AAPL is enabled;
    (bso#13441);
  + Creating missing remote databases during recovery can fail;
    (bso#13500);
  + CTDB_BROADCAST_VNNMAP should not be used; (bso#13499);
  + Fix building Samba with gcc 8.1; (bso#13437);
  + Uncaught exception at ldb_modules/password_hash.c:2241 during new
    domain provision; (bso#11573);
  + "net ads keytab add nfs" writes only one enctype with older
    kerberos libraries; (bso#13478);
  + VFS modules that implement pread/pwrite must also implement
    pread_send/pwrite_send; (bso#13425);
  + vfs_ceph is missing async fsync implementations; (bso#13412);
  + net ads keytab list fails with (smb_krb5_kt_open failed (Key table
    name malformed); (bso#13166);
  + s390 and s390 needs to run with 'use mmap = no' by default;
    (bso#10765);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542110400">- Update to 4.7.11;
  + s3: util: Do not take over stderr when there is no log file;
    (bso#13578); (bsc#1101499);
  + s3: smbd: Ensure get_real_filename() copes with empty pathnames;
    (bso#13585);
  + s3: smbd: Prevent valgrind errors in smbtorture3 POSIX test; (bso#13633);
  + Durable Reconnect fails because cookie.allow_reconnect is not set
    redundant for SMB2; (bso#13549);
  + krb5-samba: Interdomain trust uses different salt principal; (bso#13539);
  + Fix possible memory leak in the Samba process; (bso#13362);
  + vfs_fruit: Don't unlink the main file; (bso#13441);
  + smbd: Fix a memleak in async search ask sharemode; (bso#13602);
  + Fix Samba GPO issue when Trust is enabled; (bso#11517);
  + samba-tool: Add virtualKerberosSalt attribute to 'user
    getpassword/syncpasswords'; (bso#13539);
  + smb2_server: Set req-&gt;do_encryption = true earlier; (bso#13624);
  + s3:winbind: Fix regression: winbind normalize names doesn't work for
    users; (bso#12851);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542628800">- CVE-2018-14629: dns: CNAME loop prevention using counter;
  (bso#13600); (bsc#1116319);
- CVE-2018-16841: heimdal: Fix segfault on PKINIT with mis-matching principal;
  (bso#13628); (bsc#1116320);
- CVE-2018-16851: ldap_server: Check ret before manipulating blob;
  (bso#13674); (bsc#1116322);
- CVE-2018-16853: build: The Samba AD DC, when build with MIT Kerberos is
  experimental; (bso#13678); (bsc#1116324);</changelog>
  <changelog author="ddiss@suse.com" date="1549540800">- Abide by load_printers smb.conf parameter; (bso#13766); (bsc#1124223);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1550836800">- Fix update-apparmor-samba-profile script after apparmor switched
  to using named profiles. The change is backwards compatible;
  (bsc#1126377);</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554206400">- CVE-2019-3880: Save registry file outside share as unprivileged
  user; (bso#13851); (bsc#1131060 ).</changelog>
  <changelog author="npower &lt;nopower@suse.com&gt;" date="1554465600">- Ensure we build against correct version of ldb; (bsc#1131686);
  (bsc#1125410).</changelog>
</package>
<package pkgid="f7fa7ebf036519d06485fb4eff6449b071acf7aeffd84c473b726611ef57e281" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="dcb8b6beb4d46aca9cd86714fe06daf80f6a1645afdcd85add903cfbb5687d4e" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="91c8dd4a57d407c21d59fdb31290d56ce26a74080ddf006998468e0b8374b009" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="565af48d2b77e96ca31c7c1364c651e036353b37fa49b14d42297cc0f03e6041" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="96a2d9f3c002519a4974953ae803bf1956618124d00847336605a117776cdae7" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="9b634f187aa05286f1c26f60abedec377f43da326958ba0d29d382975bc38eb6" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="39d5f3a3b5e140860296c11b91c75211a9b0f6b1382d0fbe1f61fe3031b7fcc0" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="792cb8322714926dfbf1a3b03e00c3663d0d6fe1af8559ba0b1fa243cd516ab1" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="fe445021de41c6db4e198b5056c352b4c6785ca1598defd1979f84bad5ddfcea" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="5dc348a725260d784d1ec3c607fbcb186f34929540a910599130349de93b8d36" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="5f249ee50aa81711770cd74dea42b0aa7b14923f80a0edf03716463c1443c52f" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="1fcd62e99b97492a78f7895a4c982c4f2ec88d89278c2e1fe0d8f63c1d3f58e4" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="efb9aad469202f6ca811d9c2e1f5382ec1c7a4eb04cadb16d5580522ba03229d" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="19190b5c4a283dc4867b700005bf9f3649e72d69862a08af15fd3ae41dd62486" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="ed08f90f6f0854c88c7404d3ae926ce96a2aa4e74ef7d7bec2db4cec40e0404f" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="3da602c05f0ec6f2e258e3d171aeae34f92c22f9364df30ad5e2eec8d972d6a0" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="b558d9da6735a99386454ab152ae759afafb72d5fb74340b834c98cce8348135" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="0583c11a4691c7eb372a50ef1ee769bc1cf846a1c0996b420dcd215fb1841972" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="5f775a176171d0ec2c05dc093f17876adabe9861e88a11ba5ca5cbc6a047dc77" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="4c2401d216068973310b5cb176779eef504a49a1915c166643afe1881676c6a8" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="e326b97c5fd9bb3100361fa9f828a123df0f3e79ecfb1a2178d71e84be00d13b" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.10.2"/>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
</package>
<package pkgid="bd2c346a63427311b72256e99b64e53a8a4d5b3e81c1b81cf50cff8c11e5cbee" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="a8d925f64b4f26d95d735d7c21582164d97b98d522e5e35f7e7555769a2aedb0" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.6.1"/>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
</package>
<package pkgid="febc8ad6271432cebe6c0b765a07aa1834a599e2705ed9a844baa3d2770d6598" name="cups-filters" arch="src">
  <version epoch="0" ver="1.20.3" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="db01d3928a12a2c79694b19281d0487ac7fd4b4427e6433036beddcaa9f3c1dd" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="1b627763150f059260393b8590fe736c0cacc61e2dff0933a510105059838864" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.20.3" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1435579200">- Version upgrade to 1.0.70
  Changes in 1.0.70 (excerpt - for details see the NEWS file):
  * texttopdf: Fixed buffer overflow on size allocation
    of texttopdf when working with extremely small line sizes,
    which causes the size calculation to result in 0
    CVE-2015-3258 (bsc#936281), thanks to Stefan Cornelius
    from Red Hat for the patch.
  * cups-browsed: leak fixes
  * cups-browsed: Further BrowseAllow fixing
  * cups-browsed: BrowsePoll is an array of pointers,
    not structures, so allocate room for the pointers
  * cups-browsed: Prevent NULL dereference when handling
    BrowseAllow without value
  * cups-browsed: Use memory deallocation function
    corresponding to allocation function used
  * cups-browsed: Fixes for glib source handling
    (Red Hat bug #1228555)
- Version upgrade to 1.0.69
  Changes in 1.0.69 (excerpt - for details see the NEWS file):
  * cups-browsed: When checking whether a queue name already
    exists as a locally defined queue, do case-insensitive
    comparing as for CUPS printer names are case-insensitive.
    This assures that already existing queues do never get
    overwritten.
  * cups-browsed: Added "IPPPrinterQueueType Auto/PPD/NoPPD"
    directive to cups-browsed.conf to allow controlling how
    cups-browsed creates queues fr native IPP network printers:
    with PPD, with System V interface script, or selecting
    automatically.
  * pdftopdf: Center Landscape-oriented jobs correctly
    on the page if the "fitplot" or "number-up" options
    are used (Bug #1284).
  * pstopdf: Removed "-dUseCIEColor" from the Ghostscript command
    line. In modern Ghostscript versions (9.11 and newer) it is
    recommended to not use it with the pdfwrite and ps2write
    output devices any more.
  * imagetopdf: Corrections in PDF output: Let evince display
    the PDF with the correct size including margins and let
    ghostscript not complain about an invalid xref entry.
  * sys5ippprinter: Renamed pdftoippprinter to reflect that it is
    once a System 5 interface script and second does not accept
    only PDF as input.
  * pdftoippprinter: Support also PWG Raster and JPEG as input
    formats so that an auto-generated, PPD-less queue for an
    IPP printer emulates an IPP Everywhere printer.</changelog>
  <changelog author="jsmeix@suse.de" date="1436184000">- Version upgrade to 1.0.71
  Changes in 1.0.71 (cf. the NEWS file but there is a typo
  in the NEWS file that claims the CVE number is 3259
  while the correct CVE number is 3279):
  * texttopdf: The Page allocation is moved into textcommon.c,
    where it does all the necessary checking:
    lower-bounds for CVE-2015-3258 (bsc#936281) and
    upper-bounds for CVE-2015-3279 (bsc#937018)
    due to integer overflows for the calloc() call
    initialising Page[0] and the memset() call in texttopdf.c's
    WritePage() function zeroing the entire array.
    Thanks to Tim Waugh from Red Hat for the patch.
  * texttopdf: Upper-bounds checking CVE-2015-3279 (bsc#937018).</changelog>
  <changelog author="zaitor@opensuse.org" date="1437912000">- Add cups-filters-poppler-034.patch: Fix build with poppler-0.34.
  See https://bugs.linuxfoundation.org/show_bug.cgi?id=1301
  pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
  that this patch disables color management in this filter.</changelog>
  <changelog author="jsmeix@suse.de" date="1441281600">- More appropriate URL entry in spec file:
  Now it is (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/cups-filters
  that shows mainly generic information instead of (wrapped URL)
  http://www.linuxfoundation.org/collaborate/workgroups
    /openprinting/pdf_as_standard_print_job_format
  that provides mainly technical details.</changelog>
  <changelog author="jsmeix@suse.de" date="1444219200">- FirstPage_LastPage_only_if_needed.patch lets foomatic-rip
  add -dFirstPage=N [and -dLastPage=M] to the Ghostscript
  command line only if those options are actually needed
  (i.e. if FirstPage &gt; 1 [and when LastPage &gt;= FirstPage])
  cf. http://bugs.ghostscript.com/show_bug.cgi?id=696246
  and https://bugs.linuxfoundation.org/show_bug.cgi?id=1324
- At least for now support for cups154 in the SLE12 legacy module
  is abandoned (by default SLE12 has CUPS 1.7.5) because newer
  cups-filters versions again use stuff that is provided
  since CUPS &gt; 1.5.4 so that it does no longer build with
  CUPS 1.5.4. Perhaps I (jsmeix@suse.de) find time to fix it
  again for CUPS 1.5.4 but when not, newer cups-filters will
  no longer work with CUPS 1.5.4.
- Version upgrade to 1.0.76
  Changes in 1.0.76 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Let the load-balancing queue up
    the jobs in the local (generated) queue until a free (idle,
    enabled, and accepting jobs) remote queue is found (check
    every 5 sec if no free queue available). This gives a more
    even distribution of the work amongst the servers and
    protects against the case that a bunch of jobs gets
    inaccessible or lost if one of the servers fails.
  * cups-browsed: Let the load-balancing also check whether the
    destination queue is actually accepting jobs.
  * cups-browsed: If a generated queue is not removed on
    shutdown of cups-browsed due to remaining jobs in it,
    re-enable it in the next cups-browsed session even if it was
    disabled by something other than cups-browsed.
  * implicitclass: Clean up debug and error messages.
  * implicitclass: Fix exit codes for immediate retry of jobs.
  * cups-browsed: Make absence of CUPS notifications via D-Bus
    non-fatal and fall back to the old behavior of cups-browsed
    (fail-over instead of load balancing for equally-named
    remote queues, do not remove generated queue if it is
    default instead of default printer management). This solves
    problems of CUPS and/or cups-browsed built without D-Bus
    support or absence of D-Bus on the system (Bug #1316).
  * cups-browsed: Do not use g_warning() function, sneaked in
    by copy and paste of CUPS subscription functions.
- Version upgrade to 1.0.75
  Changes in 1.0.75 (excerpt - for details see the NEWS file):
  * texttopdf: Really support BoldItalic (original texttops
    just maps BoldItalic to Bold).
  * texttopdf: Fixed segfault when outputting BoldItalic
    (Bug #1314).
- Version upgrade to 1.0.74
  Changes in 1.0.74 (excerpt - for details see the NEWS file):
  * cups-browsed: Added NULL check when getting the notification
    of a printer starting to process a job and checking whether
    this printer is created by cups-browsed with the
    implicitclass: backend (Ubuntu bug #1488524).
  * cups-browsed: Do not schedule printers for update when they
    are already marked as disappeared.
  * cups-browsed: Added sanity checks when saving the default
    printer selection in a file.
  * cups-browsed, implicitclass: If remote queues disappear or
    cups-browsed shuts down and a cups-browsed-generated queue
    still has jobs and needs to be kept therefore, disable it
    and re-enable it when cups-browsed starts again and/or the
    remote queue(s) re-appear(s). This avoids repeated retries
    of the jobs while the remote server is not available, causing
    unneeded system load and battery consumption.
  * cups-browsed: After polling info from remote CUPS servers
    to find the best destination job, set the default CUPS server
    back to local.
- Version upgrade to 1.0.73
  Changes in 1.0.73 (excerpt - for details see the NEWS file):
  * cups-browsed: Added missing
    utils/org.cups.cupsd.Notifier.xml file.
- Version upgrade to 1.0.72
  Changes in 1.0.72 (excerpt - for details see the NEWS file):
  * cups-browsed, implicitclass: Added load balancing
    functionality. If there are several remote CUPS printers
    with the same name, they for locally a cluster represented
    by a print queue with this name. This printer prints through
    a special backend (implicitclass) which makes cups-browsed
    find the best destination remote queue (fewest jobs,
    enabled) for this job.
  * cups-browsed: Added protection against accidental deletion of
    print queues generated by cups-browsed. These queues now get
    automatically re-created.
  * cups-browsed: Added LDAP support. Appropriately configured
    via cups-browsed.conf remote printers made available via LDAP
    will be looked up and local queues pointing to them created.
    Thanks to Raphael Geissert (atomo64 at gmail dot com) for
    contributing this patch (Debian bug #795185).
  * cups-browsed: Introduced new handling for the default printer
    using cache files. So we do not need to keep an auto-generated
    queue because it is set as default printer. If the
    auto-generated queue disappears, the old local printer is set
    as default again and when it re-appears it returns to be the
    default printer.
  * cups-browsed: Added infrastructure for subscribing to CUPS
    notifications for things like improved default printer
    handling, load balancing, ...
  * foomatic-rip: Prevent crash when supplying "media" option with
    empty value ("media=", Ubuntu bug #1479871).
  * pdftoopvp: Adaptations to API changes on Poppler 0.34.0, note
    that this patch disables color management in this filter.
    Thanks to Vincent le Garrec and Andreas K. Huettel for the
    patch (Bug #1301, Gentoo bug #554782).
  * texttopdf: Request the generic 'monospace' font alias from
    fontconfig instead of the hard-coded FreeMono. Thanks
    to Fabian Greffrath (fabian at debian dot org) for the
    patch (Debian bug #788048).
- cups-filters-poppler-034.patch is obsolete since version 1.0.72
  because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1450353600">- Version upgrade to 1.4.0
  Changes in 1.4.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the semicolon
    (';') as an illegal shell escape character. Thanks to Adam
    Chester (adam dot chester at pentest dot co dot uk) for the
    hint CVE-2015-8560 (bsc#957531).
  * brftoembosser, imagetobrf, imagetoubrl, imageubrltoindexv3,
    imageubrltoindexv4, textbrftoindexv3, textbrftoindexv4,
    texttobrf, braille.convs, braille.types, generic-brf.drv,
    indexv3.drv, indexv4.drv: Added support for Braille
    embossing via CUPS. Text and even images can now be sent to
    a Braille embosser like to a printer. Thanks to Samuel
    Thibault (samuel dot thibault at ens-lyon dot org) for this
    contribution.
- BuildRequires liblouis-devel is needed for Braille embossers.
- Version upgrade to 1.3.0
  Changes in 1.3.0 (excerpt - for details see the NEWS file):
  * cups-browsed: Added new BrowseFilter directive in
    cups-browsed.conf.  This directive allows filtering of the
    remote printers to be accepted on most properties/metadata
    supplied with the DNS-SD broadcasts. This allows, in
    addition to BrowseAllow/BrowseDeny/BrowseOrder, to reduce
    the amount of printers listed in print dialogs to a more
    useful amount.
  * cups-browsed: Added support for BrowseDeny and BrowseOrder
    directives in cups-browsed.conf.
  * cups-browsed: Let the BrowseAllow lines in cups-browsed.conf
    also apply to remote printers discovered via DNS-SD.
- Version upgrade to 1.2.0
  Changes in 1.2.0 (excerpt - for details see the NEWS file):
  * foomatic-rip: SECURITY FIX: Also consider the back tick
    ('`') as an illegal shell escape character. Thanks to Michal
    Kowalczyk from the Google Security Team for the hint
    CVE-2015-8327 (bsc#957531).
- Version upgrade to 1.1.0
  Changes in 1.1.0 (excerpt - for details see the NEWS file):
  * Version numbering scheme changed: Releases with feature
    addition/change have the minor number increased now, pure
    bug fix releases get the revision number increased, to make
    use of the minor number which stayed zero all the time.
  * cups-browsed: Added "DefaultOptions" directive to
    cups-browsed.conf to allow defining default option settings
    for local queues to be generated for newly appearing remote
    printers.
  * cups-browsed: Let option settings of a generated print queue
    be saved before taking the queue down so that when the remote
    printer appears again all user changes get restored, making
    user changes permanent on generated queues.
  * cups-browsed: Added a mode in which IP-based device URIs
    for the generation of local print queues are used, for
    cases with problems in local host name resolution.
  * foomatic-rip: Use -dFirstPage=... and -dLastPage=... only
    if really needed (Bug #1324).
  * cups-browsed, implicitclass: Make the load-balancing
    configurable so that one can select whether the jobs get
    queued up locally like in a CUPS class or whether they get
    immediately distributed to the remote servers letting them
    queue up there.
- FirstPage_LastPage_only_if_needed.patch is obsolete since
  version 1.1.0 because it is fixed in the sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1457006400">- Version upgrade to 1.8.2
  * Allow disabling dependencies on Ghostscript and Foomatic
    (Bug #1342).
  * cups-browsed: Optionally generate also local queues pointing
    to remote raw queues. Usually only queues pointing to remote
    queues with PPD/driver are created (Debian bug #814020,
    Debian bug #756724).
- Version upgrade to 1.8.1
  * cups-browsed: Do not disable queues which still have jobs (and
    therefore cannot be removed) when avahi-daemon goes away, the
    print server is most probably still available and printing can
    be continued. Especially important on mobile devices where
    avahi-daemon is shut down when the print dialog is closed (and
  the job(s) still printing).
- Version upgrade to 1.8.0
  * COPYING: Replaced the COPYING file by a file in Debian format,
    derived from Debian's file but updated and corrected.
  * braille: Added info about additional packages needed for
    Braille printing to the README file.
  * braille: Let the Braille filters use lou_translate of
    liblouis if the more sophisticated file2brl of liblouisutdml
    is not installed. This is decided on at run time, so later
    installation of liblouisutdml will let the filters
    automatically switch to file2brl.
  * braille: Allow to build with Braille support also if
    liblouis is not installed at build time.
  * braille: Added checks for the presence of helper tools, to
    get clear messages in the CUPS error_log if something is
    missing.
  * Fixed copyright headers of files inherited from CUPS or
    derived from CUPS, pointing to COPYING as license info file,
    removing Apple exceptions, removing hints that a missing
    license info file can be found at www.cups.org, and removing
    "$Id" SVN file ID placeholders.
  * Updated COPYING file for missing implicitclass and beh
    backends.
- Version upgrade to 1.7.0
  * cups-browsed: Added possibility to trigger the auto shutdown
    by the queues of cups-browsed being without jobs. Before
    auto shutdown was only possible when all queues have gone
    away. This allows auto shutdown on mobile devices where
    avahi-daemon is also used for other things than printing.
- Version upgrade to 1.6.0
  * cups-browsed: Fixed use of CUPS domain socket, both
    detection during build process and permission check at
    runtime.
  * foomatic-rip: Fixed buffer overflow when reading environment
    variables CUPS_FONTPATH, CUPS_DATADIR, and GS_LIB (Bug
    [#1336]).
  * beh: Introduced beh, the Backend Error Handler, a wrapper
    backend to make handling of backend errors more
    configurable. This backend is a C re-write of the beh
    backend written in Perl which was part of the former
    foomatic-filters package. Several people asked for beh
    getting moved to cups-filters.
  * braille: Make image printing working also if ImageMagick
    generates formatted images without header.
  * braille: If the user does not select a Braille translation,
    let the embosser do the translation.
  * cups-browsed: Added version info to help screen and start-up
    in debug mode, call help screen also via "--version" option.
  * cups-browsed: Minor improvements in help screen and man page.
- Version upgrade to 1.5.0
  * cups-browsed: Allow use of an alternative configuration file
    via the "-c" command line option.
  * cups-browsed: Allow supplying configuration settings via the
    command line using the "-o" command line option.
  * cups-browsed: Command line help via the "-h" or "--help"
    command line option.</changelog>
  <changelog author="tchvatal@suse.com" date="1484913600">- Version upgrade to 1.13.3:
  * As the changelog is long for detailed info check the NEWS file
  * Disable mutool switch to not build with mupdf package in order
    to not expand the dependencies too much
  * /usr/lib/cups/filter/textonly was renamed to texttotext
  * pstopdf filter dropped by upstream (cf. boo#1036220)
  * Add new driverless binary/driver to work with
    new style IPP printers that do not require any driver</changelog>
  <changelog author="jsmeix@suse.de" date="1489406400">- fallback_read_ppd_file_from_environment.patch
  lets foomatic-rip call read_ppd_file() with
  PPD filename from environment as fallback, see
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1388</changelog>
  <changelog author="jsmeix@suse.de" date="1496145600">- Since version 1.14.0 there are no longer sub-packages
  (except cups-filters-devel) because nowadays cups-filters
  can no longer be built with CUPS &lt; 1.6 with reasonable effort,
  see the entry below dated "Wed Oct  7 11:16:13 CEST 2015".
  On systems with CUPS &gt;= 1.6 (i.e. since SLE12 GA / Leap 42.1)
  there is no good reason to keep cups-filters split into
  sub-packages and furthermore that split causes continuous
  (nowadays useless) efforts and bugs (like boo#1034877).
- Version upgrade to 1.14.0:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Added new setting "LocalOnly" for the
    CreateIPPPrinterQueues in cups-browsed.conf.
- Version upgrade to 1.13.5:
  Some excerpts (for details see the NEWS file):
  * foomatic-rip: When called via cupsfilter, foomatic-rip was
    not able to read the PPD file with (Bug #1388).
  * cups-browsed: When creating a local queue for a remote CUPS
    printer, add the line '*APRemoteQueueID: ""' to the PPD file
    so that CUPS sets the CUPS_PRINTER_REMOTE bit for the
    printer type of the local queue (Bug #1386).
- fallback_read_ppd_file_from_environment.patch is no longer
  needed because it is now provided in the upstream sources
  (see the "Bug #1388" entry above).
- Version upgrade to 1.13.4:
  Some excerpts (for details see the NEWS file):
  * cups-browsed: Corrected determination whether an IPP status
    is an error, to avoid "Unable to create/modify CUPS queue
    (Success)" and infinite repetition of a succeeded operation
    (Debian bug #852436).</changelog>
  <changelog author="jsmeix@suse.de" date="1496318400">- The RPM scriptlet hack that created a special cupsfilters.convs
  so that the gstoraster filter can be used with CUPS &lt;= 1.5.4
  does no longer make sense and is therefore removed.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- The filter for Apple Raster input is rastertopdf
  for CUPS 2.2.2+ and urftopdf for older CUPS.
  Because Factory/Tumbleweed uses the newest CUPS for build
  (which is currently CUPS 2.2.3 as of this writing) the filter
  for Apple Raster input is rastertopdf for Factory/Tumbleweed
  so that /usr/lib/cups/filter/urftopdf must be excluded
  from the RPM files list for Factory/Tumbleweed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505563200">- Version upgrade to 1.17.6:
  * As the changelog is long for detailed info check the NEWS file.
  * Package new filters.
  * Compatible with poppler 0.58 and newer (Bug #1408).</changelog>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1570190400">- Add patch cups-filters-297cc2de-gs-9.27.patch
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (boo#1152720)</changelog>
</package>
<package pkgid="2d28ce3d5b15f6d9ccf26781f71627e1475d9427abfb4e770cff57cdd35ac6bf" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="a40606a8a5ce046983fd47236fb3b3c9c3a602e21abb3ef7389624a036bdf59c" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="b3f16ae101e1b53772d83e0bbbd87282b2e4a46ca896dcd0d9fd31bae093d98d" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="14c55fe44b69d9cbd278e4a04da5ecb4b229e62b4a575329aaecdb9fcc45f4ae" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="01dedb98a086b2dd2783c30ac092d1470d189346797b8eaad6231a680a4124b2" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
</package>
<package pkgid="31078bfa0477cad97727e1b0e15523db96d57eec21304c47996e6d6291211bc5" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
</package>
<package pkgid="6c6732bebfef7b50d2ba1495481104c9e699b25aafb263c7d8e67eb7f0876ee7" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.22.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="d5d93eccfec913822ff44089d174ff4692f41d6e7aaea027126f2daa11f8b916" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.22.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
</package>
<package pkgid="7c7bfde9ffe3472a7d2d273c31d88d83093d906dbe2ae2377f6745580452683b" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.25.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="964a416883eaf142f7133bd770888744a2b4c89761e2c785cc5b2a6aee89f231" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.25.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1113029, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548676800">- Security fix [bsc#1123371, CVE-2018-16890]
  * NTLM type-2 out-of-bounds buffer read
  * Added patch curl-CVE-2018-16890.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
</package>
<package pkgid="383cddd1f172fe8c9b1b0f271b12509aa44697d1ae49ac20ce497d341e103549" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="c3b6160c0111173cd77006faf04fb913c56241975c84b886e081223f9596ad60" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="2bead9f09c0894b9e7aca96c1e2b15cc5ce9fdd334ab1a282723a1dcc827525a" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="fe8a71b5d9d3f0e1b64e38aa2992e4412fd7a41b7ae08c30fc0e1fc67dc24f69" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="f4cc67b750c31772b3747e51dcd711e0c3d943b9c96a139343103cfc70b4758a" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="7e830ffad3c32a7864a5d136383a0a3799a9134ada187309e47249227d3e57e8" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="6b52a4a6cc07cc9fb1e030e502c9ed6590a2df8bf6ef195596ac73413756a68c" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="eccbde9d7cb53581a9caa2ee48b1f1a581fd5b133f3959648d5e2ad27fb693b0" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="a64a6dd51d2980ec20106f11d5e4474f62b28ab51c394bda3cbb2997da720cc7" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="57e14f446b99f69c79f4756f473d87ce7dca8bb3fccab5faecdbaeed7c38ff87" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.15.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="71f97d0a2c88a4e1a373935ee6a456597486179984124018379aede51439e5f4" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="fb77ed03d2957387c2db433d7d8d75a0520beb7dec44958ece357b6cf9938aeb" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.18.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382400">- Security fix [bsc#1112758, CVE-2018-16839]
  * SASL password overflow via integer overflow
  * Added curl-CVE-2018-16839.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540382401">- Security fix [bsc#1112758, CVE-2018-16840]
  * use-after-free in handle close
  * Added curl-CVE-2018-16840.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1540814400">- Security fix [bsc#1113660, CVE-2018-16842]
  * Fixed Out-of-bounds Read in tool_msgs.c
  * Added curl-CVE-2018-16842.patch</changelog>
</package>
<package pkgid="f1ac3bb2d33da0f1aaf5eacd3c5355a5e02d4a810d72ba6c718bb59917748b63" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="9cb07feeb7d39ff46961aa648fb951359e733692fcb1c3ab3e6f6b8d34d76e5f" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="780452cefa75bc79d2ef0a29454394aa9091c7d2eca90c2c11fed355b6f3cf60" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="b8c2d289d858b74cec865a7c785bf9c2342d61786b39354c924e8b5dc71aa518" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="74600df5ec626b7629ed87380f3794189b1153c0f5f3a39235531e07446e5cb5" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="32406113ce5b26939d46f8be72c2bb6cc5add947b89a1c8e1750462e6386c30e" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="537e6a5d4b4cf39f424777bb4f7127bdf3c8ebf566a79fbd624b58d72214d41f" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="4034f223941faa3ae381efc0f0d51838c3b3c0f018807cd8e9009a53b347ed73" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="89388999ed984556c0466c56d5a2923816fe9a49225e25d1cfbc32f6cdb628d3" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="416228fae9519a840e61f6768f662d3254c7ad580ec4e528fb4e215c4cd97f61" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="3e64bc2db3ac7da42b6362ae863ec25aeb3b929aac6d20c52bee7d84ecd0c015" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="88290d81f73ad85c486a1646e79072fa09145cb89adced950101ce1f367690c0" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="9e977273e1d8fbffc32a779486440f1fc1c3c93036120b772047f54441cf3b51" name="cyrus-sasl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="20d46e7a35575d29560826c1b0a8181a63cb324babbd3e8a9ed6f33d6c7dbda2" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="82c6b7c0408ae6a5b85f5bcac900987e5c4289d0cbc0c133c989c5e73e99ddab" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="2b526e7ff3dc63675330153d0daa19898fd74f04bddf235e1174417eff8c0f98" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="f231de499b89ed6640b592219f8d8affe99cc5c4b451b2af88580ff8859d6657" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="ebee846fcc30ab1a2ac36d2a5b547d5462a30e52d8952cdb8708a2999088368c" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="c7d7e6a9858a2ab9d8a8b625bf767df85210a66aa22d4cfd1484c2501c8f5e6d" name="cyrus-sasl-ldap-auxprop" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="509af31950d454eaa8c6243556811026c49505c7dd91c018c720efa1657277a4" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="1c1b8e71afd25062f5782a267a414fddf07822c82a4846c4cf6be5289c3e884d" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="59b107ca08af89013ea4de0a0492f070471a677789d9a7c4a7a45771970123d5" name="cyrus-sasl-otp-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="338d22a39948ec27e7bd58b0bdead86a6a92629a8ec34e61d4d97364975c4cf7" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="68526b39508b9b1b51eb5913aef1e2e3cb8d2b12d402481920488429dbeb8509" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="26317b8b129124f1a44d04417d4cec01e436ed384439ff302e78c5336864bbf7" name="cyrus-sasl-saslauthd" arch="src">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="51d5ae34958275a74885fb8e26fe4e616f48f0d84a781f37fc755936d513e357" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="f02d93d0738b3a36f6d8f0a304fd89e71e8a3ee56ab24022cc9346f953a0852f" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
</package>
<package pkgid="307909bc9899d2a37cffbf8c5077bdd60074d4aee7203deba0aa14368f388792" name="cyrus-sasl-sqlauxprop" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="lp150.4.3.2"/>
  <changelog author="rhafer@suse.de" date="1344859200">- Include fix for Cyrus SASL Bug#3589:  When abort_if_no_fqdn is 0,
  a getaddrinfo failure should be ignored, as long as gethostname()
  succeeded. (bnc#771983)</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-sasl-db6.diff to fix compile abort with db &gt;= 5
- Simpler delete of .la files with find</changelog>
  <changelog author="obs@botter.cc" date="1374840000">- Fix for bnc#827230 and #784705, fix patch as described in
  [#827230], typo in patch from request 112480 (remove rpath,
  Apr 4 2012), preventing sql auxprop plugin to work</changelog>
  <changelog author="jcnengel@gmail.com" date="1378209600">- Update to 2.1.26
  * Modernize SASL malloc/realloc callback prototypes
  * Added sasl_config_done() to plug a memory leak when using an application specific config file
  * Fixed PLAIN/LOGIN authentication failure when using saslauthd with no auxprop plugins (bug # 3590).
  * unlock the mutex in sasl_dispose if the context was freed by another thread
  * MINGW32 compatibility patches
  * Fixed broken logic in get_fqhostname() when abort_if_no_fqdn is 0
  * Fixed some memory leaks in libsasl
  - GSSAPI plugin:
    + Fixed a segfault in gssapi.c introduced in 2.1.25.
    + Code refactoring
    + Added support for GSS-SPNEGO SASL mechanism (Unix only), which is also HTTP capable
  - GS2 plugin:
    + Updated GS2 plugin not to lose minor GSS-API status codes on errors
  - DIGEST-MD5 plugin:
    + Correctly send "stale" directive to prevent clients from (re)promtping for password
    + Better handling of HTTP reauthentication cases
    + fixed some memory leaks
  - SASLDB plugin:
    + Added support for BerkleyDB 5.X or later
  - OTP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - SRP plugin:
    + Removed calling of EVP_cleanup() on plugin shutdown in order to prevent TLS from failing in calling applications
  - saslauthd:
    + auth_rimap.c: qstring incorrectly appending the closing double quote, which might be causing crashes
    + auth_rimap.c: read the whole IMAP greeting
    + better error reporting from some drivers
    + fixed some memory leaks
- New BuildRequires for pkgconfig since pkgconfig file is generated
- Removed patches that do no longer apply
  * cyrus-sasl-gcc4.patch (integrated upstream)
  * cyrus-sasl-gs2-not-overwrite-minor-error-code.dif (integrated upstream)
  * gssapi-null-deref.dif (integrated upstream)
  * Fix-abort_if_no_fqdn-behavior.patch (integrated upstream)
  * cyrus-sasl-db6.diff (integrated upstream)
- Move *.so files into devel package</changelog>
  <changelog author="jcnengel@gmail.com" date="1378900800">- Removed server side service to comply with Factory rules</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1380456000">- Add patch fix-sasl-header.diff to resolve build issues that
  are failing due to typedef 'sasl_malloc_t' is initialized.
  (see gentoo#458870, fedora#906519)</changelog>
  <changelog author="tchvatal@suse.com" date="1380974400">- Put back the .so files to sasl auth packages from devel file.
  The .so files are read by some application instead of full path
  so in order for auth to work this files must be available</changelog>
  <changelog author="jengelh@inai.de" date="1383393600">- Implement shlib packaging guidelines: make subpackage libsasl2-3.
  (All other .so files are _server_ plugins AFAICS, loaded via
  dlopen.)
- Ensure directories are owned by packages and thus get torn down
  on package removal</changelog>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="6c34690919c8679751e853125bb2fd09d90f1d90ba0b4fe3792ec1f2f5d42e6d" name="dapl" arch="src">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="1bdac297155ac60524738c98d9f9baedddb9df543be7f6619898f1090966fe36" name="dapl" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="5419b9a95f0153c933bdbee93a728412ffc6e2b04280802f7669a94449c6a4ab" name="dapl-debug" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="5e3f15dc8fb85333a45869327db6d79c2bb02676909995a9d8a75627bbc21ceb" name="dapl-debug-devel" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="2844195cea7aab29c731e63ed678ae3310599d8606619b9c7a0d6b58f212963c" name="dapl-debug-libs" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="98689f2983669a15b8f6548d64268b30ebe1963ab48e29980e928399d99d3ff0" name="dapl-debug-utils" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="5d9892142180abde42f0c08f01b0fd39002ad81b4cc94592126b64ed9efa99e8" name="dapl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="c349cc54c93fcf4dd160f112a722a1420cc1a3b15dc6d471e3971f20ad7933b4" name="dapl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="72eac9b10febf7a2d018cec042ff85761f09bf7308cae958ae70e315a0951c09" name="dapl-utils" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="lp150.2.3.1"/>
  <changelog author="pth@suse.de" date="1400587200">- Fix typo in dapl_test.c.</changelog>
  <changelog author="pth@suse.de" date="1403697600">- Provide full source URL</changelog>
  <changelog author="pth@suse.de" date="1403697601">- Remove dapl-2.0.13-build_error.patch as it isn't needed anymore.</changelog>
  <changelog author="pth@suse.de" date="1403870400">- Add baselibs.conf and dapl-rpmlintrc as source.
- Fix dapl-fix_type_punning.patch.
- Fix type punning in cm.c</changelog>
  <changelog author="pth@suse.de" date="1407153600">- Remove s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407412800">- Readd s390 support (bnc#856126).</changelog>
  <changelog author="pth@suse.de" date="1407499200">- Add dapl-rename_dtest.patch to rename dtest to dpltest because
  of name clash with dateutils.
- Also rename the man  page for dtest.
- Make dapl-devel and dapl-debug-devel obsolete each other.</changelog>
  <changelog author="coolo@suse.com" date="1410177600">- dapl-debug can't obsolete dapl or zypper will switch between the versions
  all the time. They do conflict though</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Also have dapl-utils conflict with dapl-debug-utils.
- Fix baselibs.conf to build libdat2-2-32bit.</changelog>
  <changelog author="pth@suse.de" date="1439294400">- Replace dapl-s390_support.patch with
  dapl-add-s390x-platform-support.patch (bsc#934683).
- Fix library name in baselibs.conf.
- Tag baselibs.conf and dapl-rpmlintrc as source.
- libdapl*.so work like plugins, hence they do not get a separate
  subpackage. So shut up rpmlint complaining about the package
  name.
- Drop the dapl-doc sub package and move the man pages to the
  packages containing the files/programs they describe.</changelog>
  <changelog author="pth@suse.de" date="1440504000">- Exclude aarch64 as there is currently no assembler code for this
  architecture.</changelog>
  <changelog author="dmueller@suse.com" date="1441886400">- add dapl-add-aarch64-platform-support.patch (fate#318444)
- revert last change</changelog>
  <changelog author="pth@suse.de" date="1457611200">- Update to 2.1.8 git version (bsc#970668).
  List of changes is too long so please see the included ChangeLog.
- Patches removed because the fixes are included upstream:
  dapl-fix_type_punning.patch
  dapl-autotools.patch
  dapl-add-s390x-platform-support.patch
  dapl-add-aarch64-platform-support.patch
  dapl-add-s390x-platform-support.patch
- Add dapl-s390.patch so that the defines are also valid for s390</changelog>
  <changelog author="pth@suse.de" date="1490788800">- Make dependencies on libs now coming from rdma-core versioned.
- Remove unused patch dapl-rename_dtest.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1495022400">- Disable dapl on armv7hl</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Restore description of libdapl. Fix some grammar errors.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496145600">- Add conflicts between dapl and dapl-debug packages for devel
  and utils
- Rename dapl-utils tests to avoid conflicts with other packages (dateutils)
  * dapltest =&gt; dapl-test
  * dtest    =&gt; dapl-utest
  * dtestcm  =&gt; dapl-testcm
  * dtestsrq =&gt; dapl-testsrq
  * dtestx   =&gt; dapl-testx
- Remove librdmacm and libibverbs version dependencies</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1497268800">- Merge .changes files with SLE12-SP3 (bsc#1041579)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1500552000">- Update to 2.1.10
  * dtest_suite: add option to pause the test.
  * dtestcm: add client retry, give server time to queue up all listens
  * dtest: Add new man pages. (dtestx dtestcm dtestsrq)
  * cma: fix open_query mode, initialize attributes
  * ucm: up level CM timer logging, increase drep time at scale
  * dtest: fix return value check on do_rdma_write_with_msg
  * dtestx: check device capabilities and do atomic tests only if supported by HW
  * common: set atomic attributes based on provider/device capabilities
  * build: dtest_suite.sh was moved to test/scripts
  * mpxyd: let TX thread sleep if no open devices are referenced
  * mcm: when mmap req from MIC return with fail stat print WARN.
  * dtest_suite: remove duplicate dtest_suite.sh
  * dtest: enable -D option (data check) to work with scif provider
  * dtest_suite: fix typo in user_string var
  * mcm: remove logs from post send speed path
  * mcm proxy: push WR from MIC to host with scif mmap memory instead of scif_send.
  * dtest: the default size in pingpong test is set to 1 byte regardless to user input.
  * dtest: cleanup 4 printfs from the middle of performance test, may reduce performance.
- Refresh patches against 2.1.10</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527595200">- Add ucm-mcm-fix-backlog-parameter-for-socket.patch to fix
  a "deadlock" that causes socket connection to timeout when
  net.ipv4.tcp_syncookies=0. (bsc#1094657)</changelog>
</package>
<package pkgid="2980e048d03e32405dabc160519aa6dbdbd2305d0813bf195a698ba9d4df9295" name="darktable" arch="src">
  <version epoch="0" ver="2.6.2" rel="lp150.3.3.2"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- drop llvm5.patch
- modified darktable-old-glib.patch to apply cleanly again</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- merge back in the fedora support</changelog>
  <changelog author="mrueckert@suse.de" date="1516622400">- update to 2.4.1
  - New Features
  - Allow to select the GUI language in the preferences
  - Add a filter rule to the collect module to find locally
    copied images
  - Add favourite toggle to darkroom modules' right click popup
  - Allow blending/masking in the hot pixels module
  - Add keyboard shortcuts to zoom and pan an image in darkroom.
    Panning uses the arrow keys, zooming defaults to `ctrl-` and
    `ctrl+`. Use `alt` and `ctrl` to change the step size of
    panning.
  - Some minor speedups in the grain module
  - Handling stdout on Windows: do not redirect stdout for simple
    command line arguments (`--help` and `--version`)
  - On Windows, show the location of the log file in the help
    message
  - Enable searching in the more modules list ? click into the
    list to give focus to it, then start typing. The default GTK
    shortcut `ctrl-f` doesn't work as it's used for filmstrip
    already
  - Add a debug print when compiling OpenCL kernels
  - Bugfixes
  - Use the configured overwrite color profile when exporting
    from Lua ? this broke GIMP integration
  - Support presets with `&lt;` in their name
  - Fix export to non-existing path with `\` as the path
    separator on Windows
  - Don't insist on the db being locked when it doesn't even
    exist
  - Don't touch the mix slider when resetting the curve in color
    zones
  - Fix a bug in the exposure module that would only allow
    corrections of up to 10 stops
  - Fix custom shortcuts with `shift` modifier
  - Properly ellipsize text in the recently used collections list
  - Fix exported galeries with filenames containing a `'`
  - Fix finding mipmaps cache folder in `purge_from_cache.sh`
    script
  - Fix a crash in the recently used collections list due to a
    broken config file
  - Set the sqlite threading mode to Serialized
  - Fix old export presets using OpenEXR
  - Fix building with clang on Windows
  - Changed Dependencies
  - iso-codes version 3.66 or newer is suggested for a nicer list
    of translations in the preferences.
  - Camera support, compared to 2.4.0 Warning: support for Nikon
    NEF 'lossy after split' raws was unintentionally broken due to
    the lack of such samples. Please see
    [this post](https://discuss.pixls.us/t/nikon-a-specific-raw-sample-wanted/5483?u=lebedevri)
    for more details. If you have affected raws, please contribute
    samples!
  - Base Support
  - Panasonic DC-G9 (4:3)
  - Paralenz Dive Camera (chdk)
  - Pentax KP
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - White Balance Presets
  - Leaf Credo 40
  - Nikon D3400
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS M100
  - Canon EOS M6
  - Sony DSC-RX100M4
  - YI TECHNOLOGY M1
  - Translations
  - Czech
  - Dutch
  - French
  - German
  - Hebrew
  - Hungarian
  - Italian
  - Slovenian</changelog>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
</package>
<package pkgid="7b82beccc5ebbefdead29259bfd01b8f060ca90b754a09a608e0473470df5a60" name="darktable" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp150.3.3.2"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- drop llvm5.patch
- modified darktable-old-glib.patch to apply cleanly again</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- merge back in the fedora support</changelog>
  <changelog author="mrueckert@suse.de" date="1516622400">- update to 2.4.1
  - New Features
  - Allow to select the GUI language in the preferences
  - Add a filter rule to the collect module to find locally
    copied images
  - Add favourite toggle to darkroom modules' right click popup
  - Allow blending/masking in the hot pixels module
  - Add keyboard shortcuts to zoom and pan an image in darkroom.
    Panning uses the arrow keys, zooming defaults to `ctrl-` and
    `ctrl+`. Use `alt` and `ctrl` to change the step size of
    panning.
  - Some minor speedups in the grain module
  - Handling stdout on Windows: do not redirect stdout for simple
    command line arguments (`--help` and `--version`)
  - On Windows, show the location of the log file in the help
    message
  - Enable searching in the more modules list ? click into the
    list to give focus to it, then start typing. The default GTK
    shortcut `ctrl-f` doesn't work as it's used for filmstrip
    already
  - Add a debug print when compiling OpenCL kernels
  - Bugfixes
  - Use the configured overwrite color profile when exporting
    from Lua ? this broke GIMP integration
  - Support presets with `&lt;` in their name
  - Fix export to non-existing path with `\` as the path
    separator on Windows
  - Don't insist on the db being locked when it doesn't even
    exist
  - Don't touch the mix slider when resetting the curve in color
    zones
  - Fix a bug in the exposure module that would only allow
    corrections of up to 10 stops
  - Fix custom shortcuts with `shift` modifier
  - Properly ellipsize text in the recently used collections list
  - Fix exported galeries with filenames containing a `'`
  - Fix finding mipmaps cache folder in `purge_from_cache.sh`
    script
  - Fix a crash in the recently used collections list due to a
    broken config file
  - Set the sqlite threading mode to Serialized
  - Fix old export presets using OpenEXR
  - Fix building with clang on Windows
  - Changed Dependencies
  - iso-codes version 3.66 or newer is suggested for a nicer list
    of translations in the preferences.
  - Camera support, compared to 2.4.0 Warning: support for Nikon
    NEF 'lossy after split' raws was unintentionally broken due to
    the lack of such samples. Please see
    [this post](https://discuss.pixls.us/t/nikon-a-specific-raw-sample-wanted/5483?u=lebedevri)
    for more details. If you have affected raws, please contribute
    samples!
  - Base Support
  - Panasonic DC-G9 (4:3)
  - Paralenz Dive Camera (chdk)
  - Pentax KP
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - White Balance Presets
  - Leaf Credo 40
  - Nikon D3400
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS M100
  - Canon EOS M6
  - Sony DSC-RX100M4
  - YI TECHNOLOGY M1
  - Translations
  - Czech
  - Dutch
  - French
  - German
  - Hebrew
  - Hungarian
  - Italian
  - Slovenian</changelog>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
</package>
<package pkgid="d6410fb3bb258ec45d50da8e17b224424cf66faf6f067aba2c8747de33977a0f" name="darktable-doc" arch="noarch">
  <version epoch="0" ver="2.6.2" rel="lp150.3.3.2"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- drop llvm5.patch
- modified darktable-old-glib.patch to apply cleanly again</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- merge back in the fedora support</changelog>
  <changelog author="mrueckert@suse.de" date="1516622400">- update to 2.4.1
  - New Features
  - Allow to select the GUI language in the preferences
  - Add a filter rule to the collect module to find locally
    copied images
  - Add favourite toggle to darkroom modules' right click popup
  - Allow blending/masking in the hot pixels module
  - Add keyboard shortcuts to zoom and pan an image in darkroom.
    Panning uses the arrow keys, zooming defaults to `ctrl-` and
    `ctrl+`. Use `alt` and `ctrl` to change the step size of
    panning.
  - Some minor speedups in the grain module
  - Handling stdout on Windows: do not redirect stdout for simple
    command line arguments (`--help` and `--version`)
  - On Windows, show the location of the log file in the help
    message
  - Enable searching in the more modules list ? click into the
    list to give focus to it, then start typing. The default GTK
    shortcut `ctrl-f` doesn't work as it's used for filmstrip
    already
  - Add a debug print when compiling OpenCL kernels
  - Bugfixes
  - Use the configured overwrite color profile when exporting
    from Lua ? this broke GIMP integration
  - Support presets with `&lt;` in their name
  - Fix export to non-existing path with `\` as the path
    separator on Windows
  - Don't insist on the db being locked when it doesn't even
    exist
  - Don't touch the mix slider when resetting the curve in color
    zones
  - Fix a bug in the exposure module that would only allow
    corrections of up to 10 stops
  - Fix custom shortcuts with `shift` modifier
  - Properly ellipsize text in the recently used collections list
  - Fix exported galeries with filenames containing a `'`
  - Fix finding mipmaps cache folder in `purge_from_cache.sh`
    script
  - Fix a crash in the recently used collections list due to a
    broken config file
  - Set the sqlite threading mode to Serialized
  - Fix old export presets using OpenEXR
  - Fix building with clang on Windows
  - Changed Dependencies
  - iso-codes version 3.66 or newer is suggested for a nicer list
    of translations in the preferences.
  - Camera support, compared to 2.4.0 Warning: support for Nikon
    NEF 'lossy after split' raws was unintentionally broken due to
    the lack of such samples. Please see
    [this post](https://discuss.pixls.us/t/nikon-a-specific-raw-sample-wanted/5483?u=lebedevri)
    for more details. If you have affected raws, please contribute
    samples!
  - Base Support
  - Panasonic DC-G9 (4:3)
  - Paralenz Dive Camera (chdk)
  - Pentax KP
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - White Balance Presets
  - Leaf Credo 40
  - Nikon D3400
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS M100
  - Canon EOS M6
  - Sony DSC-RX100M4
  - YI TECHNOLOGY M1
  - Translations
  - Czech
  - Dutch
  - French
  - German
  - Hebrew
  - Hungarian
  - Italian
  - Slovenian</changelog>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
</package>
<package pkgid="8c3e5f3bd553693ebb6406b3452655c9c0cbe730e199cc3300f6bde0db679a13" name="darktable-tools-basecurve" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp150.3.3.2"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- drop llvm5.patch
- modified darktable-old-glib.patch to apply cleanly again</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- merge back in the fedora support</changelog>
  <changelog author="mrueckert@suse.de" date="1516622400">- update to 2.4.1
  - New Features
  - Allow to select the GUI language in the preferences
  - Add a filter rule to the collect module to find locally
    copied images
  - Add favourite toggle to darkroom modules' right click popup
  - Allow blending/masking in the hot pixels module
  - Add keyboard shortcuts to zoom and pan an image in darkroom.
    Panning uses the arrow keys, zooming defaults to `ctrl-` and
    `ctrl+`. Use `alt` and `ctrl` to change the step size of
    panning.
  - Some minor speedups in the grain module
  - Handling stdout on Windows: do not redirect stdout for simple
    command line arguments (`--help` and `--version`)
  - On Windows, show the location of the log file in the help
    message
  - Enable searching in the more modules list ? click into the
    list to give focus to it, then start typing. The default GTK
    shortcut `ctrl-f` doesn't work as it's used for filmstrip
    already
  - Add a debug print when compiling OpenCL kernels
  - Bugfixes
  - Use the configured overwrite color profile when exporting
    from Lua ? this broke GIMP integration
  - Support presets with `&lt;` in their name
  - Fix export to non-existing path with `\` as the path
    separator on Windows
  - Don't insist on the db being locked when it doesn't even
    exist
  - Don't touch the mix slider when resetting the curve in color
    zones
  - Fix a bug in the exposure module that would only allow
    corrections of up to 10 stops
  - Fix custom shortcuts with `shift` modifier
  - Properly ellipsize text in the recently used collections list
  - Fix exported galeries with filenames containing a `'`
  - Fix finding mipmaps cache folder in `purge_from_cache.sh`
    script
  - Fix a crash in the recently used collections list due to a
    broken config file
  - Set the sqlite threading mode to Serialized
  - Fix old export presets using OpenEXR
  - Fix building with clang on Windows
  - Changed Dependencies
  - iso-codes version 3.66 or newer is suggested for a nicer list
    of translations in the preferences.
  - Camera support, compared to 2.4.0 Warning: support for Nikon
    NEF 'lossy after split' raws was unintentionally broken due to
    the lack of such samples. Please see
    [this post](https://discuss.pixls.us/t/nikon-a-specific-raw-sample-wanted/5483?u=lebedevri)
    for more details. If you have affected raws, please contribute
    samples!
  - Base Support
  - Panasonic DC-G9 (4:3)
  - Paralenz Dive Camera (chdk)
  - Pentax KP
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - White Balance Presets
  - Leaf Credo 40
  - Nikon D3400
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS M100
  - Canon EOS M6
  - Sony DSC-RX100M4
  - YI TECHNOLOGY M1
  - Translations
  - Czech
  - Dutch
  - French
  - German
  - Hebrew
  - Hungarian
  - Italian
  - Slovenian</changelog>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
</package>
<package pkgid="0074a1a0357983b47d8ffe446b921ed2ac68de93ad940b2ec32ef6f1755d702a" name="darktable-tools-noise" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp150.3.3.2"/>
  <changelog author="mrueckert@suse.de" date="1514116800">- drop llvm5.patch
- modified darktable-old-glib.patch to apply cleanly again</changelog>
  <changelog author="mrueckert@suse.de" date="1514116801">- merge back in the fedora support</changelog>
  <changelog author="mrueckert@suse.de" date="1516622400">- update to 2.4.1
  - New Features
  - Allow to select the GUI language in the preferences
  - Add a filter rule to the collect module to find locally
    copied images
  - Add favourite toggle to darkroom modules' right click popup
  - Allow blending/masking in the hot pixels module
  - Add keyboard shortcuts to zoom and pan an image in darkroom.
    Panning uses the arrow keys, zooming defaults to `ctrl-` and
    `ctrl+`. Use `alt` and `ctrl` to change the step size of
    panning.
  - Some minor speedups in the grain module
  - Handling stdout on Windows: do not redirect stdout for simple
    command line arguments (`--help` and `--version`)
  - On Windows, show the location of the log file in the help
    message
  - Enable searching in the more modules list ? click into the
    list to give focus to it, then start typing. The default GTK
    shortcut `ctrl-f` doesn't work as it's used for filmstrip
    already
  - Add a debug print when compiling OpenCL kernels
  - Bugfixes
  - Use the configured overwrite color profile when exporting
    from Lua ? this broke GIMP integration
  - Support presets with `&lt;` in their name
  - Fix export to non-existing path with `\` as the path
    separator on Windows
  - Don't insist on the db being locked when it doesn't even
    exist
  - Don't touch the mix slider when resetting the curve in color
    zones
  - Fix a bug in the exposure module that would only allow
    corrections of up to 10 stops
  - Fix custom shortcuts with `shift` modifier
  - Properly ellipsize text in the recently used collections list
  - Fix exported galeries with filenames containing a `'`
  - Fix finding mipmaps cache folder in `purge_from_cache.sh`
    script
  - Fix a crash in the recently used collections list due to a
    broken config file
  - Set the sqlite threading mode to Serialized
  - Fix old export presets using OpenEXR
  - Fix building with clang on Windows
  - Changed Dependencies
  - iso-codes version 3.66 or newer is suggested for a nicer list
    of translations in the preferences.
  - Camera support, compared to 2.4.0 Warning: support for Nikon
    NEF 'lossy after split' raws was unintentionally broken due to
    the lack of such samples. Please see
    [this post](https://discuss.pixls.us/t/nikon-a-specific-raw-sample-wanted/5483?u=lebedevri)
    for more details. If you have affected raws, please contribute
    samples!
  - Base Support
  - Panasonic DC-G9 (4:3)
  - Paralenz Dive Camera (chdk)
  - Pentax KP
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - White Balance Presets
  - Leaf Credo 40
  - Nikon D3400
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS M100
  - Canon EOS M6
  - Sony DSC-RX100M4
  - YI TECHNOLOGY M1
  - Translations
  - Czech
  - Dutch
  - French
  - German
  - Hebrew
  - Hungarian
  - Italian
  - Slovenian</changelog>
  <changelog author="mrueckert@suse.de" date="1521633600">- update to 2.4.2
  - New Features
  - Add presets to location search in map mode
  - Add timestamps to the output of `-d` command line switches
  - Add a compression level slider to the TIFF export module
  - Add native binary NetPNM loading, without using
    GraphicsMagick
  - Add a battery indicator for people running darktable on a
    laptop. This is not very portable code and disabled by
    default
  - Allow to use /? to show the help message on Windows
  - Bugfixes
  - Turn off smooth scrolling for X11/Quartz. That might help
    with oversensitive scrolling
  - Fix reading and writing of TIFFs with non-ASCII filenames on
    Windows
  - Ellipsize background job labels when too long
  - Hard code D50 white point when exporting to OpenEXR
  - Add tootips to the haze removal module
  - Fix a crash when changing lenses while tethering
  - Fix incorrect Atom CPU detection on Windows
  - Revised performance configuration
  - Don't overlay the colorbalance sliders on the left for a
    cleaner look
  - Honor local copy in copy export format
  - Make trashing of files on Windows silent
  - Fix string termination override on memmove
  - Fix a use after free and some memleaks
  - Fix a crash in PDF export
  - Fix the min color picker
  - Don't hardcode '/' in OpenCL paths on Windows
  - Camera support, compared to 2.4.1
  - Base Support
  - Canon PowerShot G1 X Mark III
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-ZS100 (3:2)
  - Sony DSC-RX0
  - Sony DSC-RX10M4
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G9 X
  - Fujifilm X100F
  - Nikon D850
  - Panasonic DC-G9
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Translations
  - Dutch
  - French
  - German
  - Hungarian
  - Italian</changelog>
  <changelog author="mrueckert@suse.de" date="1521720000">- force gcc 7 on suse_version 1315 to get the new GCC flags working
  in :Update</changelog>
  <changelog author="mrueckert@suse.de" date="1524571200">- update to 2.4.3
  - New Features
  - Support for tags and ratings in the watermark module
  - Read Xmp.exif.DateTimeOriginal from XMP sidecars
  - Build and install noise tools
  - Add a script for converting .dtyle to an .xmp
  - Bugfixes
  - Don't create unneeded folders during export in some cases
  - When collecting by tags, don't select subtags
  - Fix language selection on OSX
  - Fix a crash while tethering
  - Camera support, compared to 2.4.2
  - Base Support
  - Fujifilm X-H1 (compressed)
  - Kodak EOS DCS 3
  - Olympus E-PL9
  - Panasonic DC-GX9 (4:3)
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Sony ILCE-7M3
  - Noise Profiles
  - Canon PowerShot G1 X Mark III
  - Nikon D7500
  - Sony ILCE-7M3</changelog>
  <changelog author="mrueckert@suse.de" date="1524571201">- also build and package the noise profiling tools:
  new subpackage darktable-tools-noise</changelog>
  <changelog author="mrueckert@suse.de" date="1524571202">- also track the debian packaging files as sources in the spec file</changelog>
  <changelog author="mrueckert@suse.de" date="1524830400">- pull from the stable branch 887d55c.patch:
  fix typo in the noise profile tools</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Remove idempotent %if..%endif guards.
- Avoid bashisms in scriptlets.
- Do not let the description assume any specific use context.</changelog>
  <changelog author="mrueckert@suse.de" date="1528200000">- update to 2.4.4
  - New Features
  - Added 50% zoom option in darkroom mode to the navigation
    dropdown
  - perspective correction: usability improvement ? allow setting
    the radius when (de)selecting lines
  - Bugfixes
  - Fix selecting drives in the import dialog on Windows by
    bundling a patched glib
  - Add some space between checkbox and label in color picker
  - OpenCL: better readability of debug output on memory usage
  - Levels: catch an edge case where float != int
  - Fix the alignment in a tooltip in lens correction
  - Local contrast: Reset strength slider to 120% when double
    clicked
  - Drop unused clone masks when loading xmp files
  - Remove all sub masks when clearing cloning masks
  - darktable-cltest: do not print summary statistics on OpenCL
    usage
  - Perspective correction: take aspect parameter into account
    when judging on neutral settings
  - Haze removal: fix tiled processing
  - Fix install on Windows due to GraphicsMagick's versioned
    filenames
  - PPM: Handle byte order when loading files
  - Fix #12165: Don't try to show dialog without gui
  - Fix an out-of-bounds memory access
  - Tools: Fix typo in darktable-gen-noiseprofile that made it
    unusable
  - MacOS package: point gettext to correct localedir
  - Camera support
  - White Balance Presets
  - Sony ILCE-6500
  - Noise Profiles
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Nikon COOLPIX B700
  - Nikon D5600
  - Olympus TG-5
  - Updated translations
  - German
  - Russian
- drop 887d55c.patch</changelog>
  <changelog author="Roman Lebedev &lt;lebedev.ri@gmail.com&gt;" date="1542974400">- Enable partial LTO - RawSpeed only</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652800">- disable LTO on opensuse with suse_version &lt; 1550</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1545652801">- update to 2.6.0
  - The Big Ones
  - new module retouch allowing changes based on image frequency
    layers
  - new module filmic which can replace the base curve and
    shadows and highlights
  - new module to handle duplicates in the darkroom with
    possibility to add a title, create standard or virgin
    duplicate, delete duplicate and quickly compare with a
    duplicate
  - new logarithm controls for the tone-curve
  - new mode for the unbreak profile module
  - add mask preview to adjust size, hardness before placing them
  - make it possible to change the cropped area in the
    perspective correction module
  - the mask blur has been complemented with a guided-filter to
    fine tune it (this works on RGB and Lab color space).
  - color balance module has two new modes based on ProPhotoRGB
    and HSL
  - Experimental support for PPC64le architecture (OpenCL support
    needs to be disabled, `-DUSE_OPENCL=OFF`)
  - New Features And Changes
  - search from the map view is now fixed
  - visual rework of the lighttable (color label, image kind,
    local copy)
  - an option make it possible to display some image information
    directly on the thumb
  - add optional scrollbars on lighttable, or lighttable and
    darkroom
  - allow each masks of the clone module to have the opacity
    adjusted
  - lightroom import module supports the creator, rights, title,
    description and publisher information.
  - enhance TurboPrint support by displaying the dialogue with
    all possible options (print cancellation will be fixed in
    TurboPrint 2.47)
  - new sort filter based on the image's aspect
  - new sort filter based on the image's shutter speed
  - new sort filter based on the image's group
  - new sort filter based on a personalized sorting order
    (drag&amp;drop on the lighttable view)
  - collection based on the local copy status
  - group image number displayed on the collection module
  - new zoom level at 50%; 400%, 800% and 1600%
  - better support for monochrome RAW
  - add contextual help pointing to the darktable's manual
  - better copy/paste support for multiple instances
  - add support for renaming the module instances
  - add frequency based adjustment for the RAW denoise module
  - add frequency based adjustment for the denoise profile module
  - all widgets should be themable via CSS now
  - add support for configuring the modules layout
  - different way to select hierarchical tags in the collection
    module (only the actual parent tag, all children or the
    parent and children)
  - better handling of grouped images by allowing setting stars,
    color label for the whole group.
  - make it possible to apply a preset to a new module instance
    using the middle click
  - new script to migrate collection from Capture One Pro
  - Bug fixes
  - Fix the color pickers behavior in all modules
  - Fix liquify tools switching
  - Many more bugs got fixed
  - Lua
  - No changes
  - Changed Dependencies
  - CMake 3.4 is now required
  - In order to compile darktable you now need at least
    gcc-5.0+/clang-3.9+
  - Minimal clang version was bumped from 3.4+ to 3.9+
  - Packagers are advised to pass ```-DRAWSPEED_ENABLE_LTO=ON```
    to CMake to enable partial LTO.
  - RawSpeed changes
  - GoPro '.GPR' raws are now supported via new, fast 'VC-5'
    parallel decompressor
  - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is
    now supported via new fast, parallel 'Panasonic V5'
    decompressor
  - Panasonic's old (also '.RW2') raw decompressor got rewritten,
    re-parallelized
  - Phase One ('.IIQ') decompressor got parallelized
  - Nikon NEF 'lossy after split' raw support was recovered
  - Phase One ('.IIQ') Quadrant Correction is now supported
  - Olympus High-Res (uncompressed) raw support
  - Lot's and lot's and lot's of maintenance, sanitization,
    cleanups, small rewrites/refactoring.
  - NOTE: Canon '.CR3' raws are *NOT* supported as of yet.
  - Camera support, compared to 2.4.0
  - Base Support
  - Canon EOS 1500D
  - Canon EOS 2000D
  - Canon EOS Rebel T7
  - Canon EOS 3000D
  - Canon EOS 4000D
  - Canon EOS Rebel T100
  - Canon EOS 5D Mark IV (sRaw1, sRaw2)
  - Canon EOS 5DS (sRaw1, sRaw2)
  - Canon EOS 5DS R (sRaw1, sRaw2)
  - Canon PowerShot G1 X Mark III
  - Fujifilm X-A5
  - Fujifilm X-H1 (compressed)
  - Fujifilm X-T100
  - Fujifilm X-T3 (compressed)
  - GoPro FUSION (dng)
  - GoPro HERO5 Black (dng)
  - GoPro HERO6 Black (dng)
  - GoPro HERO7 Black (dng)
  - Hasselblad CFV-50
  - Hasselblad H5D-40
  - Hasselblad H5D-50c
  - Kodak DCS Pro 14nx
  - Kodak DCS520C
  - Kodak DCS760C
  - Kodak EOS DCS 3
  - Nikon COOLPIX P1000 (12bit-uncompressed)
  - Nikon D2Xs (12bit-compressed, 12bit-uncompressed)
  - Nikon D3500 (12bit-compressed)
  - Nikon Z 6 (except uncompressed raws)
  - Nikon Z 7 (except 14-bit uncompressed raw)
  - Olympus E-PL8
  - Olympus E-PL9
  - Olympus SH-2
  - Panasonic DC-FZ80 (4:3)
  - Panasonic DC-G9 (4:3)
  - Panasonic DC-GF9 (4:3)
  - Panasonic DC-GX800 (4:3)
  - Panasonic DC-GX850 (4:3)
  - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1)
  - Panasonic DC-GX9 (4:3)
  - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2)
  - Panasonic DC-TZ200 (3:2)
  - Panasonic DC-TZ202 (3:2)
  - Panasonic DMC-FZ2000 (3:2)
  - Panasonic DMC-FZ2500 (3:2)
  - Panasonic DMC-FZ35 (3:2, 16:9)
  - Panasonic DMC-FZ38 (3:2, 16:9)
  - Panasonic DMC-GX7MK2 (4:3)
  - Panasonic DMC-ZS100 (3:2)
  - Paralenz Dive Camera (chdk)
  - Pentax 645Z
  - Pentax K-1 Mark II
  - Pentax KP
  - Phase One P65+
  - Sjcam SJ6 LEGEND (chdk-b, chdk-c)
  - Sony DSC-HX99
  - Sony DSC-RX0
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-7M3
  - White Balance Presets
  - Canon EOS M100
  - Fujifilm X-T3
  - Leaf Credo 40
  - Nikon D3400
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Nikon Z 6
  - Olympus E-M10 Mark III
  - Olympus E-M1MarkII
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ300
  - Sony DSC-RX0
  - Sony DSC-RX100M5
  - Sony DSC-RX100M5A
  - Sony DSC-RX10M3
  - Sony DSC-RX10M4
  - Sony DSC-RX1RM2
  - Sony ILCE-6500
  - Sony ILCE-7M3
  - Sony ILCE-7RM3
  - Noise Profiles
  - Canon EOS 200D
  - Canon EOS Kiss X9
  - Canon EOS Rebel SL2
  - Canon EOS 750D
  - Canon EOS Kiss X8i
  - Canon EOS Rebel T6i
  - Canon EOS 760D
  - Canon EOS 8000D
  - Canon EOS Rebel T6s
  - Canon EOS 77D
  - Canon EOS 9000D
  - Canon EOS 800D
  - Canon EOS Kiss X9i
  - Canon EOS Rebel T7i
  - Canon EOS M100
  - Canon EOS M6
  - Canon PowerShot G1 X Mark II
  - Canon PowerShot G1 X Mark III
  - Canon PowerShot G9 X
  - Fujifilm X-A5
  - Fujifilm X-E3
  - Fujifilm X-T3
  - Fujifilm X100F
  - Nikon 1 AW1
  - Nikon 1 J3
  - Nikon COOLPIX B700
  - Nikon D5600
  - Nikon D7500
  - Nikon D850
  - Olympus E-M10 Mark III
  - Olympus TG-5
  - Panasonic DC-G9
  - Panasonic DC-GX9
  - Panasonic DMC-FZ35
  - Panasonic DMC-FZ38
  - Panasonic DMC-GF6
  - Panasonic DMC-LX10
  - Panasonic DMC-LX15
  - Panasonic DMC-LX9
  - Panasonic DMC-TZ70
  - Panasonic DMC-TZ71
  - Panasonic DMC-ZS50
  - Pentax K-01
  - Pentax KP
  - Samsung NX1
  - Sony DSC-RX100M4
  - Sony DSC-RX10M3
  - Sony ILCE-7M3
  - Translations
  - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French,
    Galician, German, Hebrew, Hungarian, Italian, Japanese,
    Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian,
    Russian, Slovenian, Thai</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1548072000">- noise tools need ghostscript for pdf handling</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873600">- update to 2.6.1
  - New Features
  - export module to piwigo
  - color balance enhancements
  - color contrast enhancements
  - filmic enhancements (better auto-tuner)
  - add contextual help for filmic module
  - middle-click can be used to open the presets menu (this is
    consistent with the fact that middle-click can be used to
    create a new instance from a preset)
  - again, better CSS customization for lighttable, filmstrip and
    duplicates module
  - presets can now be imported/exported
  - all zoom levels can now be reached with a ctrl-scroll
  - the slideshow view will adjust automatically when darktable
    window is resized
  - add support for tiff CIELAB/ICCLAB 8/16 bits
  - add hierarchical view for styles (separated with |)
  - forms opacity is displayed in hint messages
  - add a color picker in the watermark module
  - Bugfixes
  - fix collect module filters
  - fix retouch module, mask areas are properly taking into
    account the source and destination
  - fix navigation from darkroom when groups are present and
    collapsed
  - fix a rare issue where masks could "jump" to some random
    location
  - keep reference point (mouse position) when zooming above 200%
  - title and description filters are now properly working
  - minor UI fixes to gain some spaces in darktable modules
  - fix masks detection over the mouse in some complex cases
  - Camera support, compared to 2.6.0
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
  - Translations
  - Catalan Czech, Dutch, Finnish, French, German, Norwegian
    bokmål, Polish, Russian, Slovenian, Spanish</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551873601">- update pdf manuals from 2.6.1 tag: comes in english, german and
  italian
- actually install all pdf documentation</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960000">- added basecurve.readme.patch
- moved the ownership of %{_libexecdir}/darktable to the main
  package</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1551960001">- fix gnuplot syntax in readme for basecurve tools</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.6.2
  - New Features
  - Update colorbalance french translation
  - Bugfixes
  - Fix SSE bug introduced in #2025
  - Fix issue when looking for input color profile (backward
    compatibility)
  - Add missing Czech translation file
  - Fix possible halo issue in local contrast module.
  - Fix contextual help link to point to new HTML manual for 2.6
    series.
  - Camera support, compared to 2.6.1
  - Base Support
  - DSC-RX100M6
  - Phase One P30 (fixed)
  - Olympus OM-D E-M10 (enhanced)
  - Nikon D7500 (enhanced)
  - White Balance Presets
  - Nikon D500
  - Olympus E-PL8
  - Noise Profiles
  - Sony SLT-A35
  - Nikon Z6
- updated translations: Catalan, Czech, Dutch, Finnish, French,
  German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish</changelog>
</package>
<package pkgid="62c7fec09897c75f867cb22e76a2f71ac71f3609eec4d387a82a09a5ff2f8b81" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.10.3" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="ce6b6b21aa0bfc7a8dbfcae4e06b68369be833158d989d2d4b1d214d62545d92" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.12.0" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Version update to 4.11.0:
  * Few feature enhancements in mesage composing</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540296000">- Use %license macros</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547640000">- Update to 4.12.0 bsc#1104620:
  * Bigger attachments allowed (50MB)
  * HiDPI icons
  * Minor fixes</changelog>
</package>
<package pkgid="7de05bff193844eb3a83ebc74a676bd29ad9f7d0035f2868a359fca5bcf3ec5e" name="datovka" arch="src">
  <version epoch="0" ver="4.13.0" rel="lp150.15.1"/>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Version update to 4.11.0:
  * Few feature enhancements in mesage composing</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540296000">- Use %license macros</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547640000">- Update to 4.12.0 bsc#1104620:
  * Bigger attachments allowed (50MB)
  * HiDPI icons
  * Minor fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555502400">- Update to 4.13.0 bsc#1104620:
  * Account renaming now possible
  * Special format downloading now alloved to "spisova sluzba"
- Rebase patch datovka-fix-pro.patch</changelog>
</package>
<package pkgid="3af1e6d05c950060506e222b245f2b988b384ed5f836f508403ba0d3a27a5ee3" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="lp150.15.1"/>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536840000">- Version update to 4.11.0:
  * Few feature enhancements in mesage composing</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540296000">- Use %license macros</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547640000">- Update to 4.12.0 bsc#1104620:
  * Bigger attachments allowed (50MB)
  * HiDPI icons
  * Minor fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1555502400">- Update to 4.13.0 bsc#1104620:
  * Account renaming now possible
  * Special format downloading now alloved to "spisova sluzba"
- Rebase patch datovka-fix-pro.patch</changelog>
</package>
<package pkgid="31582b127f804d5aeb1856192b9d0280d2cbdec8a3e83aaa5840734818e5bc3b" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="a6d537a6a3898d753ce20650beff3211873bf92d2a2c04f67d287f55a524137d" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="2ce2a1b1be23a000557de2288054269fe3f295d400681f362236c81ea74b4d2d" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="b3fb7899872bfb9924af652aff2c92d2c6fa0ac19e5fc3d3bad52955bdc985a9" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="5f42d1054e388e5c03ba92d8fe27e5cc1a5fe363bcab741d9eecbb857ace58bd" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="fd4c29a487f2c17b28303e5f744a386b1ae8ec0ab838e208a955812530c96b83" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="a24f909191e8b2e4b78c6f60231c2d247ffd1ff511cd20ba735830435a91dc73" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="056bf8c6b3b5049fbb13c734df6665c6002cccb527f6d1c6b0867013aaa70b61" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="2aa86ac4ac02ec77b0138017f864cc6ab71d52d7bf80abe6e7a02ece9f0ae7f7" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="b6b7a62d8b4343921083fee778681014965992fa45ce4bd13252abf15145f2a6" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="92dfbb060eff3552d5677b7bae0b4db4ff2bdcbb7ac88496d4b220b012452744" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="cbcab5d278366fe2b2a5f33e43bdc8403cd9b0b51813c1c7b62ebf6ae91bf090" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="9cf76ee5744a1ed3b0e8d0cc394f18f437184ce0c1225c3e6774688ebc53a0d5" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1481284800">- Requires systemd &gt;= 209 and drop the compatibility pkg-config
  names that don't exist in newer systemd</changelog>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
</package>
<package pkgid="37331cfb0819cddb028b99b86413b422fe1c6c25fe2a1a5e28b237990d11ff05" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1481284800">- Requires systemd &gt;= 209 and drop the compatibility pkg-config
  names that don't exist in newer systemd</changelog>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
</package>
<package pkgid="3791f751dcda41bc78b94834cdd562937b7ed8a4e5ef4a0b8c4258fb1d1fa67a" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="4636574fbaf8fc25611435f6e52a50cea44474e077928abe08cfa4e2ca5520cf" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="lp150.2.4.2"/>
  <changelog author="marius.kittler@suse.com" date="1483963200">- Add systemd unit files to start session bus via systemd
- Added patch:
  * 0001-Drop-Install-sections-from-user-services.patch
    + remove install section from socket unit because it does not
    need to be enabled explicitly (see fdo#92402)</changelog>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
</package>
<package pkgid="4a47e03588103b140dba899bc3c40fa79eeab3a5c23d6cf3384d069fc46dbd89" name="ddd" arch="x86_64">
  <version epoch="0" ver="3.3.12" rel="lp150.2.3.1"/>
  <changelog author="aj@suse.de" date="1252324800">- Build doc subpackage as noarch to save 6 MB on media.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321358400">- don't build html in parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321963200">- compile against libtinfo</changelog>
  <changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memcpy call</changelog>
  <changelog author="pgajdos@suse.com" date="1329825600">- buildrequire xorg-x11</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1359892800">- added makeinfo to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1374321600">- fix license to be in spdx.org format</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1413720000">- fix shebang of ddd.wrapper</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add ddd-texinfo-5.0.patch: Fix HTML generation with texinfo 5.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1457352000">- Remove timestamps from binaries
  ddd-buildcompare.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490184000">- fix color names in xpm files
  + ddd-imagemagick-xpm-colors.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]
- build with -j1, otherwise build fails</changelog>
</package>
<package pkgid="954ee767076f2feb1c8091112d3741bc94ed6d6d257fd9a0cf23dae05c7708e6" name="ddd-doc" arch="noarch">
  <version epoch="0" ver="3.3.12" rel="lp150.2.3.1"/>
  <changelog author="aj@suse.de" date="1252324800">- Build doc subpackage as noarch to save 6 MB on media.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321358400">- don't build html in parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1321963200">- compile against libtinfo</changelog>
  <changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memcpy call</changelog>
  <changelog author="pgajdos@suse.com" date="1329825600">- buildrequire xorg-x11</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1359892800">- added makeinfo to BuildRequires</changelog>
  <changelog author="coolo@suse.com" date="1374321600">- fix license to be in spdx.org format</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1413720000">- fix shebang of ddd.wrapper</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add ddd-texinfo-5.0.patch: Fix HTML generation with texinfo 5.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1457352000">- Remove timestamps from binaries
  ddd-buildcompare.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1490184000">- fix color names in xpm files
  + ddd-imagemagick-xpm-colors.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]
- build with -j1, otherwise build fails</changelog>
</package>
<package pkgid="9624543ed705af3efa39f254f09d41ac371d8e559b250a7955616f7f10b8ebaa" name="deepin-music-libnetease-meta-search" arch="x86_64">
  <version epoch="0" ver="3.1.7.2" rel="lp150.4.3.1"/>
  <changelog author="kaji331@hotmail.com" date="1361707200">- fix require python-cddb to python-CDDB</changelog>
  <changelog author="douglarek@outlook.com" date="1363694400">- Bug fix
  * fix bnc#808258</changelog>
  <changelog author="hillwood@linuxfans.org" date="1367236800">- update to 1.0.1git20130330(2.0 Alpha)
  * fix bugs</changelog>
  <changelog author="hillwood@linuxfans.org" date="1376481600">- update to 2.0git20130802
  * upsteam did not provide changlog</changelog>
  <changelog author="hillwood@linuxfans.org" date="1376568000">- add deepin-gsettings as Requires</changelog>
  <changelog author="hillwood@linuxfans.org" date="1401105600">- Update to 2.0git20140505.
  Feature update.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404648000">- Add python-gstreamer-0_10 as Requires.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1424174400">- Update to 2.0git20150204.
  * add installation script
- remove deepin-music-player.desktop and deepin-music-player.png,
  upstream have included it.</changelog>
  <changelog author="i@marguerite.su" date="1437048000">- update verison 2.90.0+git20150617.bb7889c
  * no upstream changelog
- clean specfile
  * upstream url: github.com/linuxdeepin/deepin-music
  * use upstream source instead of deepin distro's
  * avoid holding /usr/share/icons/hicolor
  * other minor fixes</changelog>
  <changelog author="hillwood@linuxfans.org" date="1447329600">- Fix boo#954761
  * add python-Pillow as Requires.
- Add %icon_theme_cache_post / %icon_theme_cache_postun macro.</changelog>
  <changelog author="hillwood@opensuse.org" date="1487246400">- Update to 3.0.1, fix boo#1023777.
  * Port python to C++ and QT5.
  * Port GStreamer to QT5Multimedia.
- add deepin-music-dui.patch.
  * Add lost pkgconfig item.</changelog>
  <changelog author="hillwood@opensuse.org" date="1487419200">- Rename libnetease-meta-search as deepin-music-libnetease-meta-search1.
- Drop two devel packages.</changelog>
  <changelog author="jengelh@inai.de" date="1487505600">- Replace totally useless description.
- Rename deepin-music-libnetease-meta-search1 again:
  it is a plugin, not a standard library!
- Fix RPM group selection. Do not call fdupes on root.
- Qt5 mkspecs belong into -devel subpackage.</changelog>
  <changelog author="i@marguerite.su" date="1489579200">- Fix capitalized Summary
- Use 'rsvg-view' to produce multi-sized png icons from svg
  resource
- Fix the Unity play indicator groups in deepin-music.desktop</changelog>
  <changelog author="hillwood@opensuse.org" date="1506513600">- Update to 3.1.6
  * Update deepin-tool-kit
  * Use QtAV
  * Use dtkwidget
  * Use libcue
- Drop deepin-music-dui.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Fix build in armv7l.</changelog>
  <changelog author="hillwood@opensuse.org" date="1511524800">- Update 3.1.7.2
  * Fix showNormal not work (bb22dc99)
  * Fix crash when selectNext on qt 5.9 (bed9d856)
  * Fix hidpi playing state (84783418)
  * Fix lyric text cut (1dbf4dc2)
  * Fix move qmediaplayer to main thread (3ce0ca3c)
  * Fix dialog style (cfc0db93)
  * Use deviceRatio in musicitemdelegate (f3a65085)
  * Enable drag progress bar (22f8916e)
  * Fix border pos (6fa9cc9e)
  * Set dialog flag error (ef200472)
  * Change footer bar cover mouse cursor (a4837dce)
  * Fix libdmusic install path (2d86199a)
  * Make dropdown show full text on ru locale (fcc58c97)
  * Stop next after continue error count &gt;= 5 (e6127596)
  * Call dbus trash (b5d6fcb4)
  * Extern footer progress (3459625e)
  * All use svg (a942c308)
  * Use dbus call filemanager (e276e636)
  * Remove dtk2 workaround (0eb1ee32)
  * Use dtk DWaterProgress (6109ffee)
  * Add hidpi support (107e5987)
- Drop deepin-tool-kit
- Drop libdui</changelog>
  <changelog author="hillwood@opensuse.org" date="1518177600">- Fix build for Leap 15.0
  * Set BuildRequires tag for python.</changelog>
  <changelog author="kasimir_@outlook.de" date="1521806400">- Fix build in armv6l</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1554292800">- Fix lyrics don't work (boo#1131464).
  * Add libnetease-meta-search.so in filelist, it is not a developement file
  * Add deepin-music-player-rpmlintrc</changelog>
</package>
<package pkgid="5cd01bce2bd1e9af4a7a2099465a6ffa590e219c91d06e1e21b194042789bcf9" name="deepin-music-player" arch="src">
  <version epoch="0" ver="3.1.7.2" rel="lp150.4.3.1"/>
  <changelog author="kaji331@hotmail.com" date="1361707200">- fix require python-cddb to python-CDDB</changelog>
  <changelog author="douglarek@outlook.com" date="1363694400">- Bug fix
  * fix bnc#808258</changelog>
  <changelog author="hillwood@linuxfans.org" date="1367236800">- update to 1.0.1git20130330(2.0 Alpha)
  * fix bugs</changelog>
  <changelog author="hillwood@linuxfans.org" date="1376481600">- update to 2.0git20130802
  * upsteam did not provide changlog</changelog>
  <changelog author="hillwood@linuxfans.org" date="1376568000">- add deepin-gsettings as Requires</changelog>
  <changelog author="hillwood@linuxfans.org" date="1401105600">- Update to 2.0git20140505.
  Feature update.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404648000">- Add python-gstreamer-0_10 as Requires.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1424174400">- Update to 2.0git20150204.
  * add installation script
- remove deepin-music-player.desktop and deepin-music-player.png,
  upstream have included it.</changelog>
  <changelog author="i@marguerite.su" date="1437048000">- update verison 2.90.0+git20150617.bb7889c
  * no upstream changelog
- clean specfile
  * upstream url: github.com/linuxdeepin/deepin-music
  * use upstream source instead of deepin distro's
  * avoid holding /usr/share/icons/hicolor
  * other minor fixes</changelog>
  <changelog author="hillwood@linuxfans.org" date="1447329600">- Fix boo#954761
  * add python-Pillow as Requires.
- Add %icon_theme_cache_post / %icon_theme_cache_postun macro.</changelog>
  <changelog author="hillwood@opensuse.org" date="1487246400">- Update to 3.0.1, fix boo#1023777.
  * Port python to C++ and QT5.
  * Port GStreamer to QT5Multimedia.
- add deepin-music-dui.patch.
  * Add lost pkgconfig item.</changelog>
  <changelog author="hillwood@opensuse.org" date="1487419200">- Rename libnetease-meta-search as deepin-music-libnetease-meta-search1.
- Drop two devel packages.</changelog>
  <changelog author="jengelh@inai.de" date="1487505600">- Replace totally useless description.
- Rename deepin-music-libnetease-meta-search1 again:
  it is a plugin, not a standard library!
- Fix RPM group selection. Do not call fdupes on root.
- Qt5 mkspecs belong into -devel subpackage.</changelog>
  <changelog author="i@marguerite.su" date="1489579200">- Fix capitalized Summary
- Use 'rsvg-view' to produce multi-sized png icons from svg
  resource
- Fix the Unity play indicator groups in deepin-music.desktop</changelog>
  <changelog author="hillwood@opensuse.org" date="1506513600">- Update to 3.1.6
  * Update deepin-tool-kit
  * Use QtAV
  * Use dtkwidget
  * Use libcue
- Drop deepin-music-dui.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Fix build in armv7l.</changelog>
  <changelog author="hillwood@opensuse.org" date="1511524800">- Update 3.1.7.2
  * Fix showNormal not work (bb22dc99)
  * Fix crash when selectNext on qt 5.9 (bed9d856)
  * Fix hidpi playing state (84783418)
  * Fix lyric text cut (1dbf4dc2)
  * Fix move qmediaplayer to main thread (3ce0ca3c)
  * Fix dialog style (cfc0db93)
  * Use deviceRatio in musicitemdelegate (f3a65085)
  * Enable drag progress bar (22f8916e)
  * Fix border pos (6fa9cc9e)
  * Set dialog flag error (ef200472)
  * Change footer bar cover mouse cursor (a4837dce)
  * Fix libdmusic install path (2d86199a)
  * Make dropdown show full text on ru locale (fcc58c97)
  * Stop next after continue error count &gt;= 5 (e6127596)
  * Call dbus trash (b5d6fcb4)
  * Extern footer progress (3459625e)
  * All use svg (a942c308)
  * Use dbus call filemanager (e276e636)
  * Remove dtk2 workaround (0eb1ee32)
  * Use dtk DWaterProgress (6109ffee)
  * Add hidpi support (107e5987)
- Drop deepin-tool-kit
- Drop libdui</changelog>
  <changelog author="hillwood@opensuse.org" date="1518177600">- Fix build for Leap 15.0
  * Set BuildRequires tag for python.</changelog>
  <changelog author="kasimir_@outlook.de" date="1521806400">- Fix build in armv6l</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1554292800">- Fix lyrics don't work (boo#1131464).
  * Add libnetease-meta-search.so in filelist, it is not a developement file
  * Add deepin-music-player-rpmlintrc</changelog>
</package>
<package pkgid="06f2fe206fac8c12a5fd1f2673b35a158af030300d3fdc051df8d09185755dcf" name="deepin-music-player" arch="x86_64">
  <version epoch="0" ver="3.1.7.2" rel="lp150.4.3.1"/>
  <changelog author="kaji331@hotmail.com" date="1361707200">- fix require python-cddb to python-CDDB</changelog>
  <changelog author="douglarek@outlook.com" date="1363694400">- Bug fix
  * fix bnc#808258</changelog>
  <changelog author="hillwood@linuxfans.org" date="1367236800">- update to 1.0.1git20130330(2.0 Alpha)
  * fix bugs</changelog>
  <changelog author="hillwood@linuxfans.org" date="1376481600">- update to 2.0git20130802
  * upsteam did not provide changlog</changelog>
  <changelog author="hillwood@linuxfans.org" date="1376568000">- add deepin-gsettings as Requires</changelog>
  <changelog author="hillwood@linuxfans.org" date="1401105600">- Update to 2.0git20140505.
  Feature update.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1404648000">- Add python-gstreamer-0_10 as Requires.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1424174400">- Update to 2.0git20150204.
  * add installation script
- remove deepin-music-player.desktop and deepin-music-player.png,
  upstream have included it.</changelog>
  <changelog author="i@marguerite.su" date="1437048000">- update verison 2.90.0+git20150617.bb7889c
  * no upstream changelog
- clean specfile
  * upstream url: github.com/linuxdeepin/deepin-music
  * use upstream source instead of deepin distro's
  * avoid holding /usr/share/icons/hicolor
  * other minor fixes</changelog>
  <changelog author="hillwood@linuxfans.org" date="1447329600">- Fix boo#954761
  * add python-Pillow as Requires.
- Add %icon_theme_cache_post / %icon_theme_cache_postun macro.</changelog>
  <changelog author="hillwood@opensuse.org" date="1487246400">- Update to 3.0.1, fix boo#1023777.
  * Port python to C++ and QT5.
  * Port GStreamer to QT5Multimedia.
- add deepin-music-dui.patch.
  * Add lost pkgconfig item.</changelog>
  <changelog author="hillwood@opensuse.org" date="1487419200">- Rename libnetease-meta-search as deepin-music-libnetease-meta-search1.
- Drop two devel packages.</changelog>
  <changelog author="jengelh@inai.de" date="1487505600">- Replace totally useless description.
- Rename deepin-music-libnetease-meta-search1 again:
  it is a plugin, not a standard library!
- Fix RPM group selection. Do not call fdupes on root.
- Qt5 mkspecs belong into -devel subpackage.</changelog>
  <changelog author="i@marguerite.su" date="1489579200">- Fix capitalized Summary
- Use 'rsvg-view' to produce multi-sized png icons from svg
  resource
- Fix the Unity play indicator groups in deepin-music.desktop</changelog>
  <changelog author="hillwood@opensuse.org" date="1506513600">- Update to 3.1.6
  * Update deepin-tool-kit
  * Use QtAV
  * Use dtkwidget
  * Use libcue
- Drop deepin-music-dui.patch, merged by upstream.</changelog>
  <changelog author="hillwood@opensuse.org" date="1506600000">- Fix build in armv7l.</changelog>
  <changelog author="hillwood@opensuse.org" date="1511524800">- Update 3.1.7.2
  * Fix showNormal not work (bb22dc99)
  * Fix crash when selectNext on qt 5.9 (bed9d856)
  * Fix hidpi playing state (84783418)
  * Fix lyric text cut (1dbf4dc2)
  * Fix move qmediaplayer to main thread (3ce0ca3c)
  * Fix dialog style (cfc0db93)
  * Use deviceRatio in musicitemdelegate (f3a65085)
  * Enable drag progress bar (22f8916e)
  * Fix border pos (6fa9cc9e)
  * Set dialog flag error (ef200472)
  * Change footer bar cover mouse cursor (a4837dce)
  * Fix libdmusic install path (2d86199a)
  * Make dropdown show full text on ru locale (fcc58c97)
  * Stop next after continue error count &gt;= 5 (e6127596)
  * Call dbus trash (b5d6fcb4)
  * Extern footer progress (3459625e)
  * All use svg (a942c308)
  * Use dbus call filemanager (e276e636)
  * Remove dtk2 workaround (0eb1ee32)
  * Use dtk DWaterProgress (6109ffee)
  * Add hidpi support (107e5987)
- Drop deepin-tool-kit
- Drop libdui</changelog>
  <changelog author="hillwood@opensuse.org" date="1518177600">- Fix build for Leap 15.0
  * Set BuildRequires tag for python.</changelog>
  <changelog author="kasimir_@outlook.de" date="1521806400">- Fix build in armv6l</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1554292800">- Fix lyrics don't work (boo#1131464).
  * Add libnetease-meta-search.so in filelist, it is not a developement file
  * Add deepin-music-player-rpmlintrc</changelog>
</package>
<package pkgid="be41b6a63afffb3a922252dadf013fc14b00a52675d365858bf428abf59ca01c" name="dehydrated" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp150.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="5a333a6c43d29f231c3e1cd50c6f24a091c8f6fcd1251d26168e3847fb286de2" name="dehydrated" arch="src">
  <version epoch="0" ver="0.6.5" rel="lp150.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="8bfe1cb65840561f3af6c28e9eca6268f68bb8e0ab45d574c6d5c522cad291e0" name="dehydrated-apache2" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp150.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="0e81eba6332758e4dd5eaea6f9766b5c13acf6b58df72dc10e45689ff91232b6" name="dehydrated-lighttpd" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp150.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="a1dd5d66f1eaaddaec45f31e2a1f179f6878ecb34558f494bafab615611ffe73" name="dehydrated-nginx" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="lp150.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1506513600">- No longer require nginx or lighttpd for SLE
- Never go as far as to require acmeresponder, it might not be available
- Drop -update from dehydrated-update.{timer,socket} for consistency
- Add distro specific README.SUSE / README.Fedora
- Ran spec-cleaner</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1506686400">- Clarify necessity of enabling dehydrated.timer in README.SUSE
- Submit to SLE15 as per fate#323377
- Add optional post run hook directory, executed by cron/systemd
  after dehydrated --cron has run
- Remove hook directory intended for packaging other native hooks.
  Will be approach differently</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1507204800">- Remove unused hooks directory
- Introduced a directory for custom post-run hooks executed as root,
  see README.SUSE for details. (not to be confused with the native hooks
  run as dehyrated user)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155200">- Fix run of root hooks
- Simplify root hook execution, this is also more robust</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508155201">- In the timer service, execute root post run hooks in ExecStartPost</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508241600">- Commands in service files need some escaping after all. Fix ExecStartPost.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508328000">- Use sudo instead of su to allow for argument handling, also
  works in all cases when no login shell is assigned to the
  dehydrated user
  * updates 0001-Add-optional-user-and-group-configuration.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1508414400">- Use /usr/bin/bash directly, rather than via env</changelog>
  <changelog author="mrueckert@suse.de" date="1508500800">- actually try to find the real path to bash and don't hardcode
  /usr/bin/bash</changelog>
  <changelog author="mrueckert@suse.de" date="1508500801">- revert accidental change to the service file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017600">- Updated dehydrated to 0.5.0
  This removes the following patches and files, which are now part of the
  upstream package:
  * 0001-Add-optional-user-and-group-configuration.patch
  * 0002-use-nullglob-disable-warning-on-empty-CONFIG_D-direc.patch
  * dehydrated.1: the man page has been adopted by upstream
  Starting with this version, upstream introduced signed releases, which
  is now being used for source validation.
  Upstream changes:
  Changed
  * Certificate chain is now cached (CHAINCACHE)
  * OpenSSL binary path is now configurable (OPENSSL)
  * Cleanup now also moves revoked certificates
  Added
  * New feature for updating contact information (--account)
  * Allow automatic cleanup on exit (AUTO_CLEANUP)
  * Initial support for fetching OCSP status to be used for OCSP stapling
    (OCSP_FETCH)
  * Certificates can now have aliases to create multiple certificates with
    identical set of domains (see --alias and domains.txt documentation)
  * Allow dehydrated to run as specified user (/group). This was already
    available previously as a patch to this package.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516017601">- Remove redundant noarch entries. They cause an error in RPM 4.14.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520856000">- Updated dehydrated to 0.6.0 (bsc#1084854)
  Changed
  * Challenge validation loop has been modified to loop over authorization identifiers instead of altnames (ACMEv2 + wildcard support)
  * Removed LICENSE parameter from config (terms of service is now acquired directly from the CA directory)
  Added
  * Support for ACME v02 (including wildcard certificates!)
  * New hook: generate_csr (see example hook script for more information)
  * Calling random hook on startup to make it clear to hook script authors that unknown hooks should just be ignored...</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Updated dehydrated to 0.6.1 (bsc#1084854)
  * Use new ACME v2 endpoint by default</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521028800">- Fix issues introduced by 0.6.1 (bsc#1085305)
  * bring back man page
  * reflect new endpoint in (commented out) config file section
    (adds 0001-fixed-CA-url-in-example-config.patch, backported
    from upstream's master branch)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521115200">- Don't add intermediate certificates twice when using ACMEv2 (bsc#1085305)
  * Adds 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524830400">- Update to dehydrated 0.6.2
  * removes 0001-fixed-CA-url-in-example-config.patch
  * removes 0002-don-t-walk-certificate-chain-for-ACMEv2-certificate-.patch
  Added
  * New deploy_ocsp hook
  * Allow account registration with custom key
  Changed
  * Don't walk certificate chain for ACMEv2 (certificate contains chain by default)
  * Improved documentation on wildcards
  Fixes
  * Added workaround for compatibility with filesystem ACLs
  * Close unwanted external file-descriptors
  * Fixed JSON parsing on force-renewal (bsc#1091216)
  * Fixed cleanup of challenge files/dns-entries on validation errors
  * A few more minor fixes</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548158400">- Remove RandomizedDelaySec attribute for distros with older systemd
  (boo#1110697)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561464000">- Update to dehydrated 0.6.4
  * Fetch account ID from Location header instead of account json (bsc#1139408)
- Update to dehydrated 0.6.3
  * OCSP refresh interval is now configurable
  * Implemented POST-as-GET
  * Call exit_hook on errors (with error-message as first parameter)
  * Initial support for tls-alpn-01 validation
  * New hook: sync_cert (for syncing certificate files to disk, see example
    hook description)
  * Fetch account information after registration to avoid missing account id</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561550400">- Update to dehydrated 0.6.5
  * Fixed broken APIv1 compatibility from last update</changelog>
</package>
<package pkgid="2d8d35bddcf5d15d849efe9f5e367467ec84b545ec28011abc41757fe8f2887a" name="dejagnu" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260187200">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1357905600">- remove suse_update_config macro</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@suse.de" date="1396958400">- Update to dejagnu 1.5.1
  1. The runtest.1 man page has been brought up to date.
  2. The Docbook/SGML documentation files were removed in favour of the
    Docbook/XML documentation.  The Texinfo source for the Info pages is
    now automatically generated from the Docbook source.
  3. The Makefile structure has been substantially simplified.  There
    is now a single top-level Makefile.am.  The use of recursive make
    has been eliminated.
  4. lib/mondfe.exp and lib/xsh.exp have been removed.  Users requiring
    these communication modes can still use the DejaGnu 1.4 branch or
    can contact dejagnu@gnu.org to discuss reinstating these files.
  5. The configure script now ensures that Expect is installed and that
    it is linked against Tcl 8.3 or greater.
  6. The runtest program now gracefully handles the possibility of the
    expect binary vanishing after DejaGnu has been installed (for
    example, by the user altering their PATH).
  7. The user-visible utility procedures `absolute', `prune', `psource'
    and `slay' are deprecated and will be removed in the next release.
    If a testsuite uses any of these procedures, a copy of the
    procedure should be made and placed in the lib directory of the
    testsuite.
- dejagnu-ignore-libwarning.patch: Removed
- dejagnu-make_doc.patch: Removed
- Build as noarch</changelog>
  <changelog author="schwab@suse.de" date="1423483200">- Update to dejagnu 1.5.2
  * New boards and bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1426334400">- Add gpg signature
- Add dependencies for macros dealing with info files
- Use fdupes to avoid duplicate files
- Small spec file cleanup by spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1427889600">- Update to dejagnu 1.5.3
  * More bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1460808000">- Update to 1.6
  * Proper support for target communication via SSH has been added.
  * A large number of very old config and baseboard files have been
    removed.  If you need to resurrect these, you can get them from
    version 1.5.3.  If you can show that a board is still in use,
    it can be put back in the distribution.
  * The --status command line option is now the default. This means
    that any error in the testsuite Tcl scripts will cause runtest
    to abort with exit status code 2.  The --status option has been
    removed from the documentation, but will continue to be
    accepted for backward compatibility.
  * runtest now exits with exit code 0 if the testsuite "passed",
    1 if something unexpected happened (eg, FAIL, XPASS or
    UNRESOLVED), and 2 if an exception is raised by the Tcl
    interpreter.
  * runtest now exits with the standard exit codes of programs that
    are terminated by the SIGINT, SIGTERM and SIGQUIT signals.
  * The user-visible utility procedures `absolute', `psource' and
    `slay' have been removed.  If a testsuite uses any of these
    procedures, a copy of the procedure should be made and placed
    in the lib directory of the testsuite.
  * Support was added for testing the D compiler.
  * ~/.dejagnurc is now loaded last, not first. This allows the
    user to have the ability to override anything in their
    environment (even the site.exp file specified by $DEJAGNU).
  * The user-visible utility procedure `unsetenv' is deprecated
    and will be removed in the next release.  If a testsuite uses
    any of these procedures, a copy of the procedure should be made
    and placed in the lib directory of the testsuite.
- Run tests during build
- Small spec-file polishing</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- Update to 1.6.1
  * Minor bug fixes, no major changes</changelog>
  <changelog author="schwab@suse.de" date="1531828800">- close-wait-program.patch: Use separate kill command for each pid
  (bsc#1100206)
- Use %license.</changelog>
</package>
<package pkgid="74393dee57ea76e35e62455185fc9457345c364fb73a6b607af436c72362b3ca" name="dejagnu" arch="src">
  <version epoch="0" ver="1.6.1" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1065009600">- Don't regenerate documentation</changelog>
  <changelog author="mcihar@suse.cz" date="1079611200">- remove backup files</changelog>
  <changelog author="mcihar@suse.cz" date="1086004800">- update to 1.4.4</changelog>
  <changelog author="schwab@suse.de" date="1090843200">- Rerun autoreconf in example directories.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mmarek@suse.cz" date="1150286400">- remove more backup files (autoreconf leftovers)</changelog>
  <changelog author="aj@suse.de" date="1171195200">- Fix install of manpage.</changelog>
  <changelog author="rguenther@suse.de" date="1179316800">- Remove files from correct place.</changelog>
  <changelog author="jengelh@medozas.de" date="1260187200">- enable parallel building</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1357905600">- remove suse_update_config macro</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@suse.de" date="1396958400">- Update to dejagnu 1.5.1
  1. The runtest.1 man page has been brought up to date.
  2. The Docbook/SGML documentation files were removed in favour of the
    Docbook/XML documentation.  The Texinfo source for the Info pages is
    now automatically generated from the Docbook source.
  3. The Makefile structure has been substantially simplified.  There
    is now a single top-level Makefile.am.  The use of recursive make
    has been eliminated.
  4. lib/mondfe.exp and lib/xsh.exp have been removed.  Users requiring
    these communication modes can still use the DejaGnu 1.4 branch or
    can contact dejagnu@gnu.org to discuss reinstating these files.
  5. The configure script now ensures that Expect is installed and that
    it is linked against Tcl 8.3 or greater.
  6. The runtest program now gracefully handles the possibility of the
    expect binary vanishing after DejaGnu has been installed (for
    example, by the user altering their PATH).
  7. The user-visible utility procedures `absolute', `prune', `psource'
    and `slay' are deprecated and will be removed in the next release.
    If a testsuite uses any of these procedures, a copy of the
    procedure should be made and placed in the lib directory of the
    testsuite.
- dejagnu-ignore-libwarning.patch: Removed
- dejagnu-make_doc.patch: Removed
- Build as noarch</changelog>
  <changelog author="schwab@suse.de" date="1423483200">- Update to dejagnu 1.5.2
  * New boards and bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1426334400">- Add gpg signature
- Add dependencies for macros dealing with info files
- Use fdupes to avoid duplicate files
- Small spec file cleanup by spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1427889600">- Update to dejagnu 1.5.3
  * More bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1460808000">- Update to 1.6
  * Proper support for target communication via SSH has been added.
  * A large number of very old config and baseboard files have been
    removed.  If you need to resurrect these, you can get them from
    version 1.5.3.  If you can show that a board is still in use,
    it can be put back in the distribution.
  * The --status command line option is now the default. This means
    that any error in the testsuite Tcl scripts will cause runtest
    to abort with exit status code 2.  The --status option has been
    removed from the documentation, but will continue to be
    accepted for backward compatibility.
  * runtest now exits with exit code 0 if the testsuite "passed",
    1 if something unexpected happened (eg, FAIL, XPASS or
    UNRESOLVED), and 2 if an exception is raised by the Tcl
    interpreter.
  * runtest now exits with the standard exit codes of programs that
    are terminated by the SIGINT, SIGTERM and SIGQUIT signals.
  * The user-visible utility procedures `absolute', `psource' and
    `slay' have been removed.  If a testsuite uses any of these
    procedures, a copy of the procedure should be made and placed
    in the lib directory of the testsuite.
  * Support was added for testing the D compiler.
  * ~/.dejagnurc is now loaded last, not first. This allows the
    user to have the ability to override anything in their
    environment (even the site.exp file specified by $DEJAGNU).
  * The user-visible utility procedure `unsetenv' is deprecated
    and will be removed in the next release.  If a testsuite uses
    any of these procedures, a copy of the procedure should be made
    and placed in the lib directory of the testsuite.
- Run tests during build
- Small spec-file polishing</changelog>
  <changelog author="schwab@suse.de" date="1508241600">- Update to 1.6.1
  * Minor bug fixes, no major changes</changelog>
  <changelog author="schwab@suse.de" date="1531828800">- close-wait-program.patch: Use separate kill command for each pid
  (bsc#1100206)
- Use %license.</changelog>
</package>
<package pkgid="3a5f40af659fb4f68dfea7e2615a3f8e325bea734fce923c7cf2f4b29517734f" name="desktop-file-utils" arch="src">
  <version epoch="0" ver="0.23" rel="lp150.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1331035200">- Update to version 0.20:
  + desktop-file-install:
  - fix list of locale strings without trailing slash
  + desktop-file-validate:
  - add MATE and Razor to list of registered environments
  - validate Desktop Actions
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="idonmez@suse.com" date="1348660800">- BuildIgnore dbus-1-x11 to break the cycle</changelog>
  <changelog author="vuntz@opensuse.org" date="1349092800">- Import SuSEconfig script from glib2 here:
  + This is needed as SuSEconfig is now dead, and we need a way to
    generate the defaults.list file needed for the default MIME
    associations. Part of bnc#782120.
  + Add suse-update-mime-defaults as source, and install it.
  + Call suse-update-mime-defaults in %post.
  + Call suse-update-mime-defaults from the %desktop_database_post
    and %desktop_database_postun macros defined in
    macros.desktop-file-utils. This way, packages using those
    macros will regenerate the defaults.list files on
    install/removal.</changelog>
  <changelog author="vuntz@opensuse.org" date="1349956800">- Update to verison 0.21:
  + desktop-file-validate:
  - update to current version of menu specification:
    . only print hint if no main category is present, not an
    error
    . make Science a main category
    . add new registered categories: Adult, Feed, Humanities,
    Maps, Shooter, Spirituality, XFCE
    . update related categories
    . add TDE to list of registered OnlyShowIn
  - accept and validate GNOME3/GSettings for AutostartCondition
  - output hint if more than one main category is present
  - output hint about suggested related categories
  + misc:
  - do not require glib &gt;= 2.28 for build</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377864000">- Update to version 0.22:
  + desktop-file-validate
  - add DBusActivatable key to allowed keys
  - warn about OnlyShowIn in Action groups
  - allow validating multiple desktop files
  - improve help output
  - update man page
  + update-desktop-database
  - list only once a desktop file per mime type
  + misc
  - honor NOCONFIGURE=1
- Rebase desktop-file-utils-suse-keys.patch to new release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="e8b3bbc490fe475fd6df697f5b9ca02a1c812a21bf53bd90bc99de67a14b241d" name="desktop-file-utils" arch="x86_64">
  <version epoch="0" ver="0.23" rel="lp150.3.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1418644800">- Add U_trailing-semicolons-are-optional_aec5711.patch
  bfo#76902, fixes a no longer correct rpmlint warning for some
  upstream desktop files without trailing semicolon
- Add U_add-EDE-desktop-environment_97d6ba3.patch,
  U_add-Cinnamon-desktop-environment_50271fe.patch
  bfo#56353, bfo#73497</changelog>
  <changelog author="dimstar@opensuse.org" date="1420459200">- http://standards.freedesktop.org/mime-apps-spec/mime-apps-spec-latest.html
  + the mime app list is now called $desktop-mimeapps.list in place
    of $desktop-defaults.list. Each DE is allowed to have 'better'
    defaults.</changelog>
  <changelog author="tchvatal@suse.com" date="1425988800">- Cleanup with spec-cleaner
- Update suse-update-mime-defaults to search subfolders for desktop
  files by changing to find from simple ls bnc#867135</changelog>
  <changelog author="hpj@suse.com" date="1460548800">- Update to GNOME 3.20 Fate#318572</changelog>
  <changelog author="hpj@suse.com" date="1462795200">- Add desktop-file-utils-fdo94303-fix-buffer-over-read.patch
  (fdo#94303).</changelog>
  <changelog author="dimstar@opensuse.org" date="1464091200">- Fix suse-update-mime-defaults: Ensure the directory structure to
  write the cache info to is in place (boo#976973).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476273600">- Use standardized patch tags as documented at
  https://en.opensuse.org/openSUSE:Packaging_Patches_guidelines.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 0.23:
  + Accept version 1.1 desktop files.
  + Add Cinnamon, EDE and LXQt to the list of registered desktop
    environments (fdo#73497, fdo#56353, fdo#79561).
  + Allow multipart/related MIME type; it's used for MHTML
    (fdo#93376).
  + Ensure DBusActivatable filenames conform to reverse-DNS
    notation (fdo#66904).
  + Downgrade trailing semicolons to optional (fdo#76902).
  + Fix buffer over-read (fdo#94303).
- Drop upstreamed fixed patches:
  + desktop-file-utils-fdo94303-fix-buffer-over-read.patch.
  + U_add-Cinnamon-desktop-environment_50271fe.patch.
  + U_add-EDE-desktop-environment_97d6ba3.patch.
  + U_trailing-semicolons-are-optional_aec5711.patch.
- Rebase desktop-file-utils-suse-keys.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498132800">- Replace %desktop_database_post/postun with respective file
  triggers in desktop-file-utils: any file put into
  /usr/share/applications will trigger the execution of the script.
  In order to not break the macros short-term they are being
  redefined to %nil.</changelog>
  <changelog author="sbrabec@suse.com" date="1507550400">- suse-update-mime-defaults: Do not be confused by "r" environment
  variable. Requires DESTDIR=/foo command line argument instead
  (boo#1049867).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519992000">- suse-update-mime-defaults requires coreutils and awk
  add both to package requires</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1560945600">- Add desktop-file-utils-add-Pantheon.patch: Backporting upstream
  patch to Add Pantheon to desktop env list(fdo#105785 bnc#1094774).</changelog>
  <changelog author="sbrabec@suse.com" date="1563537600">- Revert pkconfig package name change back to correct pkg-config.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1566907200">- Add 0001-add-font-as-valid-media-type.patch from upstream to let
  update-desktop-database recognize font media types (bsc#1148080)</changelog>
</package>
<package pkgid="1f5e556d509254667a0b7d7844bb17ffc5c4a875df2c6179575e77db3e1ce430" name="device-mapper" arch="src">
  <version epoch="0" ver="1.02.146" rel="lp150.6.3.1"/>
  <changelog author="zren@suse.com" date="1497700800">- Fix test failures about read ahead issue, see bsc#1043040
  + bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch
- Reorder the patches to put them into the right groups</changelog>
  <changelog author="zren@suse.com" date="1497700801">- Backport fix for lvresize-full.sh failed, see bsc#1033691
  + bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix zypper update issue with device-mapper package, see bsc#1045396</changelog>
  <changelog author="zren@suse.com" date="1499169600">- Update to LVM2.2.02.172
- Cleanup spec file, and refresh patches
  * removed device-mapper-link.patch
  * removed bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch
  * removed Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  * added bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch</changelog>
  <changelog author="zren@suse.com" date="1499342400">- Don't create symlink for invisible device like thin-pool (bsc#1046591)
  * drop 10-dm.rules-Reset-state-variable-for-spurious-events.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Require device-mapper-devel rather than recommend. It is really
  needed (the .h files are required by the lvm2app and lvm2cmd)</changelog>
  <changelog author="zren@suse.com" date="1500984000">- Update to LVM2.2.02.173
- Sync our lvm.conf with V2.02.173</changelog>
  <changelog author="zren@suse.com" date="1501588800">- Dropped several not-upstreamed patches, some of them neither have
  history reference nor patch header, some were temporary workaround
  fix.
  - device-mapper-gcc-warnings.patch
  - device-mapper-type_punning.diff
  - fix-closedown-before-thread-finish.patch
  - libdm-iface-not-output-error-message-inside-retry-loop.patch
  - pvcreate-enhance-the-error-message.patch
  - pvmove_support_clustered_vg.diff
  - version-plugins-in-libdir.patch</changelog>
  <changelog author="mwilck@suse.com" date="1503057600">- Dropped udev rule patches (bsc#1054363)
  * dropped udev_rules-update.diff
  * dropped device-mapper-dmsetup-export.patch
  * dropped udev-Check-for-DM_NR_VALID_PATHS.patch
  * dropped Import-ID_FS_XXX-variables-bnc909358.patch
  * dropped 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch</changelog>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1127219)</changelog>
  <changelog author="ghe@suse.com" date="1557748800">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
</package>
<package pkgid="2102a8746218c90312009c287036a423111363d374ef4fb1f1b47b66916e7757" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.146" rel="lp150.6.3.1"/>
  <changelog author="zren@suse.com" date="1497700800">- Fix test failures about read ahead issue, see bsc#1043040
  + bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch
- Reorder the patches to put them into the right groups</changelog>
  <changelog author="zren@suse.com" date="1497700801">- Backport fix for lvresize-full.sh failed, see bsc#1033691
  + bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix zypper update issue with device-mapper package, see bsc#1045396</changelog>
  <changelog author="zren@suse.com" date="1499169600">- Update to LVM2.2.02.172
- Cleanup spec file, and refresh patches
  * removed device-mapper-link.patch
  * removed bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch
  * removed Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  * added bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch</changelog>
  <changelog author="zren@suse.com" date="1499342400">- Don't create symlink for invisible device like thin-pool (bsc#1046591)
  * drop 10-dm.rules-Reset-state-variable-for-spurious-events.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Require device-mapper-devel rather than recommend. It is really
  needed (the .h files are required by the lvm2app and lvm2cmd)</changelog>
  <changelog author="zren@suse.com" date="1500984000">- Update to LVM2.2.02.173
- Sync our lvm.conf with V2.02.173</changelog>
  <changelog author="zren@suse.com" date="1501588800">- Dropped several not-upstreamed patches, some of them neither have
  history reference nor patch header, some were temporary workaround
  fix.
  - device-mapper-gcc-warnings.patch
  - device-mapper-type_punning.diff
  - fix-closedown-before-thread-finish.patch
  - libdm-iface-not-output-error-message-inside-retry-loop.patch
  - pvcreate-enhance-the-error-message.patch
  - pvmove_support_clustered_vg.diff
  - version-plugins-in-libdir.patch</changelog>
  <changelog author="mwilck@suse.com" date="1503057600">- Dropped udev rule patches (bsc#1054363)
  * dropped udev_rules-update.diff
  * dropped device-mapper-dmsetup-export.patch
  * dropped udev-Check-for-DM_NR_VALID_PATHS.patch
  * dropped Import-ID_FS_XXX-variables-bnc909358.patch
  * dropped 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch</changelog>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1127219)</changelog>
  <changelog author="ghe@suse.com" date="1557748800">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
</package>
<package pkgid="6dc972e977cd80ce61e1c0a85974220e1145243296b2a665a39a83bf8cd5fc56" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.146" rel="lp150.6.3.1"/>
  <changelog author="zren@suse.com" date="1497700800">- Fix test failures about read ahead issue, see bsc#1043040
  + bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch
- Reorder the patches to put them into the right groups</changelog>
  <changelog author="zren@suse.com" date="1497700801">- Backport fix for lvresize-full.sh failed, see bsc#1033691
  + bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix zypper update issue with device-mapper package, see bsc#1045396</changelog>
  <changelog author="zren@suse.com" date="1499169600">- Update to LVM2.2.02.172
- Cleanup spec file, and refresh patches
  * removed device-mapper-link.patch
  * removed bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch
  * removed Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  * added bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch</changelog>
  <changelog author="zren@suse.com" date="1499342400">- Don't create symlink for invisible device like thin-pool (bsc#1046591)
  * drop 10-dm.rules-Reset-state-variable-for-spurious-events.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Require device-mapper-devel rather than recommend. It is really
  needed (the .h files are required by the lvm2app and lvm2cmd)</changelog>
  <changelog author="zren@suse.com" date="1500984000">- Update to LVM2.2.02.173
- Sync our lvm.conf with V2.02.173</changelog>
  <changelog author="zren@suse.com" date="1501588800">- Dropped several not-upstreamed patches, some of them neither have
  history reference nor patch header, some were temporary workaround
  fix.
  - device-mapper-gcc-warnings.patch
  - device-mapper-type_punning.diff
  - fix-closedown-before-thread-finish.patch
  - libdm-iface-not-output-error-message-inside-retry-loop.patch
  - pvcreate-enhance-the-error-message.patch
  - pvmove_support_clustered_vg.diff
  - version-plugins-in-libdir.patch</changelog>
  <changelog author="mwilck@suse.com" date="1503057600">- Dropped udev rule patches (bsc#1054363)
  * dropped udev_rules-update.diff
  * dropped device-mapper-dmsetup-export.patch
  * dropped udev-Check-for-DM_NR_VALID_PATHS.patch
  * dropped Import-ID_FS_XXX-variables-bnc909358.patch
  * dropped 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch</changelog>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1127219)</changelog>
  <changelog author="ghe@suse.com" date="1557748800">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
</package>
<package pkgid="5257ff0109d98527f91ec1f62239014838d4f1d2fc1d3f4355d78dfb181cb7ac" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.146" rel="lp150.6.3.1"/>
  <changelog author="zren@suse.com" date="1497700800">- Fix test failures about read ahead issue, see bsc#1043040
  + bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch
- Reorder the patches to put them into the right groups</changelog>
  <changelog author="zren@suse.com" date="1497700801">- Backport fix for lvresize-full.sh failed, see bsc#1033691
  + bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix zypper update issue with device-mapper package, see bsc#1045396</changelog>
  <changelog author="zren@suse.com" date="1499169600">- Update to LVM2.2.02.172
- Cleanup spec file, and refresh patches
  * removed device-mapper-link.patch
  * removed bug-1033691_tests-missed-to-export-lvm-binary-for-fsadm.patch
  * removed Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  * added bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch</changelog>
  <changelog author="zren@suse.com" date="1499342400">- Don't create symlink for invisible device like thin-pool (bsc#1046591)
  * drop 10-dm.rules-Reset-state-variable-for-spurious-events.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Require device-mapper-devel rather than recommend. It is really
  needed (the .h files are required by the lvm2app and lvm2cmd)</changelog>
  <changelog author="zren@suse.com" date="1500984000">- Update to LVM2.2.02.173
- Sync our lvm.conf with V2.02.173</changelog>
  <changelog author="zren@suse.com" date="1501588800">- Dropped several not-upstreamed patches, some of them neither have
  history reference nor patch header, some were temporary workaround
  fix.
  - device-mapper-gcc-warnings.patch
  - device-mapper-type_punning.diff
  - fix-closedown-before-thread-finish.patch
  - libdm-iface-not-output-error-message-inside-retry-loop.patch
  - pvcreate-enhance-the-error-message.patch
  - pvmove_support_clustered_vg.diff
  - version-plugins-in-libdir.patch</changelog>
  <changelog author="mwilck@suse.com" date="1503057600">- Dropped udev rule patches (bsc#1054363)
  * dropped udev_rules-update.diff
  * dropped device-mapper-dmsetup-export.patch
  * dropped udev-Check-for-DM_NR_VALID_PATHS.patch
  * dropped Import-ID_FS_XXX-variables-bnc909358.patch
  * dropped 69-dm-lvm-metad.rules-Do-not-process-rules-for-multi.patch</changelog>
  <changelog author="zren@suse.com" date="1505390400">- Drop resource agents for clvmd and cmirror (bsc#1058680)
  - clvmd.ocf
  - cmirrord.ocf
- Drop all patches for cmirror (bsc#1058661)
  - cluster_support_mirrord_log.diff
  - cmirrord_improvment_performance.patch
  - lvconvert-cluster-mirrored-disk-failed.patch
  - improve-mirror-legs-on-different-tag-pvs.patch
  - make-mirror-legs-on-different-tag-pvs.patch
  - use-mirrortype-asdefault-whenclvmdrunning.patch</changelog>
  <changelog author="zren@suse.com" date="1508760000">- Update to LVM2.2.02.175
- Use week dependency for lvm2-lockd on libdlm and sanlock
- Rename/refresh patches:
  - display-dm-name-for-lv-name.diff to fate-309425_display-dm-name-for-lv-name.patch
  - fsadm-add-support-for-btrfs.patch to fate-31841_fsadm-add-support-for-btrfs.patch
  - dmeventd-fix-dso-name-wrong-compare.patch to bug-935623_dmeventd-fix-dso-name-wrong-compare.patch
  - lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch to bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
  - simplify-special-case-for-md-in-69-dm-lvm-metadata.patch to bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  - lvm2-testsuite.patch to bug-950089_test-fix-lvm2-testsuite-build-error.patch</changelog>
  <changelog author="zren@suse.com" date="1509624000">- Re-add a strict requires on sanlock, fate#323203</changelog>
  <changelog author="zren@suse.com" date="1511265600">- Update to LVM2.2.02.176:
  Keep Install section only in lvm2-{lvmetad,lvmpolld}.socket systemd unit.
  Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  Do not allow storing VG metadata with LV without any segment.
  Fix printed message when thin snapshot was already merged.
  Remove created spare LV when creation of thin-pool failed.
  Avoid reading ignored metadata when mda gets used again.
  Fix detection of moved PVs in vgsplit. (2.02.175)
  Ignore --stripes/--stripesize on RAID takeover
  Improve used paths for generated systemd units and init shells.
  Disallow creation of snapshot of mirror/raid subLV (was never supported).
  Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  Allow lvcreate to be used for caching of _tdata LV.
  Avoid internal error when resizing cache type _tdata LV (not yet supported).
  Show original converted names when lvconverting LV to pool volume.
  Move lib code used only by liblvm into metadata-liblvm.c.
  Distinguish between device not found and excluded by filter.
  Monitor external origin LVs.
  Remove the replicator code, including configure --with-replicators.
  Allow lvcreate --type mirror to work with 100%FREE.
  Improve selection of resource name for complex volume activation lock.
  Avoid cutting first character of resource name for activation lock.
  Support for encrypted devices in fsadm.
  Improve thin pool overprovisioning and repair warning messages.
  Fix incorrect adjustment of region size on striped RaidLVs.
- Drop: bug-960044_lvm2-lvmetad.service-add-Also-lvm2-lvmetad.socket.patch
- Refresh: fate-31841_fsadm-add-support-for-btrfs.patch</changelog>
  <changelog author="zren@suse.com" date="1513684800">- device-mapper.spec: fix wrong replacement of DM_VERSION (bsc#1072524)
- Fixes failure of some testcases caused by nc behavior change (bsc#1072624)
  + bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
- Refreshed fate-31841_fsadm-add-support-for-btrfs.patch
- Update to LVM2.2.02.177
  When writing text metadata content, use complete 4096 byte blocks.
  Change text format metadata alignment from 512 to 4096 bytes.
  When writing metadata, consistently skip mdas marked as failed.
  Refactor and adjust text format metadata alignment calculation.
  Ensure _node_send_message always uses clean status of thin pool.
  Fix lvmlockd to use pool lock when accessing _tmeta volume.
  Report expected sanlock_convert errors only when retries fail.
  Avoid blocking in sanlock_convert on SH to EX lock conversion.
  Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  Categorise I/O with reason annotations in debug messages.
  Allow extending of raid LVs created with --nosync after a failed repair.
  Command will lock memory only when suspending volumes.
  Merge segments when pvmove is finished.
  Activation code for pvmove automatically discovers holding LVs for resume.
  Make a pvmove LV locking holder.
  Do not change critical section counter on resume path without real resume.
  Enhance activation code to automatically suspend pvmove participants.
  Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  Add support for pvmove of cache and snapshot origins.
  Avoid using precommitted metadata for suspending pvmove tree.
  Deactivate activated LVs on error path when pvmove activation fails.
  Add "io" to log/debug_classes for logging low-level I/O.
  Avoid importing persistent filter in vgscan/pvscan/vgrename.
  Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  Do not print error when clvmd cannot find running clvmd.
  Prevent start of new merge of snapshot if origin is already being merged.
  Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  Deactivate sub LVs when removing unused cache-pool.
  Do not take backup with suspended devices.</changelog>
  <changelog author="zren@suse.com" date="1515585600">- lvmlockd: add lockopt values for skipping selected locks (fate#323203)
  + fate-323203_lvmlockd-add-lockopt-values-for-skipping-selected-lo.patch</changelog>
  <changelog author="zren@suse.com" date="1516104000">- clvmd: try to refresh device cache on the first failure
  (bsc#978055, bsc#1076042)
  + bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1518436800">- Fix detection of clvm that happens on compile time based on
  CLVM_PIDFILE, as we determine these features on runtime
  bsc#1080299:
  + bsc1080299-detect-clvm-properly.patch</changelog>
  <changelog author="mwilck@suse.com" date="1524139200">- Fix handling of udev CHANGE events with systemd (bsc#1067312)
  + lvm2-69-dm-lvm-metad.rules-explicit-pvscan-rule.patch
  + lvm2-69-dm-lvm-metad.rules-set-systemd-vars-on-chang.patch</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf
  (bsc#1127219)</changelog>
  <changelog author="ghe@suse.com" date="1557748800">- Fix issuing discard in test mode (bsc#1095960)
  + bug-1095960_dev_io-no-discard-in-testmode.patch</changelog>
</package>
<package pkgid="b768b9b4417354e888b0876d0936e673a48f551393051af52d2a73dfdead85be" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="fd866f35892f6d008265b91dd495e93adf25972f5e02dcfed707cff47459c49f" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="c19dc461654c0b4f61db127afec1d670b2747dca611a1a3dc8c93fc1cf131ac3" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="73be87606a01347c140dcea3f50ea25d7e32d9f1f737c281953840e118c56861" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="0cb0a671f86ceff4f6db92f71c23e062a0f7952579c525fbb3bd2137af4f7de7" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="c7bebdd113b75cc2df6a9454ed0775610e552d51d2e5cb6dbf1269c692cf6921" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="9048ec78fdae773eaa79bf7a780c49e39d6bc9dc90969f8bad8d272920a71cfd" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp150.5.3.1"/>
  <changelog author="coolo@suse.com" date="1422964800">- do not check scripts not in the src.rpm</changelog>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
</package>
<package pkgid="cf4344a55bc60d02a2dedf93a68610e8878061afd4e3ea29677de6cadb500e44" name="dialog" arch="src">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="309ad7ddba1dc1aaf7e1b3aa32eb7f8678c5875d621f91fb4e661b49e0aec458" name="dialog" arch="x86_64">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="9986406c603ee0fb7f658f6987fb2e3d8e91ed7d8b9cea6d78f447b70c4f2e10" name="dialog-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="c799bf9937b974d4f834a15ba1cd2a9690321db8dc0562d8bd5284b6a7d13a47" name="dialog-examples" arch="noarch">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="3724271c3b1ae941b4440fc8af9dd8f1dd4be52bbb4f0722224694cae004e7f9" name="dialog-lang" arch="noarch">
  <version epoch="0" ver="1.3" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1277985600">- Added korean po translation file (bnc#614248)</changelog>
  <changelog author="werner@suse.de" date="1283947200">- Disable gpm as it is not used for long time</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1359288000">- Build with libtool using
- Add devel package</changelog>
  <changelog author="cfarrell@suse.com" date="1359633600">- license update: LGPL-2.1
  See e.g. editbox.c</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534400">- Fix libraries
  * dialog-libs.patch</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1361534401">- Update to version 1.2-20121230
  * See included CHANGES file for detailes</changelog>
  <changelog author="werner@suse.de" date="1362052800">- Re-add patch dialog-1.2-20121230.dif: Fix problem with moving
  shadows during terminal resize
- Use a /etc/dialogrc for openSUSE default coloring/shadow defaults
- Re-add Korean language message file</changelog>
  <changelog author="werner@suse.de" date="1371816000">- Require terminfo-base and suggest terminfo to have on many or on
  mostly all terminals valid line graphics (bnc#826171)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="7273f95c762b257b6ffb9aff4d6d34b378a8af0cb4132707454ed05685905896" name="discount" arch="x86_64">
  <version epoch="0" ver="2.2.4" rel="lp150.2.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1295092800">- initial version (2.0.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1304510400">- update to 2.0.9: no user-visible changes
- changes from 2.0.8:
  * changes and optimizations were made in table handling
  * a collection of bug and documentation fixes were made
- changes from 2.0.7:
  * the PHP markdown-extra style footnotes were documented
  * a new public function was added to modify the output that is generated for
    them
  * a few small typographical corrections were made to other manpages
- changes from 2.0.6:
  * support was added for PHP markdown extra footnotes
- changes from 2.0.5:
  * small tweaks to the table-of-contents generator
  * a change to the arguments of linkyformat() for inside-tag formatting
  * adds an expanded definition of CSS class names to include dashes and
    underscores</changelog>
  <changelog author="lnussel@suse.de" date="1355832000">- correct license in spec file. It's actually BSD4c
- changes from version 2.1.5a:
  * MKD_NOSTYLE ? treat &lt;style&gt; blocks as regular html.
  * github flavored markdown support
  * in the markdown program, add
  - S flag (tell markdown to spit out style sections)
  - n flag (tell markdown not to output generated text)
- version 2.1.1.1 implements PHP markdown extra-style fenced code sections,
  where your chunks of code are surrounded by ~~~ lines instead of being
  indented 4 spaces.
- changes from version 2.1.0:
  * makepage now accepts markdown option flags a'la the markdown program (via
  - Fxxxx, -fname, or in the MARKDOWN_FLAGS environment variable.)
  * add a -E flag to theme to ignore context-sensitivity on &lt;?theme xxx?&gt; substitutions.</changelog>
  <changelog author="mardnh@gmx.de" date="1430395200">- update to 2.1.8a
- correct license in spec file. It's actually BSD-3-Clause
- added patch for fixing some comiler warnings:
  discount-fix-compile-warings.diff
- ran spec-cleaner and specfile cleanup
- change from version 2.1.8a
  When I put in the patch to ...
  * Change the mail demangler to a debian-specific ?always mangle one way? hack.
    (enabled with the configure.sh option ?debian-glitch)
  I messed up the format string and made the mangled email address into a fixed
  bogus string. Sigh. Fixed (thanks to a patch from Alessandro Ghedini), updated
  (and I really have to expand the runtime configuration flags array to be long
  enough to fit 64 settings, but that?s a fix for a different day) and released.
- change from version 2.1.8
  After a year or so of letting the code sit and slowly accumulate fixes, a new
  version which fixes a wad of bugs and adds a few new features. Some of this
  code is front other people, and those changes will be marked with their names:
  * FINALLY address the bug where markdown extra-style footnotes lose numbering
    when they show up in nested element; I was not carrying the m-e reference#
    inside the footnotes structure, but was instead carrying it in the parent
    structure and not updating it. So I changed the footnotes structure to
    include the reference + the list of footnotes, which made the misnumbering
    go away on my tests.
  * Fix makefile distclean to cleanup all the generated files and corrected the
    names of the installed sample program man pages to end in .1
    (Mark Pizzolato mark@infocomm.com)
  * Change the mail demangler to a debian-specific ?always mangle one way? hack.
    (enabled with the configure.sh option ?debian-glitch)
  * Add ?with-unmangled-email compile-time flag to disable mailto: mangling
  * Allow the magic output filename -, which means send output to stdout instead
    of to a file.
  * Fix a bug where autolink + github flavored markdown absorbs the ^C eoln
    character into a link at the end of a line.
  * Tweak install.samples so that the user can supply a SAMPLE_PFX on the
    command line SAMPLE_PFX=discount- make install.samples to install the sample
    programs with a package-specific prefix.
  * Emit pages in utf-8 instead of us-ascii (simply a change to the
    Content-Type meta) (Nathan Phillip Brink binki@gentoo.org)
  * Patch the horrible list handler to support long numeric list items
    (George Hartzell hartzell@alerce.com)
  * Various bugfixes (Masayoshi Sekimura sekimura@gmail.com)
  * Fix support for CFLAGS=-m32 ./configure.sh by using CFLAGS for all build
    invokations of CC. (Nathan Phillip Brink binki@gentoo.org)
  * Github-style language attributes on fenced code blocks
    (Loren Segal lsegal@amazon.com)
  * When defining WORD &amp; DWORD, check first for the MS Windows WinDef.h file;
    if found, include it instead of defining WORD &amp; DWORD ourselves.
  * support url-encoded anchor links with ?with-urlencoded-anchor option
    (Daisuke Murase typester@cpan.org)
- change from version 2.1.6
  does nothing except for some bugfixes (and ignores some particularly scary
  ones that I /must/ fix soon) and adds two small features.
  * A &lt; at the end of the input is exactly the same as \&lt;(space)
  * Markdown.pl does not appear to escape \&lt;[nonwhite] sequences. Sigh.
  * Tweak the previous Markdown does not escape... commit to simply push out
    the backslash and back up to the start of the &lt;[nonwhite] sequence,
    so -fnohtml will continue to work.
  * Treat hard &lt;br/&gt; (via two spaces) as whitespace.
  * Tweak divquote handling so that two adjacent divquotes won?t die if there
    is a space between the second &gt; &amp; leading %
  * Tweak one of the list tests back to the previous behavior (I?ve put in a
    hack for list indentation, and accidentally committed the changes. Oops!)
  The features are that I now use styles for table cell alignment instead of
  align=, and that I?m using the 3-clause BSD license for this release
  (because there is one widely used closed-source license that claims that you
  can?t dynamically link with code that uses the 4-clause license. Fine.
  I?ll 3-clause this release to make the stupid GPL happy.)</changelog>
  <changelog author="mardnh@gmx.de" date="1430395201">- add build condition "fenced_code" to conditionally run configure
  with "--with-fenced-code"
  Building with this condition enables PHP markdown extra-style fenced code
  sections, where your chunks of code are surrounded by ~~~ lines instead
  of being indented 4 spaces.</changelog>
  <changelog author="mailaender@opensuse.org" date="1432209600">- add symlink with update-alternatives to un-conflict Markdown.pl</changelog>
  <changelog author="mpluskal@suse.com" date="1462104000">- Update to 2.2.0
  * no changelog provided
- Build with optflags
- Refresh discount-disable_ldconfig.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1476619200">- Update to version 2.2.1:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1486641600">- Update to version 2.2.2:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Provide virtual package markdown</changelog>
  <changelog author="mpluskal@suse.com" date="1529928000">- Update to version 2.2.3a:
  * No changelog provided
- Refresh patches:
  * discount-disable_ldconfig.patch
  * discount-fix-compile-warings.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1539777600">- Update to version 2.2.4:
  * No changelog provided
  * fixes:
    + boo#1094809 CVE-2018-11468 heap-based buffer over-read __mkd_trim_line function in mkdio.c
    + boo#1098252 CVE-2018-12495 heap-based buffer over-read via a crafted file</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1546862400">- Update changelog with references to security issues fixed</changelog>
</package>
<package pkgid="4a86b97dc2ffa0808b7f93b07779a35402941478bfd98ac27900135b2e672258" name="discover" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="3662f9a7b4c2d416d9fe6e23ebf650dbf53e08a80c3b6c56943da97902099367" name="discover" arch="src">
  <version epoch="0" ver="5.12.8" rel="lp150.7.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix showing update notification (kde#396426,kde#390322)
  * Don't try to trigger an empty transaction (kde#397759)
  * PK: wait until we have fetched the packages that dont' come from appstream (kde#397192)
  * Fix navigation after search (kde#391931)
  * Remove wrong assert
  * KNS: Fix leak of resource ratings
  * Prevent crash (kde#396564)
  * Readability
  * Fix CMakeLists.txt to work with older versions of CMake
  * Fix warning
  * Silence false positive warning on --mode
  * Proper status when removing snaps (kde#396351)
  * Properly check for pkqt
  * Use consistent spacing in the missing backends footer
  * PK: Make sure we resolve the transaction application if it fails (kde#395994)
  * KNS: don't start searches before initializing (kde#395966)
  * Report a progressing change when we finish to set up and there's nothing pending
  * Recheck fetching after we remove a backend
  * flatpak: don't crash if we get null updates (kde#394713)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
</package>
<package pkgid="ac4743492dc922407dba5f3ca0fa333fd8dcc76d447411c134ecc86674eff1bf" name="discover" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.7.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix showing update notification (kde#396426,kde#390322)
  * Don't try to trigger an empty transaction (kde#397759)
  * PK: wait until we have fetched the packages that dont' come from appstream (kde#397192)
  * Fix navigation after search (kde#391931)
  * Remove wrong assert
  * KNS: Fix leak of resource ratings
  * Prevent crash (kde#396564)
  * Readability
  * Fix CMakeLists.txt to work with older versions of CMake
  * Fix warning
  * Silence false positive warning on --mode
  * Proper status when removing snaps (kde#396351)
  * Properly check for pkqt
  * Use consistent spacing in the missing backends footer
  * PK: Make sure we resolve the transaction application if it fails (kde#395994)
  * KNS: don't start searches before initializing (kde#395966)
  * Report a progressing change when we finish to set up and there's nothing pending
  * Recheck fetching after we remove a backend
  * flatpak: don't crash if we get null updates (kde#394713)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
</package>
<package pkgid="e3d39f670422a5553cee52c71f3d5d0b0c914f454f74103efcbd16e15b73233e" name="discover-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="431df69b28dccad1c7c46b413e83b7081e0526a5284353b78f118f2b911a2977" name="discover-lang" arch="noarch">
  <version epoch="0" ver="5.12.8" rel="lp150.7.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix showing update notification (kde#396426,kde#390322)
  * Don't try to trigger an empty transaction (kde#397759)
  * PK: wait until we have fetched the packages that dont' come from appstream (kde#397192)
  * Fix navigation after search (kde#391931)
  * Remove wrong assert
  * KNS: Fix leak of resource ratings
  * Prevent crash (kde#396564)
  * Readability
  * Fix CMakeLists.txt to work with older versions of CMake
  * Fix warning
  * Silence false positive warning on --mode
  * Proper status when removing snaps (kde#396351)
  * Properly check for pkqt
  * Use consistent spacing in the missing backends footer
  * PK: Make sure we resolve the transaction application if it fails (kde#395994)
  * KNS: don't start searches before initializing (kde#395966)
  * Report a progressing change when we finish to set up and there's nothing pending
  * Recheck fetching after we remove a backend
  * flatpak: don't crash if we get null updates (kde#394713)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
</package>
<package pkgid="c052e487e7b5151d98bf5800922226edf7dfb0194a93d60f15f37ce029635ad7" name="discover-plasmoid" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="e704a92e18c54dfc1ca1d704058a163548df0a903efb20eeda4c3fd1f924da77" name="discover-plasmoid" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.7.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix showing update notification (kde#396426,kde#390322)
  * Don't try to trigger an empty transaction (kde#397759)
  * PK: wait until we have fetched the packages that dont' come from appstream (kde#397192)
  * Fix navigation after search (kde#391931)
  * Remove wrong assert
  * KNS: Fix leak of resource ratings
  * Prevent crash (kde#396564)
  * Readability
  * Fix CMakeLists.txt to work with older versions of CMake
  * Fix warning
  * Silence false positive warning on --mode
  * Proper status when removing snaps (kde#396351)
  * Properly check for pkqt
  * Use consistent spacing in the missing backends footer
  * PK: Make sure we resolve the transaction application if it fails (kde#395994)
  * KNS: don't start searches before initializing (kde#395966)
  * Report a progressing change when we finish to set up and there's nothing pending
  * Recheck fetching after we remove a backend
  * flatpak: don't crash if we get null updates (kde#394713)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
</package>
<package pkgid="0f6d18d86fd238ef8386bd5d242d2e1e4bd0d60d058929eb685a6e8825006d2d" name="diskimage-builder" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1476705600">- Initial commit. Taken from the Cloud OBS project
  * diskimage-builder-rpmlintrc: Add rpmlint file to prevent build
    failures due to the 'wrong-script-interpreter' check. It's a
    spurious warning since the interpreter is only used within the
    generated image and it does not affect the host or the package
    itself.
  * 0001-lib-Drop-shebang-from-library-scripts.patch: Add patch to
    drop the shebang from the lib/* files which are meant to be
    sourced instead of executed (fixes: 'non-executable-script')
  * 0002-elements-Drop-executable-bits-from-environment-files.patch:
    Add patch to drop the executable bit from files which are meant to
    be sourced instead of executed. (fixes: 'script-without-shebang')</changelog>
  <changelog author="mchandras@suse.de" date="1476792000">- Use addFilter instead of setBadness in the rpmlintrc file.</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 1.24.0
  * elements: pip-and-virtualenv: Add python-xml dependency
  * Trace package install in package-installs-v2
  * elements: zypper-minimal: Add ca-certificates-mozilla package
  * Improve checksum performance for images
  * Perform package install outside of debootstrap
  * Remove obsolete patches for the time being
  - 0001-lib-Drop-shebang-from-library-scripts.patch
  - 0002-elements-Drop-executable-bits-from-environment-files.patch</changelog>
  <changelog author="mchandras@suse.de" date="1482408000">- Update to version 1.26.1
  * Generate ssh-hostkeys on boot for ironic agent
  * add option to configure cloud-init to allow password authentication
  * elements: Drop unneeded DIB_INIT_SYSTEM usage
  * Replace six.iteritems() with .items()
  * Catch errors in DIB_INIT_SYSTEM export
  * DIB element to support cinder local attach/detach functionality
  * elements: Drop executable bits from environment files
  * Update sysctl-write-value to do conflict checking
  * Put MKFS_OPTS after filesystem type
  * Make dib-python use the default python for distro
  * Don't set the executable bit on dhcp-interface@.service
  * Move pip-and-virtualenv source install to 10-
  * Add install-types as pip-and-virtualenv dep
  * Allow package-installs to parse DIB_PYTHON_VERSION
  * Fix pip-and-virtualenv to work with python3
  * elements: dib-python: Add python2 as the default version for openSUSE
  * Support sysv init system used by Debian Wheezy
  * Pip install as 10- incompatible with 05-heat-cfntools
  * Recreate initramfs within loopback image
  * Fix bootloader element on ppc
  * Add ubuntu-precise support to dib-python
  * FIx the DIB_CLOUD_INIT_ALLOW_SSH_PWAUTH variable name in README file
  * Switch to openSUSE Leap 42.2 release by default
  * Install dracut-generic-config package
  * Add output image format tgz support
  * Add squashfs output image format
  * set default DIB_PYTHON_VERSION=2 for rhel7
  * Set grub timeout default
  * Dont run with VIRTUAL_ENV set</changelog>
  <changelog author="mchandras@suse.de" date="1487246400">- Update to version 1.27.0
  * Add DIB_IPA_COMPRESS_CMD option
  * ironic-agent: use /sbin for modprobe
  * move post-install.d to finalize.d
  * Bump fedora release to 25
  * Fix dhcp-all-interfaces for ubuntu-minimal xenial
  * Don't set base element path in run_functests.sh
  * Use %i instead of %I in dhcp-interface@.service
  * Remove hardcoded components
  * Set grub device in /etc/default/grub
  * Replace yaml.load() with yaml.safe_load()
  * Unify tidy up logs in lib/img-functions
  * Also check bin/ for tabs
  * Handle failure of carrier check in dhcp-all-interfaces.sh
  * Make DHCP timeout configurable
  * Run dhcp-interface@.service after network.target
  * update pkg-map entries for python3
  * dib-lint: python3 compatibility fixes
  * debootstrap: avoid duplicate network configuration
  * Remove yum chroot caching
  * Speed up chroot checking loop
  * Allow disto-specific mirror settings
  * Update hpssacli to ssacli in proliant-tools element</changelog>
  <changelog author="mchandras@suse.de" date="1488542400">- Update to version 1.28.0
  * [suse] Handle pip-and-virtualenv install for opensuse
  * pip-and-virtualenv: also handle rhel distros
  * [suse] remove --no-confirm from zypper invocation
  * gentoo: do not manually clean /tmp
  * Fix requirements update
  * Fix up doc errors
  * python-brickclient: accommodate python2/3 changes
  * Move Ubuntu specific use_tempaddr setting to ubuntu-common element
  * Fix typo in README.rst
  * yum/install-packages output cleanup
  * Preinstall pyOpenSSL
  * Target map-packages deprecation message
  * Turn down some low-value tracing output
  * Move generation of dib_[environment|args] to manifest element
  * Use strings in package-installs follow output</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Update to version 2.0.0
  * Add 2.0.0 release notes
  * Run indent checks in diskimage_builder/lib
  * Use OrderedDict for partitions instead of simple dictionary
  * Refactor: block-device partitioning cleanup
  * fix grub2 element for ubuntu xenial [lp##1627402]
  * Semi-automatic doc generation of element dependency
  * Fix up element doc generation
  * Check return of _load_state
  * block-device: change top level config from dict to list
  * Handle blank lines in element-deps
  * Don't run unit tests from run_functests.sh
  * Refactor: block-device handling (partitioning)
  * Add get_elements; preserve backwards compat for expand_dependencies
  * Fix --version display
  * Activate virtualenv in disk-image-create
  * Remove execute perm from disk-image-create
  * Move dib-run-parts into diskimage-builder
  * Move diskimage-image-create to an entry point
  * Move elements &amp; lib relative to diskimage_builder package
  * Fail on element-info error
  * Remove deploy element
  * Remove deprecated deploy-ironic element
  * Remove deprecated ironic-discoverd-ramdisk
  * Remove deprecated expand-dependencies arg
  * Remove deprecated serial-console element
  * Remove deprecated map-services
  * Add release notes for block device handling.
  * Move element-info to a standard entry-point
  * Refactor: block-device handling (local loop)
  * Convert pkg-map and svc-map copies to explicit variables
  * Add IMAGE_ELEMENT_YAML and get_image_element_array
  * Making element overriding explicit
  * For developer and low-level oriented changes please read the following thread
  - http://lists.openstack.org/pipermail/openstack-dev/2017-February/111833.html</changelog>
  <changelog author="mchandras@suse.de" date="1492776000">- Update to version 2.3.3
  * Add yum-utils as EPEL dependency
  * Skip python3-virtualenv on &lt;= trusty
  * pip-and-virtualenv : install python2 &amp; 3, and default to 2
  * Install pip with python interpreter
  * Move do_extra_package_install to run in install phase
  * Updated from global requirements
  * Unify and fix doc of several Debian and Ubuntu elements
  * Fix package-installs-v2 output
  * Basic logging for package-installs-squash
  * Use DIB_PYTHON_EXEC to run commands
  * Fix typo in pip-and-virtualenv
  * Ignore missing path in unmount_dir
  * Run dib-run-parts out of /tmp
  * Don't provide dib-run-parts
  * Add flag to disable EPEL
  * Fix code-block in README of rhel7 element
  * Fix opensuse-minimal element on non-SUSE hosts
  * Use stevedore for plugin config of block device
  * Adding aarch64 support for CentOS7
  * Have simple-init enable network.service
  * Use correct Ubuntu distro url on non-x86 arches
  * Typo fix: curent =&gt; current
  * functests: skip qcow2 generically but add specific test
  * Add default PPC block-device layout
  * Capture output in _exec_sudo
  * Fix typo in CMDLINE env var for bootloader
  * Allow ELEMENTS_DIR to be configurable
  * Use sphinx warning-is-error
  * Updated from global requirements
  * squash-package-install to use the correct python
  * Make our virtualenv source py3 safe
  * blockdevice.py: python3 fixes
  * Fix dib-init-system for Debian Jessie and Debian Stretch
  * Send custom parameters in bootloader to GRUB_CMDLINE</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 2.4.0
  * Refactor: block-device filesystem creation, mount and fstab
  * Take --params from environment
  * Refactor documentation on image creation
  * Add a test to validate we can build debian vms
  * Introduce exec_sudo command
  * Fix py3 error in block-device
  * Refactor block-device base functions.
  * Add bzip2 to test install
  * Add refactor of tree-like vs graph
  * Set LC_ALL in disk-image-create
  * Improve documentation for image creation
  * Refactor block_device: isolate the getval call
  * Refactor block_device: passing command line parameters
  * Make Gentoo package updates work more often
  * Turn off strict_id mode for Ec2 datasource
  * Clean out apt index caches at end of image build</changelog>
  <changelog author="mchandras@suse.de" date="1495713600">- Version bump to 2.4.1
  * Set manifest permissions in the image
  * Move parts of Partition creation into object
  * Split partition into it's own file
  * Move exception to it's own file (again)
  * Add weights to digraph
  * Switch debian to deb.debian.org
  * Add dracut-regenerate elements
  * Set manifests to mode 600 and owner root
  * Only unmount directories that are mounted
  * Apply setfiles on all mountpoints</changelog>
  <changelog author="mchandras@suse.de" date="1497182400">- Version bump 2.5.0
  * Disable recommended package installations for zypper-minimal
  * Use networkx for digraph
  * Various internal fixes
  * Adding unit testing for configuration
  * Produce API documentation</changelog>
  <changelog author="mchandras@suse.de" date="1497355200">- Version bump to 2.6.0
  * PPC bootloader; install to boot partition
  * Pass all blockdevices to bootloader
  * Move global mount tracking into state
  * Use global state to check for duplicate fs labels
  * Remove 'state' argument from later cmd_* calls
  * Use picked nodes for later cmd_* calls
  * Don't make image &amp; loopdev functions static
  * Add env var to dump config graph
  * Move ppc block-device default to right $ARCH
  * Update tracing in block_device_create_config_file
  * Pad state dump
  * Adjust package mapping for SUSE family
  * Drop support for Ubuntu precise
  * Adjust package installation for openSUSE
  * Refactor mount-point sorting
  * Remove dracut-network element
  * Remove ccache
  * Test openSUSE 42.2/42.3 image builds
  * Add state object, rename "results", add unit tests
  * allow uninstalls to fail on gentoo
  * Refactor: use lazy logging
  * drop deprecated map-services/packages from zypper element
  * dhcp-all-interfaces.sh - Add support for InfiniBand interface DHCP</changelog>
  <changelog author="mchandras@suse.de" date="1500033600">- Version bump to 2.6.1
  * On suse the python2 dev package is python-devel
  * Move ironic-agent test to fedora-minimal
  * Start at using CI mirrors for fedora/centos
  * Use local mirror for ubuntu-minimal jobs
  * Move apt-sources to ubuntu-minimal / move debian to skip list
  * Sync after writing partition table
  * Install systemd earlier for Stretch
  * Fix mkfs failure when loop device is not ready</changelog>
  <changelog author="mchandras@suse.de" date="1500897600">- Version bump to 2.7.0
  * Move setfiles to outside chroot with runcon
  * doc: supported_distros: Add openSUSE Leap 42.2/3 and Tumbleweed
  * Add -m flag to setfiles for Fedora 26
  * yum-minimal: pre-install coreutils
  * Force install during pip-and-virtualenv
  * Fix latest-limit command line
  * opensuse-minimal: install glibc-locale
  * elements: openstack-ci-mirrors: Use openSUSE mirrors for gating jobs
  * Remove DIB_[DISTRO]_DISTRIBUTION_MIRROR
  * doc: Switch from oslosphinx to openstackdocstheme
  * The correct option for label name in fat and vfat is '-n'
  * zypper-minimal: No point in preserving the environment here
  * Remove additional Bumblebee repository for opensuse element
  * Enable console during kernel boot on Power
  * fix readme.rst to reflect correct environment variable
  * Add symlink test for resolv.conf restore
  * pip-and-virtualenv: Install python3 on openSUSE
  * Support for Cloud Images on ppc64le for rhel7 and centos7
  * bindep.txt: Exclude gnupg2 package on openSUSE
  * Avoid hanging endlessly on unreachable cache urls
  * elements: pip-and-virtualenv: Use common packages for openSUSE
  * Remove mirror create
  * Remove centos and rhel elements
  * Updated from global requirements
  * dib-lint: Ignore editor temp files for linting run
  * Fix mkfs use wrong label option for vfat
  * Use the dib python to do cleanup
  * Replace architecture-emulation-binaries with qemu-debootstrap</changelog>
  <changelog author="mchandras@suse.de" date="1501070400">- Version bump to 2.7.1
  * elements: zypper-minimal: Install tar package
  * zypper: Clean caches and don't cache packages locally</changelog>
  <changelog author="mchandras@suse.de" date="1502712000">- Version bump to 2.8.0
  * Move selinux packages to redhat-common
  * Use SELinuxfs to check selinux status
  * Switch openSUSE to 42.3 by default</changelog>
  <changelog author="mchandras@suse.de" date="1512388800">- Version bump to 2.9.0
  * Add initramfs-tools for ubuntu-minimal
  * Create /etc/machine-id for fedora
  * Use latest Fedora .qcow URL
  * Updated from global requirements
  * Add missing package dependency for yaml
  * Mention the need of dracut-regenerate element
  * Move the ordering of the dracut regenerate command
  * Fix cylical systemd config for dhcp-all-interfaces
  * LVM support for dib-block-device
  * Increase timeout for removal
  * Add netbase to ensure /etc/protocols is placed for debian
  * Add kpartx as a requirement to build images
  * Clear up debian element documentation
  * Bump fedora/fedora-minimal DIB_RELEASE 26
  * Allow users to specify partition type in the MBR PTE
- Fix env-script-interpreter rpmlint warnings.</changelog>
  <changelog author="mchandras@suse.de" date="1520596800">- Version bump to 2.11.0
  * Install systemd earlier for Ubuntu Bionic
  * update gentoo vars for new profile and python
  * Set default label for XFS disks
  * Don't install dmidecode on Fedora ppc64le
  * Updated from global requirements
  * Add support for Fedora 27, remove EOL Fedora 25
  * Don't fstrim vfat partitions
  * Remove RH1 check OVB jobs from configuration
  * upgrade pip before using -c option
  * Correct link address
  * Updated from global requirements
  * Add SUSE Mapping
  * Revert "Dont install python-pip for py3k"
  * Adding mapping for SUSE package
  * Check source-repository-* files for trailing newline
  * ironic-agent: don't remove make
  * Remove architecture rules on lshw dependency in ironic-agent
  * zypper: fix package removal
  * Avoid tox_install.sh for constraints support
  * Fix wrong epel-release-7* package URL
  * Add the groundwork for musl profile support
  * Enable support for Gentoo overlays
  * Pre-install curl
  * Install fedora-gpg-keys for F27
  * Make preinstall.d more deterministic
  * Use EPEL for debootstrap on centos
  * Fix /dev/pts mount options handling
  * Make python changes more reliable
  * Remove setting of version/release from releasenotes
  * elements: zypper-minimal: Refresh repositories where necessary
  * Updated from global requirements
  * elements: Respect devpts mount options
  * Dont install python-pip for py3k
  * Enable gentoo in pip-and-virtualenv element
  * Add zipl element as s390x architecture bootloader
  * diskimage_builder: lib: common-functions: Fix options for devpts mount
  * Move to a common lock-file directory
  * Create rescue user on ironic agent
  * Use -t devpts for /dev/pts mounts
  * Dont install python-virtualenv for py3k in deb
  * Import legacy playbooks
  * Add debian minimal requirement for arm64
  * Fix grub2 dependency on arm64
  * Remove dd from LVM element
  * Update Gentoo element for element changes
  * Update proliant-tools to support Gen10 Proliant servers
  * Move fstrim to block device layer
  * Actually sort mount-point list
  * Change to install a package in 'proliant-tools'
  * Clear /etc/machine-id to avoid duplicate machine-ids
  * Add timestamp output filter</changelog>
  <changelog author="mchandras@suse.de" date="1525089600">- Version bump to 2.14.1
  * Fix epel element for centos-minimal
  * Revert "debootstrap: Call update-initramfs explicitly"
  * Remove installed packages before pip install
  * Don't only install python3-virtualenv
  * Don't use -e to test for what might be broken symlink
  * add lower-constraints job
  * Set the dhclient timeout to match DIB_DHCP_TIMEOUT
  * Formalise saving of /etc/resolv.conf
  * Restore tracing on exit points of block_device_create_config_file
  * delete unused module
  * debootstrap: Call update-initramfs explicitly
  * Change the GENTOO_PORTAGE_CLEANUP variable default
  * Fix element-provides in debian element
  * Revert "Remove tripleo jobs"
  * enable systemd profile for Gentoo
  * install sudo in the devuser element
  * Fix default partition type
  * Remove tripleo jobs
  * remove portage git directory
  * Updated from global requirements
  * Updated from global requirements
  * proliant-tools: add net-tools package to support hpsum utility
  * Make the build reproducible
  * Updated from global requirements
  * secondary architectures use different url
  * Fix for rhel7 iso image creation.
  * Fix for passing user defined value for satellite cert for rhel-common.
  * arm64: use HWE kernel and fix console
  * Choose appropriate bootloader for block-device
  * Add block-device defaults
  * Fail if two elements provide the same thing
  * GPT partitioning support
  * update Gentoo Hardened profiles (now stable)
  * Checking link status according to DIB_DHCP_TIMEOUT
  * Remove some redundant indents
  * Update Fedora defaults to 27
  * zypper-minimal: Set default locale env to C.UTF-8
  * Clean up dib-python symlink</changelog>
  <changelog author="mchandras@suse.de" date="1528372800">- Version bump to 2.15.1 (bsc#1097115)
  * elements: pip-and-virtualenv: Handle openSUSE Leap 15
  * Allow to rebuild arbitrary images
  * Replace the ubuntu-minimal trusty test with a bionic one
  * Remove non-maintained ubuntu-core element
  * elements: zypper-minimal: Add support for openSUSE Leap 15.X
  * Add Ubuntu 18.04 support
  * Remove duplicate GRUB command line entry
  * rpm-distro: set the contentdir yum var
  * Trivial: update url to new url
  * Fixes add-apt-keys in dpkg element
  * Add pip cache cleanup to pip-and-virtualenv
  * pip-and-virtualenv: fix install-pip when centos-release-openstack is enabled
  * Stop using slave_scripts/install-distro-packages.sh</changelog>
</package>
<package pkgid="706d5323514c6efe1710efd4248df49d94faa9a20bb24865d2ae78e1901f4411" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="lp150.2.3.1"/>
  <changelog author="lmichnovic@suse.cz" date="1181131200">- renamed lib to libdjvulibre15 according to Shared Library
  Packaging Policy
- splitted of devel package
- fixed calling ldconfig in post scripts</changelog>
  <changelog author="lmichnovic@suse.cz" date="1181563200">- fixed djvulibre-devel's Requires with %{version}; [#282833]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1184328000">- added trailing semicolon in desktop file (semicolon.patch)
- splitted off djview3 (Qt3) to make possible have alternative
  djview4 (Qt4) package</changelog>
  <changelog author="lmichnovic@suse.cz" date="1189425600">- moved desktop file to djview3 subpackage [#307485]</changelog>
  <changelog author="lmichnovic@suse.cz" date="1197288000">- update to version 3.5.20
  obsoletes semicolon.patch, strip.patch
  * Csepdjvu handle gsdjvu hyperlink comments.
  * Djvudigital therefore handles hyperlinks.</changelog>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="14571d526bbbefa2d5ab95eccc490061439147559f4ddc6ae7f022d408bf1686" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="35f5c136b4c2f237b73e51dae696419d85f6667ae844d5d59b3b5e0dbd2a8de2" name="djvulibre-doc" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
</package>
<package pkgid="2a0b26682ca7ee744f38a7dc67149c9a26257957523ae64d12ac61db58b45b6b" name="dkgpg" arch="src">
  <version epoch="0" ver="1.1.3" rel="lp150.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1516017600">- Initial packaging of version 1.0.4</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to version 1.0.5
  * added secure memory allocation from libgcrypt for some parts
  * dkg-verify: added options "-f" and "-t" for a validity period
  * added simple initalization procedure for memory locking
  * added basic check on signature strength in parse_signature()
  * added some basic checks on key strength in parse_public_key()
  * added check for revocation signatures in parse_public_key()
  * dkg-encrypt: added option "-z" for improved privacy (zero key ID)
  * dkg-verify: added validity checks on key and signature
  * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib)
  * added option "-U" for dkg-keysign (policy URI)
  * added option "-r" for dkg-keysign (revocation signature)
  * added option "-r" for dkg-keycheck (support for RSA keys)
  * added program dkg-keysign for creating certification signatures
  * dkg-decrypt: removed support for not integrity protected messages
  * dkg-keycheck: added test for small/same k in DSA signatures
  * dkg-refresh: added cache for very strong randomness
- Use https instead of http</changelog>
  <changelog author="jengelh@inai.de" date="1518264000">- Trim/compact long description for size, and wrap at 70 cols.</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to version 1.0.6:
  * dkg-keysign: added option "-k" (keyring with external keys)
  * dkg-encrypt: added option "-k" (keyring with external keys)
  * dkg-verify: added option "-k" (keyring with external keys)
  * dkg-keycheck: added option "-k" (keyring with external keys)
  * dkg-keycheck: added output of allowed external revocation keys
  * dkg-encrypt: added option "-s" to select appropriate subkey
  * dkg-encrypt: renamed option "-z" to "-t" for convenience
  * dkg-keysign: include only exportable signatures to output
  * check and set strict permissions (0600) for private key file
  * dkg-sign: added option "-U" (policy URI) and improved manpage
  * dkg-refresh: support generic verification and public key parsing
  * dkg-keysign: added options "-1" through "-3" (validation level)
  * dkg-keysign: added option "-u" (select user IDs) for CLT18
  * dkg-keysign: support generic verification and public key parsing
  * dkg-verify: support generic verification and public key parsing
  * dkg-encrypt: support generic encryption and public key parsing
  * dkg-generate: added no-modify key server preferences (0x80)
  * improved error handling for unrecognized OpenPGP (sub)packets
  * dkg-keycheck: changed semantics of option "-r" (reduce subkeys)
  * dkg-keycheck: uses new public-key block parser from LibTMCG
  * new default domain parameter set (CRS) due to LibTMCG changes
  * raised the requirement of libgcrypt version to &gt;= 1.7.0</changelog>
  <changelog author="kbabioch@suse.com" date="1531137600">- Update to 1.0.7:
  * Small improvments due to the new OpenPGP structures from libTMCG
  * "-k" option has been added to further programs
  * OpenPGP cleartext signatures can be generated with the "-t" option
  * Output of potentially malicious user IDs has been sanitized in
    dkg-keycheck, dkg-keyinfo, and dkg-keysign
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to version 1.0.8:
    First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637
    and Werner Koch's draft RFC 4880bis) has been added by relying on the
    most recent version of LibTMCG. The threshold signature scheme and the
    threshold encryption are still limited to finite field cryptography
    (i.e. DSA and ElGamal). Moreover, the programs generate and recognize
    a few other new OpenPGP features (e.g. issuer fingerprint subpackets)
    from RFC 4880bis. Compressed messages are now decompressed by the
    program dkg-decrypt using zlib Compression Library (and optionally by
    library routines from libbzip2). This completes DKGPG's compatibility
    with other OpenPGP software, however, the prefered compression algorithm
    (i.e. "no compression") in self-signatures of generated keys is kept
    for now. Support for symmetric-key decryption by dkg-decrypt has been
    added too. The program dkg-verify now reads the signature from a file,
    if option "-s" is used. To keep track of later protocol changes, all
    interactive programs include a version identifier in their common ID of
    the reliable broadcast channel. Thus programs from previous releases
    will not communicate with those of this release. With the new programs
    dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature
    can be generated and verified, respectively. Last but not least, by the
    new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign,
    dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too.
    The README file contains a configuration sample showing how to replace
    classic PGP by DKGPG in the famous mail user agent mutt based on this
    option. Please note that this feature is experimental and semantics
    may be changed later.
- Added new build requirements:
  * zlib
  * bzip2</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.0.9
    This release improves the possibilities of DKGPG further. With the new
    programs dkg-adduid and dkg-revuid an user ID can be added and revoked,
    respectively. The program dkg-revoke now supports a human-readable
    reason for revocation (by option "-R") and dkg-decrypt verifies an
    included signature according to a given key ring (option "-k"). Last
    but not least, by the program dkg-addrevoker an external revocation
    key can be specified.</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to version 1.1.0:
    This release supports Authenticated Encryption with Associated Data (AEAD)
    in accordance to RFC 4880bis (draft); this can be enforced with the new
    added option "-a" when  dkg-(d)encrypt is used. For using domain parameters,
    as described in RFC 7919, one should specify the new option "-r", when
    dkg-gencrs is used. Last, for key generation (dkg-generate) the timestamp
    option was added ( "--timestamping") which sets a key usage flag.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1556452800">- Update to version 1.1.1:
    Some small improvements have been applied for dkg-generate: Two new
    options ("-u" and "-N") allow providing the initial user ID and to
    disable the passphrase at command line. Moreover, since this release
    dkg-timestamp and dkg-timestamp-verify require a special key usage flag
    from recent RFC 4880bis draft to select so-called timestamping keys.
    Finally, the synchronization time of the internally used broadcast
    protocol was reduced to a more reasonable amount and in dkg-decrypt the
    detection of end of data for message and decryption shares was changed.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.1.2:
    This release adds a lot of features to some programs: two new options
    ("-K" and "-f") allow dkg-keysign to read the certification key from a
    keyring instead of a single key block file. Moreover, with option "-a"
    an interactive confirmation by the user is required for each signature.
    Passive support of V5 keys (cf. draft RFC 4880bis) has been added for
    all programs, however, dkg-generate still generates V4 keys only,
    because this new feature of the draft is not widely spread. There is
    also a new encryption capability: an empty KEYSPEC tells dkg-encrypt to
    create a symmetric-key encrypted session key, i.e., the user has to
    supply a passphrase for encryption and decryption without any public-key
    cryptography involved. Last but not least, two bugs have been fixed:
    First, dkg-decrypt failed on many ZIP-compressed OpenPGP messages with
    "ZLIB ERROR: -3 invalid block type" due to a bug in decompression logic.
    Second, dkg-decrypt failed in a special case of symmetric-key encrypted
    session keys. Finally, the non-installing program dkg-fuzzer (generates
    fuzzy samples of somehow corrupted OpenPGP stuctures) has been added.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1563796800">- Update to version 1.1.3:
    This is a bugfix release that includes only three minor improvements: a
    direct-key signature (0x1f) for the primary key is added by default such
    that restricting key servers (e.g. keys.openpgp.org) can deliver a
    cryptographically checkable key without verification of any included
    user ID or without appended subkey. The command line interface of
    dkg-decrypt has been improved in order to give users an easy access to
    the symmetric-key decryption mode. An additional option ("-5") for
    dkg-sign allows to generate V5 signatures (cf. draft RFC 4880bis).</changelog>
</package>
<package pkgid="f7bdecf5886f8eb5d1fc1c87715566258dc9f7766b98680cd7463ad3ddf28c55" name="dkgpg" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp150.2.3.1"/>
  <changelog author="kbabioch@suse.com" date="1516017600">- Initial packaging of version 1.0.4</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Update to version 1.0.5
  * added secure memory allocation from libgcrypt for some parts
  * dkg-verify: added options "-f" and "-t" for a validity period
  * added simple initalization procedure for memory locking
  * added basic check on signature strength in parse_signature()
  * added some basic checks on key strength in parse_public_key()
  * added check for revocation signatures in parse_public_key()
  * dkg-encrypt: added option "-z" for improved privacy (zero key ID)
  * dkg-verify: added validity checks on key and signature
  * dkg-keycheck: added ROCA vulnerability detector (Infineon RSALib)
  * added option "-U" for dkg-keysign (policy URI)
  * added option "-r" for dkg-keysign (revocation signature)
  * added option "-r" for dkg-keycheck (support for RSA keys)
  * added program dkg-keysign for creating certification signatures
  * dkg-decrypt: removed support for not integrity protected messages
  * dkg-keycheck: added test for small/same k in DSA signatures
  * dkg-refresh: added cache for very strong randomness
- Use https instead of http</changelog>
  <changelog author="jengelh@inai.de" date="1518264000">- Trim/compact long description for size, and wrap at 70 cols.</changelog>
  <changelog author="kbabioch@suse.com" date="1521633600">- Update to version 1.0.6:
  * dkg-keysign: added option "-k" (keyring with external keys)
  * dkg-encrypt: added option "-k" (keyring with external keys)
  * dkg-verify: added option "-k" (keyring with external keys)
  * dkg-keycheck: added option "-k" (keyring with external keys)
  * dkg-keycheck: added output of allowed external revocation keys
  * dkg-encrypt: added option "-s" to select appropriate subkey
  * dkg-encrypt: renamed option "-z" to "-t" for convenience
  * dkg-keysign: include only exportable signatures to output
  * check and set strict permissions (0600) for private key file
  * dkg-sign: added option "-U" (policy URI) and improved manpage
  * dkg-refresh: support generic verification and public key parsing
  * dkg-keysign: added options "-1" through "-3" (validation level)
  * dkg-keysign: added option "-u" (select user IDs) for CLT18
  * dkg-keysign: support generic verification and public key parsing
  * dkg-verify: support generic verification and public key parsing
  * dkg-encrypt: support generic encryption and public key parsing
  * dkg-generate: added no-modify key server preferences (0x80)
  * improved error handling for unrecognized OpenPGP (sub)packets
  * dkg-keycheck: changed semantics of option "-r" (reduce subkeys)
  * dkg-keycheck: uses new public-key block parser from LibTMCG
  * new default domain parameter set (CRS) due to LibTMCG changes
  * raised the requirement of libgcrypt version to &gt;= 1.7.0</changelog>
  <changelog author="kbabioch@suse.com" date="1531137600">- Update to 1.0.7:
  * Small improvments due to the new OpenPGP structures from libTMCG
  * "-k" option has been added to further programs
  * OpenPGP cleartext signatures can be generated with the "-t" option
  * Output of potentially malicious user IDs has been sanitized in
    dkg-keycheck, dkg-keyinfo, and dkg-keysign
- Applied spec-cleaner</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to version 1.0.8:
    First of all, passive support for ECDSA, ECDH, and EdDSA (cf. RFC 6637
    and Werner Koch's draft RFC 4880bis) has been added by relying on the
    most recent version of LibTMCG. The threshold signature scheme and the
    threshold encryption are still limited to finite field cryptography
    (i.e. DSA and ElGamal). Moreover, the programs generate and recognize
    a few other new OpenPGP features (e.g. issuer fingerprint subpackets)
    from RFC 4880bis. Compressed messages are now decompressed by the
    program dkg-decrypt using zlib Compression Library (and optionally by
    library routines from libbzip2). This completes DKGPG's compatibility
    with other OpenPGP software, however, the prefered compression algorithm
    (i.e. "no compression") in self-signatures of generated keys is kept
    for now. Support for symmetric-key decryption by dkg-decrypt has been
    added too. The program dkg-verify now reads the signature from a file,
    if option "-s" is used. To keep track of later protocol changes, all
    interactive programs include a version identifier in their common ID of
    the reliable broadcast channel. Thus programs from previous releases
    will not communicate with those of this release. With the new programs
    dkg-timestamp and dkg-timestamp-verify a OpenPGP timestamp signature
    can be generated and verified, respectively. Last but not least, by the
    new option "-y" some programs (dkg-generate, dkg-decrypt, dkg-sign,
    dkg-keysign, and dkg-timestamp) will work with regular OpenPGP keys too.
    The README file contains a configuration sample showing how to replace
    classic PGP by DKGPG in the famous mail user agent mutt based on this
    option. Please note that this feature is experimental and semantics
    may be changed later.
- Added new build requirements:
  * zlib
  * bzip2</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1542024000">- Update to version 1.0.9
    This release improves the possibilities of DKGPG further. With the new
    programs dkg-adduid and dkg-revuid an user ID can be added and revoked,
    respectively. The program dkg-revoke now supports a human-readable
    reason for revocation (by option "-R") and dkg-decrypt verifies an
    included signature according to a given key ring (option "-k"). Last
    but not least, by the program dkg-addrevoker an external revocation
    key can be specified.</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544443200">- Update to version 1.1.0:
    This release supports Authenticated Encryption with Associated Data (AEAD)
    in accordance to RFC 4880bis (draft); this can be enforced with the new
    added option "-a" when  dkg-(d)encrypt is used. For using domain parameters,
    as described in RFC 7919, one should specify the new option "-r", when
    dkg-gencrs is used. Last, for key generation (dkg-generate) the timestamp
    option was added ( "--timestamping") which sets a key usage flag.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1556452800">- Update to version 1.1.1:
    Some small improvements have been applied for dkg-generate: Two new
    options ("-u" and "-N") allow providing the initial user ID and to
    disable the passphrase at command line. Moreover, since this release
    dkg-timestamp and dkg-timestamp-verify require a special key usage flag
    from recent RFC 4880bis draft to select so-called timestamping keys.
    Finally, the synchronization time of the internally used broadcast
    protocol was reduced to a more reasonable amount and in dkg-decrypt the
    detection of end of data for message and decryption shares was changed.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1559476800">- Update to version 1.1.2:
    This release adds a lot of features to some programs: two new options
    ("-K" and "-f") allow dkg-keysign to read the certification key from a
    keyring instead of a single key block file. Moreover, with option "-a"
    an interactive confirmation by the user is required for each signature.
    Passive support of V5 keys (cf. draft RFC 4880bis) has been added for
    all programs, however, dkg-generate still generates V4 keys only,
    because this new feature of the draft is not widely spread. There is
    also a new encryption capability: an empty KEYSPEC tells dkg-encrypt to
    create a symmetric-key encrypted session key, i.e., the user has to
    supply a passphrase for encryption and decryption without any public-key
    cryptography involved. Last but not least, two bugs have been fixed:
    First, dkg-decrypt failed on many ZIP-compressed OpenPGP messages with
    "ZLIB ERROR: -3 invalid block type" due to a bug in decompression logic.
    Second, dkg-decrypt failed in a special case of symmetric-key encrypted
    session keys. Finally, the non-installing program dkg-fuzzer (generates
    fuzzy samples of somehow corrupted OpenPGP stuctures) has been added.</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1563796800">- Update to version 1.1.3:
    This is a bugfix release that includes only three minor improvements: a
    direct-key signature (0x1f) for the primary key is added by default such
    that restricting key servers (e.g. keys.openpgp.org) can deliver a
    cryptographically checkable key without verification of any included
    user ID or without appended subkey. The command line interface of
    dkg-decrypt has been improved in order to give users an easy access to
    the symmetric-key decryption mode. An additional option ("-5") for
    dkg-sign allows to generate V5 signatures (cf. draft RFC 4880bis).</changelog>
</package>
<package pkgid="50705d8d76e59aa12505c26a3c8fdc306d910ec4d60b9fccb00702de2986f6d5" name="dmidecode" arch="src">
  <version epoch="0" ver="3.1" rel="lp150.3.3.1"/>
  <changelog author="coolo@suse.de" date="1241524800">- obsolete pmtools, but do not provide it as it's not a rename</changelog>
  <changelog author="jdelvare@suse.de" date="1283947200">- dmidecode-fix-makefile-for-GNU-make-3.82.patch: Drop BSD make
  command in Makefile, as GNU make 3.82 chokes on it.</changelog>
  <changelog author="jdelvare@suse.de" date="1295524800">- Update to upstream version 2.11:
  * Adds support for SMBIOS 2.6.1 and 2.7. This includes new
    enumerated values for recent hardware.
  * Obsoletes dmidecode-fix-makefile-for-GNU-make-3.82.patch.
  * Various minor fixes and clean-ups.</changelog>
  <changelog author="jdelvare@suse.de" date="1295956800">- dmidecode-fix-memory-array-location-overrun.patch: Fix boundary
  checks of memory array location codes (DMI type 16).</changelog>
  <changelog author="jdelvare@suse.de" date="1302696000">- dmidecode-add-SMBIOS-2_7_1-support.patch: Add enumerated values
  from SMBIOS 2.7.1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1548763200">- dmidecode-extensions-to-memory-device-type-17.patch: dmidecode:
  Extensions to Memory Device (Type 17) (FATE#326830 bsc#1120149)
- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (FATE#326830
  bsc#1120149)</changelog>
</package>
<package pkgid="1a262e5b3f39ce95c12c4f365be3659a178867701d520271f591d4e28c09c816" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.1" rel="lp150.3.3.1"/>
  <changelog author="coolo@suse.de" date="1241524800">- obsolete pmtools, but do not provide it as it's not a rename</changelog>
  <changelog author="jdelvare@suse.de" date="1283947200">- dmidecode-fix-makefile-for-GNU-make-3.82.patch: Drop BSD make
  command in Makefile, as GNU make 3.82 chokes on it.</changelog>
  <changelog author="jdelvare@suse.de" date="1295524800">- Update to upstream version 2.11:
  * Adds support for SMBIOS 2.6.1 and 2.7. This includes new
    enumerated values for recent hardware.
  * Obsoletes dmidecode-fix-makefile-for-GNU-make-3.82.patch.
  * Various minor fixes and clean-ups.</changelog>
  <changelog author="jdelvare@suse.de" date="1295956800">- dmidecode-fix-memory-array-location-overrun.patch: Fix boundary
  checks of memory array location codes (DMI type 16).</changelog>
  <changelog author="jdelvare@suse.de" date="1302696000">- dmidecode-add-SMBIOS-2_7_1-support.patch: Add enumerated values
  from SMBIOS 2.7.1.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jdelvare@suse.de" date="1366804800">- Update to upstream version 2.12:
  * Adds support for SMBIOS 2.8. This includes new enumerated
    values for recent hardware.
  * Obsoletes dmidecode-add-SMBIOS-2_7_1-support.patch and
    dmidecode-fix-memory-array-location-overrun.patch.
  * Various minor fixes and clean-ups.
- dmidecode-1.173-drop-cast.patch: Drop unneeded and possibly
  dangerous cast.
- dmidecode-1.175-fix-SMBIOS-2.8.0.patch: Fix support for new
  processor upgrade types (DMI type 4) and new memory device type
  (DMI type 17.)</changelog>
  <changelog author="guillaume@opensuse.org" date="1366977600">- Enable build for ARM</changelog>
  <changelog author="jdelvare@suse.de" date="1389614400">- dmidecode-1.176-SMBIOS-2.8-is-supported.patch: Bump
  SUPPORTED_SMBIOS_VER so that SMBIOS 2.8 implementations don't
  trigger a warning.
- dmidecode-1.177-decode-pcie3-slot-id.patch: Decode ID of PCI
  Express 3 slots (DMI type 9.)
  https://savannah.nongnu.org/bugs/?40178</changelog>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1548763200">- dmidecode-extensions-to-memory-device-type-17.patch: dmidecode:
  Extensions to Memory Device (Type 17) (FATE#326830 bsc#1120149)
- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (FATE#326830
  bsc#1120149)</changelog>
</package>
<package pkgid="9afafff30716cb88d15971959849f8d043627e60db8ae22c71347bf07affcc63" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.78" rel="lp150.2.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1415534400">- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)</changelog>
  <changelog author="nemysis@gmx.ch" date="1419422400">- Update to 2.72, announce message:
    Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
    Add support for "ipsets" in *BSD, using pf. Thanks to
    Sven Falempim for the patch.
    Fix race condition which could lock up dnsmasq when an
    interface goes down and up rapidly. Thanks to Conrad
    Kostecki for helping to chase this down.
    Add DBus methods SetFilterWin2KOption and SetBogusPrivOption
    Thanks to the Smoothwall project for the patch.
    Fix failure to build against Nettle-3.0. Thanks to Steven
    Barth for spotting this and finding the fix.
    When assigning existing DHCP leases to intefaces by comparing
    networks, handle the case that two or more interfaces have the
    same network part, but different prefix lengths (favour the
    longer prefix length.) Thanks to Lung-Pin Chang for the
    patch.
    Add a mode which detects and removes DNS forwarding loops, ie
    a query sent to an upstream server returns as a new query to
    dnsmasq, and would therefore be forwarded again, resulting in
    a query which loops many times before being dropped. Upstream
    servers which loop back are disabled and this event is logged.
    Thanks to Smoothwall for their sponsorship of this feature.
    Extend --conf-dir to allow filtering of files. So
  - -conf-dir=/etc/dnsmasq.d,\*.conf
    will load all the files in /etc/dnsmasq.d which end in .conf
    Fix bug when resulted in NXDOMAIN answers instead of NODATA in
    some circumstances.
    Fix bug which caused dnsmasq to become unresponsive if it
    failed to send packets due to a network interface disappearing.
    Thanks to Niels Peen for spotting this.
    Fix problem with --local-service option on big-endian platforms
    Thanks to Richard Genoud for the patch.
- Add dnsmasq-rpmlintrc, for false positive scripts and symlink
- Add BuildRequires for dos2unix
- Use sed instead of simple patch group_and_isc.patch</changelog>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
</package>
<package pkgid="6b9270e852a9385c90dad28c5e20367c41ea673d3aa73eb507772e73d86d7e85" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp150.2.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1415534400">- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)</changelog>
  <changelog author="nemysis@gmx.ch" date="1419422400">- Update to 2.72, announce message:
    Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
    Add support for "ipsets" in *BSD, using pf. Thanks to
    Sven Falempim for the patch.
    Fix race condition which could lock up dnsmasq when an
    interface goes down and up rapidly. Thanks to Conrad
    Kostecki for helping to chase this down.
    Add DBus methods SetFilterWin2KOption and SetBogusPrivOption
    Thanks to the Smoothwall project for the patch.
    Fix failure to build against Nettle-3.0. Thanks to Steven
    Barth for spotting this and finding the fix.
    When assigning existing DHCP leases to intefaces by comparing
    networks, handle the case that two or more interfaces have the
    same network part, but different prefix lengths (favour the
    longer prefix length.) Thanks to Lung-Pin Chang for the
    patch.
    Add a mode which detects and removes DNS forwarding loops, ie
    a query sent to an upstream server returns as a new query to
    dnsmasq, and would therefore be forwarded again, resulting in
    a query which loops many times before being dropped. Upstream
    servers which loop back are disabled and this event is logged.
    Thanks to Smoothwall for their sponsorship of this feature.
    Extend --conf-dir to allow filtering of files. So
  - -conf-dir=/etc/dnsmasq.d,\*.conf
    will load all the files in /etc/dnsmasq.d which end in .conf
    Fix bug when resulted in NXDOMAIN answers instead of NODATA in
    some circumstances.
    Fix bug which caused dnsmasq to become unresponsive if it
    failed to send packets due to a network interface disappearing.
    Thanks to Niels Peen for spotting this.
    Fix problem with --local-service option on big-endian platforms
    Thanks to Richard Genoud for the patch.
- Add dnsmasq-rpmlintrc, for false positive scripts and symlink
- Add BuildRequires for dos2unix
- Use sed instead of simple patch group_and_isc.patch</changelog>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
</package>
<package pkgid="6feadea1a919e260a5cf2ef40cc4d3d86f52ff911c727a350f31c24f01459a84" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp150.2.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1415534400">- fix logging, PrivateDevices=yes kills it (bnc#902511, bnc#904537)</changelog>
  <changelog author="nemysis@gmx.ch" date="1419422400">- Update to 2.72, announce message:
    Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
    Add support for "ipsets" in *BSD, using pf. Thanks to
    Sven Falempim for the patch.
    Fix race condition which could lock up dnsmasq when an
    interface goes down and up rapidly. Thanks to Conrad
    Kostecki for helping to chase this down.
    Add DBus methods SetFilterWin2KOption and SetBogusPrivOption
    Thanks to the Smoothwall project for the patch.
    Fix failure to build against Nettle-3.0. Thanks to Steven
    Barth for spotting this and finding the fix.
    When assigning existing DHCP leases to intefaces by comparing
    networks, handle the case that two or more interfaces have the
    same network part, but different prefix lengths (favour the
    longer prefix length.) Thanks to Lung-Pin Chang for the
    patch.
    Add a mode which detects and removes DNS forwarding loops, ie
    a query sent to an upstream server returns as a new query to
    dnsmasq, and would therefore be forwarded again, resulting in
    a query which loops many times before being dropped. Upstream
    servers which loop back are disabled and this event is logged.
    Thanks to Smoothwall for their sponsorship of this feature.
    Extend --conf-dir to allow filtering of files. So
  - -conf-dir=/etc/dnsmasq.d,\*.conf
    will load all the files in /etc/dnsmasq.d which end in .conf
    Fix bug when resulted in NXDOMAIN answers instead of NODATA in
    some circumstances.
    Fix bug which caused dnsmasq to become unresponsive if it
    failed to send packets due to a network interface disappearing.
    Thanks to Niels Peen for spotting this.
    Fix problem with --local-service option on big-endian platforms
    Thanks to Richard Genoud for the patch.
- Add dnsmasq-rpmlintrc, for false positive scripts and symlink
- Add BuildRequires for dos2unix
- Use sed instead of simple patch group_and_isc.patch</changelog>
  <changelog author="nemysis@gmx.ch" date="1419508800">- Remove from spec group_and_isc.patch, forgotten in previous commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1419854400">- Fix symlink of rcFOO to /usr/sbin/service, resolving a dangling
  symlink lint warning (and remove the same from rpmlintrc).</changelog>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
</package>
<package pkgid="b968ddf00954862dbad244e60ce7efb4f7fa0c5ad4dbcd7a7a849bf20bad535c" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="1d076de74b72dbbb73d55a0172dac8f6224e0f2a2e710cc11fde20a7fd73f5be" name="docker" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="52241a81563d9202e0606d9a3e4c40bb13d62d843608e51ff152e05aab18730f" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.0_ce" rel="lp150.5.9.1"/>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="44adfb4f39d87aa57d48bc837dc786df249512953ad1fe9e3b80cbf16d4352a4" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.1_ce" rel="lp150.5.13.1"/>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
</package>
<package pkgid="94b43c9075158a89984ddddf8ded3217af43ce80a00590d4ed25c92820beca58" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.17.2"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="f30be70071f8cc0dd620f7e1d439edb1376408e050d79cd135b53764853345ab" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.17.2"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="5680706ea0c768320dd05742171d7a9dfdc43099fa6272dc69a98a2bb75d4fd2" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.20.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="16d8eee9d9282394a96df1b1aaba369bcf772e4b60c15641615efd5bc56ad6d4" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.20.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="f4c7244aef455c18605965cc725b9e83d5740161272ac2dc78d911d4374dd51d" name="docker" arch="src">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.23.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="8405a7f2c38cd608dd7677c684a071679b163e3624d5d6a581c3a1fcd0d0526b" name="docker" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.23.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="0da81620a5b84462920498bd44a8da1b1dfeaf95bf6e91d50de7b692ce464888" name="docker" arch="src">
  <version epoch="0" ver="19.03.1_ce" rel="lp150.5.27.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="f92aa67fc340654a16e76c90c06e99aea87d9af1be425d67e64904c87d0e6e63" name="docker" arch="x86_64">
  <version epoch="0" ver="19.03.1_ce" rel="lp150.5.27.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="64f52645de3262fc647979c4db2bec33bbb2068df5328689d8a42f0bb80607be" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="7007aa14aa8318ad509d45fb692c3a910ba090ca0f7f9ecf8b8078715e81fd8f" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="7fb23497d043dd45c57d1001234ddaa24fcb0b9efb05a368f49d44f3b6c5c0de" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.0_ce" rel="lp150.5.9.1"/>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="325407e11c7f22e285212bb079de6ceb5d4397cf76f83fae770295e88c12bf68" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.1_ce" rel="lp150.5.13.1"/>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
</package>
<package pkgid="d91884f0589891c30116b8529e5c5fdb202bc00c5f7653a7ed622b5089a0b5c1" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.17.2"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="32e47b438651ee50fbd32216e89a6d9d7b4ffe57dab5cb4b9f6e8b1ed8817c8d" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.20.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="db4ff3784e9134ed8665c0add4c31ce8586a98978b97516ff01fb67c1bbc6289" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.23.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="65126f408230661998478cc319314236fb8f77ddcde75e37af68dc38a807156e" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="19.03.1_ce" rel="lp150.5.27.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="50658c42396bc95d97786caf56f289acb558a7235b01bbe9a98e51a4d723acef" name="docker-kubic" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="035e26370ca1836c61d8a1e60ad7947f155c6d1eb7592baccbede0ae175a4a2a" name="docker-kubic-bash-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="f789fa4fca6628e1db26fd9e34259017f047235aa00ec3162b668518ae61964f" name="docker-kubic-test" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="7aa567324c61b52499c04ad1e40458acd97760f173c1db50aa0d68766f0bbdd3" name="docker-kubic-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="914c1332bfda5e0db84d468cc56923bc46b687fffc49df4fa4d9c3969d0fabfd" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="lp150.3.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="8e9232ac738fc35444760c629271dc8eb1061a8669f5ae9a125504f3f85a6e4a" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2704_6da50d197830" rel="lp150.3.6.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="1cc0addf6ae11688c13edad64c8f538b7e8bf0fcbfdec8a38cab43bd5f5b6e0c" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2711_2cfbf9b1f981" rel="lp150.3.10.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
</package>
<package pkgid="cda11b9c458eaaea435de1f71b77337c560641bbe79ffff3456da7fbcb890109" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp150.3.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="55c3c6dc228f373b779ffefeac6dadb7176ba742a4a4a69bbbd13a2c6ab852ca" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp150.3.18.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="c41dda27ad0ea08111e2604efc5a48a3255a2221b3e3e4761f12ac9f5c847444" name="docker-libnetwork-kubic" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="lp150.3.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="d3811073b424282f6242104d44cf97debf12091ed60f7cf73a4e949d970dfd64" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="4a915841d95ce525b81462e7c661647a6c2f6bfdc18517635516154d7486c6aa" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.6.1"/>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="ce8a2741279a50b88ef0c7e136eda4300bae06a57ebe16c9c1816b2350a87838" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.7.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="dd3fdca21e8ec399cc9ddfeb245d74808eb413fe89b38ade67cf5f2bca4a1358" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc6+gitr3748_96ec2177ae84" rel="lp150.5.14.1"/>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="230758a63db1847759b8287b20795379681f4b2f0eae622559a8a0efa5280ef6" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc6+gitr3748_96ec2177ae84" rel="lp150.5.18.1"/>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="258e8a02f47034e186428c3393e8ed17da50fd8a1fecb0d8a68b3c7480b97704" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc6+gitr3748_96ec2177ae84" rel="lp150.5.18.1"/>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="b6de29fdb7cd5739371f97a8f347e07e56db2894a1feee200588447f988c9c41" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp150.5.21.2"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="661824a683bcc5eb2506e1afde67d39839dd87f397c5d51e21092f905b70cde5" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp150.5.21.2"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="a67647d90466b72a95766d0b6dc6ffcb6abcf418d03ce6e7b95e2ef1d637b575" name="docker-runc" arch="src">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp150.5.25.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="65bd2a0f56f472f2a675da99b06cb6f8a4bc3153f68576d3ee692863e23a6cc1" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc8+gitr3826_425e105d5a03" rel="lp150.5.25.1"/>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
</package>
<package pkgid="0cecb05d4a366b9546727fbcb8bc13cb894e0ff15a82a04f35ffb9bc3086de5b" name="docker-runc-kubic" arch="x86_64">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="f266c9051c13ce65068a3303836739f62e71e74e3ad59db2d5e9ca43ce5917d7" name="docker-runc-kubic-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="5aceca85ed0897aec8a10113e41b58ab9dddf8bda1906e4dce6d73d6b52b144d" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493899200">- fix the golang requirement to 1.7 to the subpackages</changelog>
  <changelog author="thipp@suse.de" date="1499342400">- rename runc to docker-runc (bsc#1069758)</changelog>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="25981a096f2252069592f6b8a3e256b6a991275496bce29ef1b402ba1f52334d" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.6.1"/>
  <changelog author="thipp@suse.de" date="1499947200">- Remove empty %post
- Use Obsoletes instead of Conflicts</changelog>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="d1f4f4dd0acf2e7f21165866e8254e12c5d1ca6cb3c8077f3233688ae5ab28df" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc5+gitr3562_69663f0bd4b6" rel="lp150.5.7.1"/>
  <changelog author="asarai@suse.com" date="1501675200">- Use -buildmode=pie for tests and binary build. bsc#1048046 bsc#1051429
- Cleanup seccomp builds similar to bsc#1028638
- Remove the usage of 'cp -r' to reduce noise in the build logs.</changelog>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="f9ae13c94cbff9e6925c70dda6dfc7f2da5fbea71f1552f61ebbb016416071d3" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc6+gitr3748_96ec2177ae84" rel="lp150.5.14.1"/>
  <changelog author="asarai@suse.com" date="1502625600">- Use the upstream Makefile, to ensure that we always include the version and
  commit information in runc. This was confusing users (and Docker).
  bsc#1053532
- Add a backported patch to fix a Makefile bug. This also includes some other
  changes to make the docker-runc.spec mirror the newer runc.spec (which
  required additional patching to the Makefile).
  https://github.com/opencontainers/runc/pull/1555
  + bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
</package>
<package pkgid="9a3cef0373902a128932574c1c4cc6078be52974a5bc3270a3922ce9e81d2856" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc6+gitr3748_96ec2177ae84" rel="lp150.5.18.1"/>
  <changelog author="thipp@suse.de" date="1504612800">- Update bsc1053532-0001-makefile-drop-usage-of-install.patch
  + replace missing target "all" with "runc"</changelog>
  <changelog author="asarai@suse.com" date="1507550400">- Update to docker-runc 2d41c047c83e09a6d61d464906feb2a2f3c52aa4, which is
  required for Docker v17.07-ce.
- Add backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  + bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch
- Remove fix for CVE-2016-9962, as the patches are now included in the upstream
  source. bsc#1012568
  - CVE-2016-9962.patch</changelog>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="2a57886385d003771b47f5faff7e0648d271d2727fd82c36c494c9393a980e40" name="docker-runc-test" arch="noarch">
  <version epoch="0" ver="1.0.0rc6+gitr3804_2b18fe1d885e" rel="lp150.5.21.2"/>
  <changelog author="asarai@suse.com" date="1508155200">- Drop backport of https://github.com/opencontainers/runc/pull/1603. bsc#1055676
  It's going to be fixed in Docker instead.
  - bsc1055676-0001-rootfs-preserve-old-mount-flags-when-remounting-bind.patch</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to docker-runc 0351df1c5a66838d0c392b4ac4cf9450de844e2d requirement
  for Docker v17.09.1-ce. This also includes a switch to the upstream
  opencontainers sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1514376000">- Fix build with RPM 4.14: exclude is not meant for files to NOT be
  packaged, but should only be used if the files are to be excluded
  from a glob when they end up in a different package. Rather
  remove the unwanted files in the install section.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Fix Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
</package>
<package pkgid="4d3c17a2a3f2e4071c4d8672e170f30c1478af16f012352999cf04fb29d1d597" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="75769a3bda97e29b7f8c207fc0af85be509015e396fafc2ab4532a229b435cda" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="f54da6d3d4f6c11087b8bcfbf39125ea9a20b0c14ecf87bd0e7961345f3c6fd0" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.0_ce" rel="lp150.5.9.1"/>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="5386370e92738fa009e392b06132999f196f36c7fdb43409118b800eed979344" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.1_ce" rel="lp150.5.13.1"/>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
</package>
<package pkgid="82b772b8abaf94dd984a9ee8cb3a8b9ad494ea57acc0623c384656e2cb1c39c1" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.17.2"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="362a061d27c7479f50c30e878371f398232bb2cbcd6f8dd6daa074bed87b6df0" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.20.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="527d429c0134b864890d86e95ea79e8d479264777cb7722cbdde9880f92a2346" name="docker-test" arch="x86_64">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.23.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="f5bad022cbb92d067b01746f80526a1f3bcd040fee94192694be5fb65501b45f" name="docker-test" arch="x86_64">
  <version epoch="0" ver="19.03.1_ce" rel="lp150.5.27.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="bba103a67343f44eb23e318e04b5e82f5f6f53c7d849ec77132d859c936661fd" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="73a29f5a1edb498b20cb348d58d372381f8c0b5140ddaea375f1f6adb3c92a67" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.06.1_ce" rel="lp150.5.6.1"/>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="fcastelli@suse.com" date="1523534400">- Put docker under the podruntime slice. This the recommended
  deployment to allow fine resource control on Kubernetes.
  bsc#1086185</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1526472000">- Review Obsoletes to fix bsc#1080978</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
</package>
<package pkgid="86c76dd9bb1fc5041b97635211a90544696946ba1875b419486c6343cd70929f" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.0_ce" rel="lp150.5.9.1"/>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="dcassany@suse.com" date="1528200001">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528200002">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="35e953f363ecb2d1e853416711f7938dada4aa83b061df2c1cf9924d6f969d87" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.1_ce" rel="lp150.5.13.1"/>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="asarai@suse.com" date="1533038400">- Upgrade to docker-ce v18.06.0-ce. bsc#1102522
- Remove systemd-service dependency on containerd, which is now being started
  by dockerd to align with upstream defaults.
- Removed the following patches as they are merged upstream:
  - bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  - bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
- Rebased the following patches:
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * bsc1100727-0001-build-add-buildmode-pie.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000
- Rework docker-rpmlintrc with the new _multibuild setup.</changelog>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
</package>
<package pkgid="126fa0ac3ca5c4708e11e281fbfac8ee23bad5689e4d9189e8657ea681f51e7b" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.17.2"/>
  <changelog author="rbrown@suse.com" date="1534852800">- Kubic: Make crio default, docker as alternative runtime
  (boo#1104821)
- Provide kubernetes CRI config with docker-kubic-kubeadm-criconfig
  subpackage</changelog>
  <changelog author="asarai@suse.com" date="1534852801">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
</package>
<package pkgid="3316b783177fba83973700005cd1514c90fafc35223c8cb9df63f79ac4e9072e" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.20.1"/>
  <changelog author="asarai@suse.com" date="1534852800">- Add a backport of https://github.com/docker/engine/pull/29 for the 18.06.0-ce
  upgrade. This is a potential security issue (the CRI plugin was enabled by
  default, which listens on a TCP port bound to 0.0.0.0) that will be fixed
  upstream in the 18.06.1-ce upgrade. bsc#1102522
  + bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
</package>
<package pkgid="a477d486b9e8945d87d56e33e9becd2714773b122f43d3b05307fd47629da3bd" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="18.09.6_ce" rel="lp150.5.23.1"/>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to docker-ce v18.06.1-ce. bsc#1102522 bsc#1113313
  Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v18.06.1-ce
- Remove patches that were merged upstream:
  - bsc1102522-0001-18.06-disable-containerd-CRI-plugin.patch</changelog>
  <changelog author="asarai@suse.com" date="1535112000">- Add patch to make package reproducible, which is a backport of
  https://github.com/docker/cli/pull/1306. boo#1047218
  + bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch</changelog>
  <changelog author="rbrown@suse.com" date="1536062400">- ExcludeArch i586 for docker-kubic-kubeadm-criconfig subpackage</changelog>
  <changelog author="rbrown@suse.com" date="1536062401">- ExcludeArch i586 for entire docker-kubic flavour</changelog>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1563969600">- Mark daemon.json as %config(noreplace) to not overwrite it during
  installation (bsc#1138920)</changelog>
</package>
<package pkgid="a9aa359e5584a9249a17a13575553bb79bf3a43bf87b51d8030b7bc4c94b0960" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="19.03.1_ce" rel="lp150.5.27.1"/>
  <changelog author="Valentin Rothberg &lt;vrothberg@suse.com&gt;" date="1539000000">- Reduce the disk footprint by recommending git-core instead of
  hard requiring it.
  bsc#1108038</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update docker.service to match upstream and avoid rlimit problems.
  bsc#1112980
- Upgrade to Docker 18.09.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. boo#1115464 bsc#1118990
- Add revert of an upstream patch to fix docker-* handling.
  + packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
- Rebase patches:
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  * bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Remove upstreamed patches:
  - bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543838400">- Add backports of https://github.com/docker/docker/pull/37302 and
  https://github.com/docker/cli/pull/1130, which allow for users to explicitly
  specify the NIS domainname of a container. bsc#1001161
  + bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  + bsc1001161-0002-cli-add-a-separate-domainname-flag.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1545134400">- Handle build breakage due to missing 'export GOPATH' (caused by resolution of
  boo#1119634). I believe Docker is one of the only packages with this problem.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10.6 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to Docker 18.09.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1124308
- Remove upstreamed patches.
  - bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1549454400">-  Add daemon.json file with rotation logs cofiguration, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549713600">- Update shell completion to use Group: System/Shells.</changelog>
  <changelog author="Michal Jura &lt;mjura@suse.com&gt;" date="1551182400">- Move daemon.json file to /etc/docker directory, bsc#1114832</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1552219200">- docker-test: improvements to test packaging (we don't need to ship around the
  entire source tree, and we also need to build the born-again integration/
  tests which contain a suite-per-directory). We also need a new patch which
  fixes the handling of *-test images. bsc#1128746
  + bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to Docker 18.09.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to Docker 18.09.5-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1128376 boo#1134068
- Rebase patches:
  * bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  * bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  * bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Updated patch name:
  + bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  - bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1557144000">- Update to Docker 18.09.6-ce see upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Rebase patches:
  * bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1559908800">- Add patch for CVE-2018-15664. bsc#1096726
  + CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561636800">- Use %config(noreplace) for /etc/docker/daemon.json. bsc#1138920</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to Docker 18.09.7-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1139649
- Remove upstreamed patches:
  - CVE-2018-15664.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563364800">- Move bash-completion to correct location.
- Update to Docker 18.09.8-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142160 CVE-2019-13509</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to Docker 19.03.0-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1142413
- Remove upstreamed patches:
  - bsc1001161-0001-oci-include-the-domainname-in-kernel.domainname.patch
  - bsc1001161-0002-cli-add-a-separate-domainname-flag.patch
  - bsc1047218-0001-man-obey-SOURCE_DATE_EPOCH-when-generating-man-pages.patch
  - bsc1128746-0001-integration-cli-don-t-build-test-images-if-they-alre.patch
- Rebase pacthes:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  * packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  * private-registry-0001-Add-private-registry-mirror-support.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564142400">- Update to Docker 19.03.1-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2019-14271</changelog>
</package>
<package pkgid="e4cd1cb8094ed43d1156024cd5316099da31a516f5212f94687a049ccf3e92ca" name="dolphin" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="003a2b78f72327de6f55be92b8ea402c8f959f427077c9455c200e9b2aec963e" name="dolphin-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="32432638358d94935c54c4e1fce6db3a05f1683d58e1196321220b860893a1e4" name="dolphin-part" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="4f0969c0e09cddde5c0184266238c99dc0ab9026a5c5dafcc44e79d282f77f42" name="dolphin-part-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * Update name of the delete action in the .rc files
  * behavior change -&gt; New Window opens with same URL</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1492862400">- Add patch to re-allow running dolphin as root:
  * 0001-Revert-Disallow-executing-Dolphin-as-root-on-Linux.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't ignore tag clicks in the tooltips
  * Sort the tag-values alphabetically in the "Tags" column (kde#377589)</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Correct searchbox, split view transitions between tabs (kde#379135, kde#380032)</changelog>
  <changelog author="wbauer@tmo.at" date="1499428800">- Rename -lang package to dolphin-part-lang and recommend it by the
  dolphin-part package, the translations are used by the kpart too
  * Avoid boo#1027925 in the context of boo#1047665</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Replace %lang_package with evaluated macro to be able to add proper
  Provides/Obsoletes to avoid file conflicts during installation</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Change in "Open in new tab" feature in Dolphin
  * Ignore drops-onto-items from invalid places items (kde#373005)</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Fix loading of dolphinui.rc (kde#382848)
  * Use https for knsrc providers
  * Fix drop menu position with urlnavigator drops
  * Bundle the XMLGUI files into qrc resources.
  * Add role for file creation time.
  * Fix knewstuff popup menu position on wayland
  * Add missing emit keywords
  * [Places Panel] Disallow editing devices
  * Support "Deletion Time" role in Trash (kde#153492)
  * Drop unnecessary method
  * Introduce DolphinMainWindowTest
  * Move non-exported code to a static library
  * add few more Q_DECL_OVERRIDE
  * Port tests from ecm_mark_as_test to ecm_add_test
  * Fix kfileitemmodeltest
  * Remove define to disable exports
  * Fix some compiler warnings</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Fix build with Qt 5.10
  * Keep renamed file(s) in view
  * Make sure we always have Shift+Del as shortcut
  * Qt 5 Porting: Q_WS_WIN -&gt; Q_OS_WIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Fix scrolling during inline renaming causes rename of wrong file (kde#378786)</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * appdata: update doc URL, more https
  * Use CMakePackageConfigHelpers instead of the ECM variant</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * infopanel fully resizable
  * Revive folderpanel when outside $HOME
  * Ignore baloo urls created from new KIO model (kde#387888)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Let the terminal panel dock to any part of the window (kde#362593)
  * Folderspanel's context-menu option "Limit to Home Directory" is always visible
  * folderspanel context-menu option "Limit to Home Directory" should be always visible</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Fix resetting "View Modes" preferences to defaults</changelog>
  <changelog author="wbauer@tmo.at" date="1538568000">- Add Fix-that-dragging-a-file-can-trigger-inline-rename.patch to
  prevent accidentally triggering inline rename by just dragging a
  file (boo#1108797, kde#398375)</changelog>
</package>
<package pkgid="18082ec503c359c2395bfc3aa2e6d49471e2982c0207cc77d39e74d0b178d188" name="dom4j" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="2166a5e452d17549781e757a5c37b7438e31da2072552b4c0766b1e9181b96cf" name="dom4j" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.6.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
</package>
<package pkgid="76c15f9a22532112d65335d645ae778591edb599a19f165ab975954da5dae4ea" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="d30391617861d37c0111bfca7ba30094c66f2efb402834190d8d0235ff435662" name="dom4j-demo" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.6.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
</package>
<package pkgid="37c2abfe204b017523472006e12ed7f52c7995f3b626a2b332414ef057efe0b8" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="c7e0dfe51f44cb26558c5c20d209cad83fb8787a31aeb4b334f5e399fbd72bbd" name="dom4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.6.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
</package>
<package pkgid="b623263f1c0cc1601ed4e71d5e932a53d1e0b40fd06e453875afd06bba895695" name="dom4j-manual" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
</package>
<package pkgid="735e4765ee46c190c15ed4bde0c3257066f932247c22b0e71df078b4d2a60911" name="dom4j-manual" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="lp150.3.6.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- Initial SUSE packaging:
  * spec script and jarjar build support was taken from jpackage.org 5.0
  * Source of dom4j and build.xml comes from Debian unstable, as there don't need
    proprietary msv from sun (bnc#430592)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242648000">- Removed documentation of ConcurrentReaderHashMap (bnc#504663)
  * dom4j-1.6.1/docs/clover/org/dom4j/tree/ConcurrentReaderHashMap.html
  * dom4j-1.6.1/docs/xref/org/dom4j/tree/ConcurrentReaderHashMap.html</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242820800">- 'fixed bnc#501764: removed clover.license from source tarball'</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="cfarrell@suse.com" date="1332504000">- license update: Apache-1.1
  SPDX</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from javapackages-tools
- drop repolib part (never built)
- drop pointless jarjar
- unversioned javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-trax and run spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="mpluskal@suse.com" date="1495195200">- Update dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1504872000">- Added patch:
  * dom4j-sourcetarget.patch
    + Use java source and target level 1.6 in order to allow
    building with jdk9</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1537272000">- Security fix: [bsc#1105443, CVE-2018-1000632]
  * Version prior to version 2.1.1 contains a CWE-91: XML
    Injectionvulnerability in Class: Element. Methods: addElement,
    addAttribute that canresult in an attacker tampering with XML
    documents through.
  * Added dom4j-CVE-2018-1000632.patch</changelog>
  <changelog author="C&#xE9;dric Bosdonnat &lt;cbosdonnat@suse.com&gt;" date="1548417600">- Build STAXEventReader, STAXEventWriter and the data types.
  [bsc#1123158]
  * Added patch dom4j-enable-stax-datatypes.patch</changelog>
</package>
<package pkgid="6984e1c588a97c6aed5d0a6019cc734610f70ed9ba6c371396256ed58f80f5b3" name="dosbox" arch="src">
  <version epoch="0" ver="0.74.3" rel="lp150.2.3.1"/>
  <changelog author="lnussel@suse.de" date="1180094400">- dont rm -rf %buildroot in %prep</changelog>
  <changelog author="lnussel@suse.de" date="1185796800">- new version 0.71
  * Added a new recompiling cpu core which is easier to port!
  * Added a x86_64 and a mipsel_32 recompiling core.
  * Fixed hangups on certain platforms after long gameplay of
    several games.
  * Fix several joystick bugs.
  * Improved cdrom support. (fixes for audio, iso and detection.)
  * Improved SVGA and VESA. (detection and display)
  * Fixed a few textmodes and improved ansi emulation a bit.
  * Fixed pcspeaker and certain types of soundeffects.
  * Added undocumented mousebackdoor.
  * Made mount and imgmount a bit easier to use. (ioctl by default,
    support for ~ and ~username, auto size guessing for images)
  * Fix a few compilation problems on various hosts and a general
    code cleanup.
  * Several small fixes that improve compatibility.</changelog>
  <changelog author="lnussel@suse.de" date="1188302400">- new version 0.72
  * Fixed unitialized variable in joystick. (Fixes crashes on Vista and
    Mac OS X)
  * Some bugfixes and speedups to the 64 bit recompiling core.
  * Fixed sign flag on soundblaster dma transfers (Space Quest 6 intro)
  * Fixed a bug in keyboard layout processing code and fixed certain
    layouts.
  * Fixed Dreamweb.
  * Improved speed unlocking when running cycles=max.
  * Fixed a crash related to the tab completion in the shell.
  * Improved aspect correction code. Should now be like how a real monitor
    handles it.
  * Fixed a bug in the xms status report code. (Blake Stone 1.0 shareware)
  * Added a lot more keyboard layouts.
  * Fix crash related to changing the scaler before a screen was created.
  * Hopefully fixed compilation on *bsd.
  * Enabled auto cpu core selection for recompiling core as well.
  * Made the used joystick selectable when 4axis is specified.
  * Added some hints for inexperienced DOS users to the shell.</changelog>
  <changelog author="lnussel@suse.de" date="1192449600">- fix build with gcc 4.3</changelog>
  <changelog author="lnussel@suse.de" date="1196769600">- fix wrong use of strncat</changelog>
  <changelog author="lnussel@suse.de" date="1243512000">- new version 0.73
  * Support for more graphics modes and cards.
  * Improved Vista support.
  * New OPL emulation cores.
  * Sound fixes and improvements for Mac OS X.
  * Lots of compatibility fixes.
  * Lots of cdrom detection improvements.
  * Lots of memory (EMS/XMS) improvements.
  * Various fixes and enhancements for the recompiling core.
  * Support for evdev.
  * Lots of DOS fixes.
  * Slightly faster!
  * More stable.</changelog>
  <changelog author="lnussel@suse.de" date="1274270400">- new version 0.74
  * Several small game specific fixes/hacks/support. (Offensive, Roadhog, GTA
    installer, Kingdom O' Magic soundcard detection, Pirate booter, Armored
    Fist installer)
  * Add the S3-specific 640x480 256 color mode. (fixes regression in "Wooden
    Ships and Iron Men" and "I Have No Mouth And I Must Scream")
  * Fix a stack overflow that could crash DOSBox.
  * Add fake microphone input. (fixes Talking Parrot)
  * Modify adlib turn off code, so that it doesn't turn off in cases where the
    same sound is repeated over and over again.
  * Several small fixes to the CDROM audio code.(HOMM2, Redneck Rampage and
    others)
  * Several improvements to the CDROM emulation code. (fixes Alpha Storm and GT
    Racing 97)
  * Some small CPU fixes that might fix something.
  * Handle opcode 0xff subcode 7 as invalid instruction. (fixes dif-2 &amp; others)
  * Some hercules fixes. (Testdrive)
  * Improve support for blanked parts that wrap around to the start of the
    screen. (fixes Magic Circle demo and Sid&amp;Al)
  * Remove old OPL cores as the new ones seem to work very nicely.
  * Modify movie recording code so that the movies aren't corrupt when you exit
    dosbox without stopping the movie.
  * Change RGB3x scaler to look more pretty.
  * Improve initial register values compatility of the GUS.
  * Added autodetection for Gameblaster. (games can find it now)
  * Change render preferences a bit to be more compatible with Windows 7.
  * Add DOS fixes to terminate program. (fixes Fortune Teller)
  * Add FFREEP. (fixes Trucks)
  * Improve FPU ST80 in C mode when writing zero. (fixes Antigok)
  * Add special int10 scanline function. (fixes mz700 and probably lots of
    games that mess with them)
  * Fix scrolling in rarely used video modes. (fixes Orphee)
  * Modify game specific hacks a bit so that Kick off 3 works again.
  * Lots of fixes to the INT10 video parameter table. (Seven spirits of ra and
    others)
  * Add VGA blanking in machine=vgaonly. (used by Alien Carnage)
  * CGA, PCJr, Tandy: Add video blanking, change display start latch timing,
    sync pulse width correction.
  * PCJr, Tandy: implement vertical retrace interrupt.
  * PCJr, CGA: line-by-line video emulation.
  * PCJr: support on-screen change of color modes 4medium to 16low. (used by
    Ghostbusters booter)
  * Hercules: Add green and amber monochrome support.
  * All machines: only update the video timing when needed. (Jungle Hunt,
    others that synchronize to the video screen might profit)
  * Several small DOS fixes.
  * Some UMB related fixes. (The Legacy without UMB)
  * Fix version number of DSP for SB 1.5. (fixes a few games)
  * Several VGA emulation improvements. (Allertone football manager)
  * Some Tandy fixes. (Mech Warrior)
  * Small improvements and fixes to the OPL emulation.
  * Add low level Tandy DAC emulation.
  * Some EMS fixes. (fixes Mortal Kombat and others)
  * Change SoundBlaster DSP reset mechanism, add sb irq acknowledge logic.
    (fixes stmik*based applications)
  * Some interrupt pointer location modifications. (fixes Tinker Tales)
  * Some fixes to the BOOT code. (fixes Last Mission)
  * Respect write-only file information. (fixes Champions of Zulala)
  * Some RTC fix. (fixes Tully Bodine and others)
  * Improve mouse emulation to work better with Water World.
  * Hopefully fix the translation of the configuration file.
  * Speed up and fixes for the recompiler core. (pitfall2 pcjr)
  * Change memory start location. (fixes 7th Guest installer)
  * Several fixes to the batch file handling. (Shift and use the typed first %0
    instead of the parsed %0)
  * Improve file redirection and redirected line ends. (fixes Phantasmagoria 2
    DOS installer)
  * Fix compilation with new MAC os X version.
  * Add 16C550A FIFO support to the serial port emulation.
  * Improve modem emulation to get higher speeds.
  * Change default samplerates to 44100, blocksize to 1024 and prebuffer to 20,
    so that hopefully certain soundcards produce more fluent sound playback.
  * Add some rarely used, but for some games critical flags to the internal
    commands.
  * Add -userconf flag, so that the userspecific configuration can easily be
    used together with *conf configfile.
  * Improve internal timing with repeating timers (especially with the dynamic
    core).</changelog>
  <changelog author="ismail@namtrac.org" date="1300276800">- Fix compilation with gcc 4.6</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
  <changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
  <changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>
  <changelog author="lnussel@suse.de" date="1486987200">- add patches from Fedora
  * 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch
  * 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch
  * 0001-Workaround-clang-confusing-itself-compile-error-resu.patch
  * dosbox-0.74-formatsecurity.patch
  * dosbox-0.74-init-crash.patch</changelog>
  <changelog author="lnussel@suse.de" date="1503921600">- Fix desktop file category to sort below Game (boo#1055340)
- directly use desktop-file-install instead of the old macro</changelog>
  <changelog author="meissner@suse.com" date="1536321600">- updated to 0.74-2
  - Windows: Fix auto/max cycles algorithm on Windows 7, which helps with stuttering audio.
  - Mac OS X: Bring a 64 bit version and improve performance.
  - Linux: Fix the 64bit dynrec cpu core and a lot of compilation problems. Add patches for the WINE Team.
- dosbox-0.74-init-crash.patch: solved differently upstream
- dosbox-0.74-formatsecurity.patch: is upstream
- 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch: upstream
- 0001-Workaround-clang-confusing-itself-compile-error-resu.patch: upstream
- 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch: upstream
- gcc46.patch: upstream</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use simpler Sourceforge download URLs</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536926400">- Run spec-cleaner
- Drop support for SLE10
- Add GPL-3.0 as license too due to src/libs/gui_tk/gui_tk.*</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1537272000">- Set CFLAGS with export so as to override the implicit
  export of %configure. Use %make_install.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561636800">- update to 0.74-3 (boo#1140254)
  * Some fixes to the OpenGL rendering.
  * Several other fixes for out of bounds access and buffer overflows.
  * Fixed that a very long line inside a bat file would overflow
    the parsing buffer. CVE-2019-7165
  * Added a basic permission system so that a program running inside DOSBox
    can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
    were (to be) mounted. CVE-2019-12594</changelog>
</package>
<package pkgid="29d82d6090b7bbba89e22b888e1e224776690b730647dfbda421f226be8af563" name="dosbox" arch="x86_64">
  <version epoch="0" ver="0.74.3" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
  <changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
  <changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>
  <changelog author="lnussel@suse.de" date="1486987200">- add patches from Fedora
  * 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch
  * 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch
  * 0001-Workaround-clang-confusing-itself-compile-error-resu.patch
  * dosbox-0.74-formatsecurity.patch
  * dosbox-0.74-init-crash.patch</changelog>
  <changelog author="lnussel@suse.de" date="1503921600">- Fix desktop file category to sort below Game (boo#1055340)
- directly use desktop-file-install instead of the old macro</changelog>
  <changelog author="meissner@suse.com" date="1536321600">- updated to 0.74-2
  - Windows: Fix auto/max cycles algorithm on Windows 7, which helps with stuttering audio.
  - Mac OS X: Bring a 64 bit version and improve performance.
  - Linux: Fix the 64bit dynrec cpu core and a lot of compilation problems. Add patches for the WINE Team.
- dosbox-0.74-init-crash.patch: solved differently upstream
- dosbox-0.74-formatsecurity.patch: is upstream
- 0001-Apply-patch-by-gulikoza-to-add-support-for-absolute-.patch: upstream
- 0001-Workaround-clang-confusing-itself-compile-error-resu.patch: upstream
- 0001-update-64bit-recompiler-core-to-handle-OSX-memory-ad.patch: upstream
- gcc46.patch: upstream</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use simpler Sourceforge download URLs</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536926400">- Run spec-cleaner
- Drop support for SLE10
- Add GPL-3.0 as license too due to src/libs/gui_tk/gui_tk.*</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1537272000">- Set CFLAGS with export so as to override the implicit
  export of %configure. Use %make_install.</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561636800">- update to 0.74-3 (boo#1140254)
  * Some fixes to the OpenGL rendering.
  * Several other fixes for out of bounds access and buffer overflows.
  * Fixed that a very long line inside a bat file would overflow
    the parsing buffer. CVE-2019-7165
  * Added a basic permission system so that a program running inside DOSBox
    can't access the contents of /proc (e.g. /proc/self/mem) when / or /proc
    were (to be) mounted. CVE-2019-12594</changelog>
</package>
<package pkgid="999b5ae0a0bb0ea900e4053886027e6f496036c8323ace264f311d40a20ccba8" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="63e4c4aa914455719dcf2de16d3be41f352ae9a2d53f60860344a612f2f82d0b" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="dd0dcb6a379d8ae2f5ecfbb71af405c9e0c9f97ea5026ffc7ef348c1506edf93" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="77e214ccc3a252fa910d7c7d6460d4587c08c1e66e9b9d38cde05e0448389ed3" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="f4f1f01d3a4ff5d6254bb2eeba46b30438bb0fb550d50aa1e6a9d3fd93a4842e" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="f36e86bd8890e6a774fbad06bdf7eb85465aaa49ed0329ac2aa7a02d70de9f81" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="6057fc768a9e4f0edc51230993fa15b015cdbb34d78bff8384f09714c5b8408c" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="c2246241cc446752eafc763af785c13555d7c72ad8800754936e16017096bde0" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="2296389a6f10f2252cd59aedbe854581d1321bc1037a6b47182b4c666081c692" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="84a132a3cf5f9dc6f7e29e260f38db8d5a2e8923d1c13cf239cbaac7f098e585" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="27ecbfd9edda74e149ac1e995cebc3eb9c6b6e23c8ade840df641a2e41812146" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="fe4a3058cd907077971dbad81c31fec8ede3bb128484582c2cd633008d397d4c" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="d57b64cf060febc763552d77ed9f396f00f2d2db049c990f0473e29cff02194c" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="22b2c65ba07ddb9fc91069ab96174d65277b6d26fe42a05ee7aeaed6c73e0aa8" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="2ef9951d7e30e8237a88c1d05cb5114035fdbc29a6ea2e71e740bf9559b723e8" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="e635fb5288dbd745abf9781a1a55af3b6f87055a85410877988b4340012b9558" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="e03e4aa42a15f2f0c8e3007af7b3d790352f516dca15e4c7b6a2d260ee7f1d6f" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="00c2191939c1a3a4c13f526e8a47c7a2116078df959d11d4dad01ce3f19a26a1" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="f9de857cacc7ca67205a207d10cd06e33bfe0ac0b00b3c86958c13374126b24d" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="18a53069606b29c76196f458eb4963d51bd2f6f89e3015e96df92331b3e19527" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="172c19e58201a910b8896c2597473c19c4dfd60cd5e115220a31f17f6f0ac08e" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="c52f3fa069e9040b4b94d72292e350d0c24ef80a62a7859adfc130d6dcc59343" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="9bae128e0fb5af132490c8f067d0444461e8bb541ad8409780a9862ce6616478" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="e8c130685df58df3c1397d9fb980a5acdf11709029065ce7588f98bb6899f574" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="416e3e7777caed83e07c824598abcf70a9fdfc27a715a1fff0c86426cda09855" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="d1d8cdac517c50a3bfa0b3281fd67bc15b3f6d72524ebd5186289e213e2cc1eb" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="ffd0dcd1c330b31187b24be4052e6400bc9a5910895db022298d9906a3150776" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="60342b797af0be0644ab2b2ce725e4631734c75df50c25efc4f462caf55c6e06" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="d63050fda7a1ebd2035ccbf260d8388e0754ec0315c7fe0f111ae40e01bfeccd" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="4df65deabf3759435621369c03a9947a36a6d9bab62351e0da1ac66192d6c030" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="bcd897da5bd994350789902fc56c5f2eae584b6e0803a1c02e709a68310339f6" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="37e6995d0ff57e51c26ec23f3db9cbccf0cb49077a8fee79c5bd2f7fc7185852" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="ac97601ceb8240e51663286a28c2ccb005a409e375cf5e2ac5aae55b317a253d" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="9454bdacee60a3b01543ff59d1fe4ef91c73a4f58fd220ff493c1fff54dd2a4b" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="52ab55388cecbafc4d73b437818185851df93e7386cb015a2d595186e73f169d" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="92f1c8a24d9e738b04afbf9854eb7b3880f8eac8819044b7bde67a17d0fba257" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.11.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
</package>
<package pkgid="552c3dfcbaa6b2a202ead74e409baff8674d925d7a8766a0d4697b56ce0e6f2d" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.14.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1555416000">- bsc#1132501 VUL-0: EMBARGOED: CVE-2019-10691: dovecot23,dovecot:
  Escape invalid UTF-8 as unicode bytes
  applyed upstream patches:
  0001-lib-json-Escape-invalid-UTF-8-as-unicode-bytes.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
</package>
<package pkgid="7e64363f3eed7b530adb52acc055bb87e5a7ec6fc670b3055b6aeff3c84f2fb9" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514203200">- backport 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch
  fixes crash with imap sieve</changelog>
  <changelog author="jengelh@inai.de" date="1514203201">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
</package>
<package pkgid="e2f18c87fd8e2926f885eff21c642ffda5098620f20f2eb05673b7b5eb9ed80d" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp150.8.2"/>
  <changelog author="jengelh@inai.de" date="1514203200">- Replace %__-type macro indirections.
  Replace xargs rm by built in -delete of find(1).
- Run ldconfig directly via %post -p.
- Check for users in %pre before creating them, and do not suppress
  errors about it.</changelog>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1546948800">- bsc#1119850
  dsync crashes if ACL user identifier is matched and then not matched
  Was fixed by update to 2.3.3</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1548936000">- bsc#1123022 (CVE-2019-3814) Vulnerability in Dovecot related
  to SSL client certificate authentication
  applyed upstream patches:
    0001-auth-Do-not-import-empty-certificate-username.patch
    0002-auth-Fail-authentication-if-certificate-username-was.patch
    0003-login-common-Ensure-we-get-username-from-certificate.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1553688000">- bsc#1130116 - (CVE-2019-7524) VUL-0: CVE-2019-7524:
  FTS or POP3-UIDL header from dovecot index overflow
  applyed upstream patches:
    0001-lib-storage-Fix-buffer-overflow-when-reading-oversiz.patch
    0002-fts-Fix-buffer-overflow-when-reading-oversized-fts-h.patch</changelog>
</package>
<package pkgid="ee75fff404a62e778dad10907b41cbca6b23a94b9b8ba56b82a07740793dadea" name="dpdk" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="bff73313b24bfbf2bac87828ff3f3a4461e32dff5db90831aef041871406ce3d" name="dpdk" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="bc2a86d5cae1a9ed617790ef46e385198646e31433c1162c80478172618830c4" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="f08beedb57feb4b3ab0461e7fc4fcc44cccf5a1fdfc702bd0bead664a02dbfc7" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="45c5a1ec832217720ee6891667a2822c36fe539baa3bb57b9bd02d3bdc9c1f4a" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="f4c79c84a172396b270a714b3b01b817f8938ae7df1f0efe55bd5e5eecad625d" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="8b351e025b64afe1f2f5a946a4fdaa51998a829e2ffddef345bba61d6c4e8fc1" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="f22573e2affb6ef167ac035c7dab96d38c4fd301bbc50ca91d9954fa45dd9678" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="6012a44b50cd62c5fac3e5b0da4d810ea90d3f147d9e247e28b56410e9808006" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="17.11.2_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="1d377e94597b66295de1ad7c8c9f64cb8cffe15689b51ab8d9498a9bb9c7595a" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="17.11.4_k4.12.14_lp150.12.25" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="92c130a317a638abf87c32dab4bc397233d2aad2425c67f3f27f92aa9cd425e6" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="c0ec2db9ae3e6d47a6c0b809f8a47dac1e33d7f159fed512acece53c4184e610" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="17.11.4" rel="lp150.2.5.1"/>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495540800">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="ndas@suse.de" date="1530619200">- do proper cpu compatibility test(bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]
- change %doc to %license</changelog>
  <changelog author="marco.varlese@suse.com" date="1535976000">- Update to 17.11.4 stable release. Some of the fixes include:
  * app/testpmd: fix buffer leak in TM command, fix DCB config,
  fix VLAN TCI mask set error for FDIR
  * bus/dpaa: fix buffer offset setting in FMAN, fix build,
  fix phandle support for Linux 4.16
  * doc: fix bonding command in testpmd, update qede management
  firmware guide
  * eal: fix bitmap documentation, fix return codes on thread naming
  failure, fix invalid syntax in interrupts, fix uninitialized value
  * eventdev: add event buffer flush in Rx adapter, fix internal
  port logic in Rx adapter, fix missing update to Rx adaper
  WRR position, fix port in Rx adapter internal function, fix Rx SW
  adapter stop
  * hash: fix a multi-writer race condition, fix doxygen of return
  values, fix key slot size accuracy, fix multiwriter lock memory
  allocation
  * kni:fix build with gcc 8.1, fix crash with null name
  * vhost: fix missing increment of log cache count, flush IOTLB
  cache on new mem table handling, improve dirty pages logging
  performance, release locks on RARP packet failure, retranslate
  vring addr when memory table changes
  * PMD drivers: various fixes fro bnxt, dpaa2, mlx5
- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
</package>
<package pkgid="35a05a9a6bbc817162861a9076f63bc798bbaa27e10049856913f231b9eb689e" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
</package>
<package pkgid="c8c736c8108531c3f9bf0e053374c692f23e9a3370af7c9f3536d8d559de2441" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
</package>
<package pkgid="189d18c082ac5a888a7802ea0578e9e44b9166937a7cb851ceeec4f8b84ed3bc" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
</package>
<package pkgid="b9a02b7c17969e7bda6c19b6d420863c0aba366b7996700b420dc8c6c2c88a1f" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
</package>
<package pkgid="f8ce6096bddbed1372e67d77db40bff3132c1dc6e51c508c20ffbf333f3ab4db" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
</package>
<package pkgid="9126eb957149afeca6154a146c11f6bc8fadedba9f97ba86cc9315fbc18f462c" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
</package>
<package pkgid="98b52fa4373d8cdacfe196aa5a764b7ae06fcdb3f5f339ef49e96fc3a3dfab9b" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.19.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
</package>
<package pkgid="bccb50cca291e410e83284ee9a50158446cd10221da82278fa835ad2edcb5285" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.19.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
</package>
<package pkgid="d17e983e77ac1fde84279547e829e25890339c39948c19893a4d2082cec58956" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="b00408394667f527dd5704167e194789e5532bcf291b04c7b0430367e6230ed8" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="a9d8632746a4100c2c8955a420f750b8d2a1d6f3869dcf9ec00c8433cff5a301" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="bcda4e7cf0eec804120ac9f2c1b09a295040ecdd93417f47a7338e6e5d4e126a" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="1ac584d5fe98ec92ea573625e63e00b36aaaa6dc047c6982285b9170bacfd29c" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="c9e1f3ebc5b4fca98d6cc0a5966ea992b2eaac460dd89452624870c908aadb42" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="2abb535ac0f59d2855605164eab58ebb6cd01b7dc830b0b5123df546f91e4ee4" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp150.14.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
</package>
<package pkgid="f866b4225268c25158c6c6bd8828997bbd050766754b4db829b013d6c2857699" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
</package>
<package pkgid="df76089e5ee251ff193e867cf78d208c1ab6b3ffc15761aa0c4d5a0780b28011" name="dracut" arch="src">
  <version epoch="0" ver="044.2" rel="lp150.14.30.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="d6be2e1c0f0b781f2a5fd89c78cadea3bb87f08d8550f5a76cfef63a0588c524" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.30.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="5c452e7054fb4f41cdb24b1ca77248722077a795a3c950a22c15fe185245dc43" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
</package>
<package pkgid="ba1f6c88cc1656ae3141f691d70cb3c3c751eda5d334c3c4073ca83f27946d50" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
</package>
<package pkgid="2564a7d0eed7e8a433ee80c7d9652d76ee9b034baec53d4f02e4e8fc6f638622" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
</package>
<package pkgid="493ddcd9ada6bd4aaa7c52aa043e4d8e5e49be61c2a62e2a3bcb6142a15de76d" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.19.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
</package>
<package pkgid="8563a864df580349f8183a8232c90f63a8f2000a804621874322f665941593dd" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="59f5191c6722c6ec57e029117da7ab7cc9f0df10e8815412acc8ae61ce5ce059" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="acebfdf6ac203f43dd500d563c1754a71fe2b12d28c6ebbd8cd34cde8e431cdb" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="6b6f3fa43f754b32754a7d081557c23f3d1984c65b4aef50623796cf4a5de920" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
</package>
<package pkgid="002c0d85e60bb85aed8bf0bb3d1d4f727311e2cd9e617b680f3900834b6f8464" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.30.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="347e6dea4d6fb8e3c1f8429307311e1f66ae43c0c5d8ac48aaaf9e3410853e02" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
</package>
<package pkgid="aa64df3c99641d32ea489212430d5f0a378db5c821c1bcb299a8d6cad744f6bd" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
</package>
<package pkgid="4335e9bd54219a930176686b07e576fe48e8b000de7d496c96eed67353fa5efe" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
</package>
<package pkgid="c1dc46bf62ee5814d1c61066b944cea3d9c02ce6d9854a4a5dd09e5c8d46be63" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.19.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
</package>
<package pkgid="49ab9dc151c5e9847828d3735fe4c15d2594a7973a3e7df1e89ac651e1ad62f9" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="d6845d9b5b3c14b9af3a8afdb1e7637cbd947c14929aaefa988df3c5bc563510" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="7640431f3e10edf647db20e5ac940d594f04dfe55e2ae90367e0033ea8248b2c" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="cd357745218926c034601eb0174e9c6f345d8a16592df55ef57c549c5b5b7381" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
</package>
<package pkgid="e8a475c963ba3dc1fd8fc666de1c6087e05cd9b5245b917fef1f1afb9212e7e0" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.30.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="ab33d8e384f6376723a7f02f34c75fc163c79163ad8e145dbd5a35e7f7003249" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="f3631e5669f2e2ccef0e08d78478696358f3ef09db8589bdd4bb6181936b931c" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="c2f36e17e336e5b555b13f532fb6a3c0be33ef157e62c2bf7ff0d828b54531fd" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="8cb920579421780113ec36a8998015b0cb42bb346393a8c174f2357eb06bde13" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.16.19" rel="lp150.2.13.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
</package>
<package pkgid="528015d25b84864c308497a81dbc31e7469f0e93ee20fac7033c9abfa4cf3058" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.17.14" rel="lp150.2.17.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963201">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
</package>
<package pkgid="5058ecdb021b7a55720781b6b27e519f4bc40fdaf04c86d1ce50ec11e88bbad8" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.17.15" rel="lp150.2.20.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
</package>
<package pkgid="ed306a4235a0f06aa25350f574a7c1f7b779236ec3064a262e2e14cd77e55a37" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp150.2.23.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="ms@suse.de" date="1565006407">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006409">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="3e6d817fa32ed51243fd9794cf1c7e5e64cb8d7f8c39af21662d4e68382489ab" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="3f3a386511cc6f5d3ac9650cd857c95756823367e5aba16cea6ca742657a4a38" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="f41dddd482026d30ab9ffabc56e38e7dcc3100f0768a814ba07428ba004772fb" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="ff913a146bbcb5406ce37350622c04ac3d97f04d9aac27b526163d0ab7d5743b" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.16.19" rel="lp150.2.13.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
</package>
<package pkgid="f1aac17157924fb2970488323b105c646282d30052150a0d19303b8443b4f0ec" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.17.14" rel="lp150.2.17.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963201">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
</package>
<package pkgid="cd24446f6a592cc2aa1d033df26ff0ad8ef3face0d583237ba4f397874e22a35" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.17.15" rel="lp150.2.20.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
</package>
<package pkgid="0b6e5c6a5307a37847f09cdf93bfd0979174bb46e1dc8a506527ba88885a0a81" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp150.2.23.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="ms@suse.de" date="1565006407">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006409">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="53b6e5ec7d9a20fc34dd64ce47f927561de950efd62b1b1bf38a306aa406d610" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="3823b10047455266b6a7b090b7db306e67b1324a173c74dae880fb5eaa630231" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="72119668d5a2721229edc4d83cac889f8f6889fa8a1e7d69d275fb287f738034" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="ec900f6852865625f61217451281753da042740eb9c6d690d92d268d52ace46c" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.16.19" rel="lp150.2.13.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
</package>
<package pkgid="682ddb206f839734907cb9555dca78382401fbf2aa326412630d325a80193712" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.17.14" rel="lp150.2.17.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963201">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
</package>
<package pkgid="a42272198b5dfdc32273e17463a1f1b3390c7c1509a5eb858f6f8d2fe2ce6014" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.17.15" rel="lp150.2.20.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
</package>
<package pkgid="d0b2e7db77510824c77cc76f7bf57db0b873fc93085b6a4415666394850c2610" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp150.2.23.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="ms@suse.de" date="1565006407">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006409">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="2264fc836d62141941baca8fa9343dbdf0e879f900f5ff3c9558a36df7cfd214" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="c40ecb295dd0ec7c96d340ccc7eb1082a223aec7202e74629e9e34da115595a4" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="ef9183a402de558070f7a2685a762a119d46cf65bc7b223c34d5d3d5d88155e0" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="ab0d9992b817236a0705ea29a8f779adba81ec4725e98aea2a8d8b00e6c48a0d" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.16.19" rel="lp150.2.13.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
</package>
<package pkgid="ef0e257e594b876f21efba07523f039a9b6cce88f8286edbd5b3a3a35f880338" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.17.14" rel="lp150.2.17.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963201">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
</package>
<package pkgid="30f6edd2f76616625b1193624875b76bc6050744949acfabf5e5f173e5c36217" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.17.15" rel="lp150.2.20.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
</package>
<package pkgid="01dea7a710e4963ed3f6457e32dbf3f62209fffc9a574cd4574b8f9dff680ec0" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp150.2.23.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="ms@suse.de" date="1565006407">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006409">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="896dccbc896c13f42af010cb40ecac9637ddefef4a78c6afdf945add76faae6d" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="b94c9a631a4a076a41148e505834d241ba0755f38ac75ff2651dcaf8e04b74af" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="bbf3de7c28da60c13e96974af23cf81904d6bb16d172a0c5d86c177c18dd0996" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.16.18" rel="lp150.2.9.1"/>
  <changelog author="dcassany@suse.de" date="1537444800">- Adding bugfix trace for bsc#1108508
  bsc#1108508 ticket was fixed with bf556a96 and 77517cff commits. Just
  adding the ticket reference here.</changelog>
  <changelog author="ms@suse.de" date="1537531200">- Update kiwi tools README
  Delete obsolete entries for tools no longer present</changelog>
  <changelog author="ms@suse.de" date="1537790400">- Update docs for setting up development environment
  Reference py3.6 when showing example tox call. Also
  delete a py version reference where it was not needed</changelog>
  <changelog author="ms@suse.de" date="1537790401">- Include PDF build of documentation to the package
  Bundle a PDF version of the online documentation with the rpm package
  build. Due to the complexity of getting a latex build environment into
  the travis CI which does not take forever to install, the bundling of
  a built PDF into the pypi archive has been skipped. Users installing
  from pypi would need to install a latex env on their machine and
  run make latexpdf from the installed bundle.
  This Fixes #819</changelog>
  <changelog author="dcassany@suse.de" date="1537876800">- Make volume id customizable for installation ISOs
  This commit makes volid attribute also available for OEM images.
  The installation media makes use of the volid value. Only posix
  safe names are allowed, up to 32 characters.
  Fixes #811</changelog>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
</package>
<package pkgid="514fa2bf8cd25ff31e9d96b43a9e820e876ec2c8c8cd211ef3f1e58aaec9f710" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.16.19" rel="lp150.2.13.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Update development doc chapter per review by Tom</changelog>
  <changelog author="ms@suse.de" date="1537963201">- Customize latex output for look and feel</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.14 ? 9.16.15</changelog>
  <changelog author="ms@suse.de" date="1537963203">- Disable warnings report from pytest
  By default pytest now generates warnings for all modules
  used in the tox environment. This information is nice
  but taints the test output of the code of this project
  and is therefore unwanted.</changelog>
  <changelog author="ms@suse.de" date="1537963204">- Bump version: 9.16.15 ? 9.16.16</changelog>
  <changelog author="ms@suse.de" date="1537963205">- Fixup make build target
  Don't include auto generated schema docs into the source
  tarball. Also cleanup MANIFEST.in from files no longer
  present in the repository</changelog>
  <changelog author="ms@suse.de" date="1537963206">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963207">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963208">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
</package>
<package pkgid="f7b13c9dd38161fec7cd72a182b6b4dcef62ccb8c946d72a106f2e5b4f2af4be" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.17.14" rel="lp150.2.17.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.16 ? 9.16.17</changelog>
  <changelog author="dcassany@suse.de" date="1537963201">- Create parent qgroup when snapper is present
  This commit creates a new parent quota group (1/0) of level 1 when
  btrfs_quota_groups is enabled and snapper present into the image
  root tree.
  Related to bsc#1093518 and #812</changelog>
  <changelog author="ms@suse.de" date="1537963202">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
</package>
<package pkgid="bf1380c9576c37a19965d4cf44b71804f3234aee592f793bc6e6a0e0a6edb194" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.17.15" rel="lp150.2.20.1"/>
  <changelog author="ms@suse.de" date="1537963200">- Bump version: 9.16.17 ? 9.16.18</changelog>
  <changelog author="ms@suse.de" date="1538049600">- Disable deploy stage in Travis</changelog>
  <changelog author="ms@suse.de" date="1538049601">- Disable version tagging in maintenance branch</changelog>
  <changelog author="ms@suse.de" date="1538049602">- Bugzilla reference commit
  This commit references the fix from commit:6b9e321048602945214
  with the bug id bsc#1109882 in bugzilla.</changelog>
  <changelog author="ms@suse.de" date="1538222400">- Fixed broken link to ec2uploadimg tool</changelog>
  <changelog author="ms@suse.de" date="1538740800">- Fixed URI handling with token query option
  So far only the query format ?credentials=... was supported.
  In case of ?random_token_data the returned uri was truncated
  and also the format check on the query caused a python trace.
  This Fixes #830 and Fixes #828</changelog>
  <changelog author="ms@suse.de" date="1539000000">- Adding bugfix trace for bsc#1110869
  bsc#1108508 ticket was fixed with request #831
  from SUSE/fix_uri_handler</changelog>
  <changelog author="dcassany@suse.de" date="1539000001">- Make use of the quiet flag of mountpoint command
  This commit sets the use of -q flag of mountpoint. Kiwi only
  checks the return code, thus any stdout is useless in this case.
  Fixes #829</changelog>
  <changelog author="dcassany@suse.de" date="1539000002">- Add Codec utils for bytes literals decoding
  In case of a literal decoding failure it tries to decode
  the result in utf-8. This is handy in python2 environments where
  python and the host might be using different charset configurations.
  In python3 this issue seams to be solved.
  Fixes #829 and bsc#1110871</changelog>
  <changelog author="dcassany@suse.de" date="1540900800">- Update flake8 call in tox.ini
  This commit ignores some issues in the code style reported by recent
  flake8. A flake8 update on the CI raised new issues also for the
  branches in maintenance mode. In those cases, just to minimize changes
  and backports, new issues are just ignored.</changelog>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
</package>
<package pkgid="05fc53e62dbd0a21d233ff41dd8bb7155c6b70cf1b464e0aaa6c519250bf55f9" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.17.16" rel="lp150.2.23.1"/>
  <changelog author="ms@suse.de" date="1545134400">- rebuild auto generated code with stable generateDS
  For some reason the xml_parse code generated by generateDS v2.29.24
  caused warnings on simple type XSD patterns. Therefore I rebuild
  the code with the stable build version v2.29.14 which fixed that
  issue
  Fixes bsc#1119792</changelog>
  <changelog author="dcassany@suse.de" date="1545134401">- Bump version: 9.16.18 ? 9.16.19</changelog>
  <changelog author="dcassany@suse.de" date="1545134402">- Fix disk size calculation for VMX
  Disk size calculation must take into account the empty volumes that
  are to be mounted in a directory that does not exist in the root tree
  otherwise there is KeyError. The result of
  storate/setup._calculate_volume_mbytes must be a dict including all
  defined volumes.
  Fixes #904</changelog>
  <changelog author="ms@suse.de" date="1548763200">- Bump version: 9.16.19 ? 9.17.13
  This version upgrade contains fixes for:
  * Support alternative EFI and grub modules paths
    In SUSE products EFI binaries are historically located in
    /usr/lib*/efi. In a recent move to package grub2 as noarch
    fate#326960, a collision between x86_64 and aarch64 has been
    identified, as both place platform-specific files in the same
    spot. To rectify this, a new location was devised:
    /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will
    move to /usr/share/grub2. This Fixes #924
  * Fixed Xen guest detection
    We only support Xen setup e.g in the Amazon Cloud for the
    x86_64 architecture. This Fixes bsc#1123186 and bsc#1123185
  * Fixed location of grub unicode font file
    grub2 is expecting the unicode font below the fonts
    directory in the /boot/grub*/ depending on how the
    distribution installs grub2. This Fixes bsc#1119416
  * Add Codec utils for bytes literals decoding
    In case of a literal decoding failure it tries to decode
    the result in utf-8. This is handy in python2 environments where
    python and the host might be using different charset configurations.
    In python3 this issue seams to be solved.
    Fixes #829 and bsc#1110871
  * Fixed URI handling with token query option
    So far only the query format ?credentials=... was supported.
    In case of ?random_token_data the returned uri was truncated
    and also the format check on the query caused a python trace.
    This Fixes #830 and Fixes #828 and bsc#1110869 and bsc#1108508</changelog>
  <changelog author="ms@suse.de" date="1548936000">- Changed default value for bundler compression
  If no compression is configured in the kiwi config file
  the default was set to: False. However this lead to big
  trouble on the obs side for images which has fixed
  storage disk sizes configured, e.g Azure images which
  requests 30G disk size per instance. Thus the default
  for the bundler compression has changed to be: True</changelog>
  <changelog author="ms@suse.de" date="1548936001">- Fixup code issues reported by new flake8 version
  Travis has updated the flake8 version which caused more
  strict issue reports on the code. This commit fixes the
  new issues reported by flake8</changelog>
  <changelog author="ms@suse.de" date="1550750400">- Fixed disk detection from root device
  The method lookup_disk_device_from_root assigns the disk device
  matching the root device uuid. However in a multipath environment
  multiple disk devices matches the same root device. The code to
  assign the multipath map in this case was missing in the dracut
  code base. This Fixes #954 and Fixes bsc#1126283 and bsc#1126318</changelog>
  <changelog author="ms@suse.de" date="1551268800">- Bump version: 9.17.13 ? 9.17.14</changelog>
  <changelog author="ms@suse.de" date="1554120000">- Update compression flag for qcow2 format
  In case of a qcow2 format we store the result uncompressed
  Since the format conversion only takes the real bytes into
  account such that the sparseness of the raw disk will not
  result in the output format and can be taken one by one
  This Fixes bsc#1128146
  In addition the commit includes a refactoring for the
  evaluation of the compress flag in the runtime config.
  Instead of the global overwrite, the flag gets evaluated
  individually at the time the result metadata is created</changelog>
  <changelog author="ms@suse.de" date="1554465600">- Bump version: 9.17.14 ? 9.17.15</changelog>
  <changelog author="dcermak@suse.com" date="1565006400">- Add pytest-xdist to dev-virtualenv to run the unit tests in parallel
- fix CLI args not being passed to pytest by tox for unit_py3_4 and unit_py3_6
- enable parallel run on travis
- document how to run the unit tests in parallel
  (cherry picked from commit 0fbc2c5ff950cb1857fe7b45e66983272bf1fc4d)</changelog>
  <changelog author="dcermak@suse.com" date="1565006401">- Extend quickstart to be more viable as a stand-alone document
  (cherry picked from commit fe7c7f59bdf6d1970550a28fff479233e95b85d1)</changelog>
  <changelog author="dcermak@suse.com" date="1565006402">- Add GitLab CI pipeline status to README.rst
  (cherry picked from commit 0681fb4d7335c1b496a62663fae4b56876ffdc8e)</changelog>
  <changelog author="ms@suse.de" date="1565006403">- Fixed permanent redirect links in documentation
  (cherry picked from commit 921fa17f4fe7415e4e5e21a8636c72e7d76dc1d3)</changelog>
  <changelog author="dcermak@suse.com" date="1565006404">- Add GitLab CI pipeline badge to README.rst
  (cherry picked from commit af773d67b9e9ca18a851893b1604c2fa866e7bee)</changelog>
  <changelog author="dcermak@suse.com" date="1565006405">- Extend the development documentation
  Co-Authored-By: Thomas Schraitle &lt;tom_schr@web.de&gt;
  (cherry picked from commit 5ba515236d817bfe50200abe5fdaa8a3ac8e6dc4)</changelog>
  <changelog author="ms@suse.de" date="1565006406">- Update documentation
  The kiwi-descriptions repository has been moved into the
  OSInside organisation
  (cherry picked from commit 70bc4fdda17bab4d6760c708ac5b8c2d77139466)</changelog>
  <changelog author="ms@suse.de" date="1565006407">- Update documentation references
  The kiwi project has been moved into its own upstream
  organisation named OSInside. Due to the move some doc
  and README references needs to be adapted
  (cherry picked from commit d09ccc520633c03d5393039ccbc4989779f803d0)</changelog>
  <changelog author="dcassany@suse.com" date="1565006408">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006409">- Bump version: 9.17.15 ? 9.17.16</changelog>
</package>
<package pkgid="b05f94a026b0e98a32247faffbb08b5648f4d0ac895ac661224f89f27e0bbe5e" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
</package>
<package pkgid="c1512d9461dd914f37fdd0757d1176eb02c558816f4e46b0f93faef1b7fcd506" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
</package>
<package pkgid="96bbb6fa2355d55edebffee07c67e9ded775432a92c246cc989b214fca2278cb" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
</package>
<package pkgid="ba74d57f715563b9bf601f12094887bc3321d88c9ca260811b10195102814862" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.19.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
</package>
<package pkgid="0ef7645822b128aa5bd0418038b1268178cd4ed7840b61b073408820e728e3b9" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="b79b30e8a9643fd07ab01d93730a27f750817d150bc66eb33e7daf8d8bec09a3" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
</package>
<package pkgid="75f4cabdbe94dd3fdfe2f33a5384836598f26f9a62b2f482a06d1ad3d464b1d4" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
</package>
<package pkgid="aba0d35f2e1990e7842899d478ace060054621b9294708adf9851a712b950670" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.27.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
  <changelog author="trenn@suse.de" date="1529496000">- Add fix to override ACPI tables via initrd, a kernel config variable
  changed name (bsc#1098448)
  This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
  A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1534939200">- Fix finding btrfs devices (bsc#1104178).
  * add 0574-s-find_btrfs_devs-btrfs_devs.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1536580800">- Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
- Skip kernels that cannot be removed by purge-kernels due to dependencies and
  continue removing other kernels (bsc#1104090).</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
</package>
<package pkgid="c19b49792dda969ac0b0d19555c5531d7c866c21716f9b8fc7bd6fba7267f81b" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.2" rel="lp150.14.30.1"/>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1539172800">- Add nfit module (bsc#1110519)
  * adds 0581-kernel-modules-add-nfit.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1540987200">- 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
  (bsc#1055834)
  * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
- Fixed Patch 581 to apply cleanly
  * Updates 0581-kernel-modules-add-nfit.patch
- Mark the DASD udev rules host-only and handle backslashes in paths for
  hostonly files (bsc#1090884)
  * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
  * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1544184000">-  emergency mode: bring shell and all vital information to
  all ttys specified as console devices
  (FATE#325386, bsc#1053248, bsc#937555)
  * Adds 0585-emergency-mode-use-sulogin.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1545048000">- dracut-installkernel: Stop keeping old kernel files as .old
  (boo#1112327)
  The .old kernel files are confusing grub2 which can't find a
  matching directory under /lib/modules. Furthermore, there is no
  guarantee that the new modules are fully compatible with the old
  kernel.
  If anything goes wrong with a new self-compiled kernel, the user
  can always boot back to the distribution kernel, so the .old
  backup files are not needed in the first place. Get rid of them
  to simplify and speed up the whole process.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1545393600">- 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
  * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1547985600">- Fix a missing space in example configs (boo#1121251)
  * adds 0587-Fix-a-missing-space-in-example-configs.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548072000">- Ensure mmc host modules get included properly (bsc#1119037)
  * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1548417600">- Remove invalid "FONT_MAP=none" from vconsole.conf (osc#1013573)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549281600">- Fix displaying text on emergency consoles (boo#1124088)
  - adds 0589-Fix-displaying-text-on-emergency-consoles.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549540800">- 91zipl: Don't use contents of commented lines (osc#1119499)
  * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1549972800">- Correct fix for displaying text on emergency consoles (boo#1124088)
  * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
  * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
- 95iscsi: handle qedi like bnx2i (bsc#1113712)
  * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1551096000">- purge-kernels: Avoid endless loop when uninstalling kernels that depend on
  KMPs which in themselves depend on other packages (bsc#1125327)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551355200">- Handle non-versioned dependency in purge-kernels.</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552305600">- Check SUSE kernel module dependencies recursively (bsc#1127891)
  * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
- Avoid "Failed to chown ... Operation not permitted" when run from non-root,
  by not copying xattrs. (osc#1092178)
  * adds 0593-dracut-only-copy-xattr-if-root.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1552564800">- Bump version to 044.2 to provide a version to lock on to (bsc#1127891)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556107200">- 95iscsi: avoid error messages when building initrd, multipath timeouts
  (bsc#1130114, bsc#1130107, bsc#1121238)
  * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
  * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
  * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
  * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
  * adds 0599-iscsiroot-try-targets-only-once.patch
  * adds 0600-iscsiroot-remove-bashisms.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1556193600">- dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
  * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560427200">- Ensure GPIO modules get included on ARM (bsc#1133819)
  * adds 0605-Add-gpio-and-pinctrl-drivers-for-arm-aarch64.patch
- Fix Routes are not properly added due to spelling error (bsc#1134347)
  * adds 0604-40network-Fix-spelling-error-while-parsing-and-addin.patch
- Decouple iscsi from sysinit.target (boo#1134472)
  * adds 0603-95iscsi-fix-a-typo-in-a-name-of-iscsiuio.patch
  * adds 0602-95iscsi-decouple-iscsi-from-sysinit.target.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1560772800">- Ensure early microcode gets added from files with .early postfix
  (bsc#1098915, bsc#1125393)
  * adds 0606-ucode-properly-include-early-only-ucode.patch</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1561636800">- 95dasd-rules &amp; 95zfcp-rules: Look for correct rule name (bsc#1137784)
  * adds 0607-95dasd-rules-95zfcp_rules-Look-for-correct-rule-name.patch</changelog>
</package>
<package pkgid="17762f4463ba056c7df19674ba4e403833c2da2817355387dd5ed09494d0ae83" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.13+git.b83ade31" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="0f9b95314f56711bc5c4817c385d8a5ab4c21d050f8f2fc09357249bdd4fdb19" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.15+git.c46d2790" rel="lp150.2.5.1"/>
  <changelog author="nwang@suse.com" date="1477310400">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
</package>
<package pkgid="c1e46b27b013e231a279f8d1fefa1f63f26a006f1d828ce430402ac78c6c4d60" name="drbd" arch="src">
  <version epoch="0" ver="9.0.15+git.c46d2790" rel="lp150.2.9.1"/>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="0342c208bb98968c32a043a77a796012e221f6e83ff74b374a39c4e300a773eb" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.15+git.c46d2790" rel="lp150.2.9.1"/>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="d7f7fad1b75fb3824b2c607cbd71931e27b6429c227a092aa8829905e7f1b754" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.13+git.b83ade31_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="f938af97038fc78c7af4f8a530cdaf6fb897ba00ef5d8a24f226e0e30b2d00e4" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.15+git.c46d2790_k4.12.14_lp150.12.48" rel="lp150.2.5.1"/>
  <changelog author="nwang@suse.com" date="1477310400">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
</package>
<package pkgid="4f0a1091a8154d40ce88145a7ddc131b235173e1df99a1eb826cd6a40d60306a" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.15+git.c46d2790_k4.12.14_lp150.12.76" rel="lp150.2.9.1"/>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1566907200">- bsc#1146117, disallow dual primaries when not configured.
  Edit patch rely-on-sb-handles.patch</changelog>
</package>
<package pkgid="56ca246f9c3e8c6efda08c4791ad85e299603ffb8bcd4a2c269168e54160eea8" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.3.1" rel="lp150.2.3.1"/>
  <changelog author="nwang@suse.com" date="1470225600">- bsc#990834, remove the warning with experimental.
- Add warning when using multiple nodes.</changelog>
  <changelog author="nwang@suse.com" date="1481025600">- bsc#1006105, initialize node id when creating md.
- Add patch initialize-node-id-when-create-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1487073600">- bsc#1025585, update to v8.9.8
- Remove patch zeroout-discard-devices.patch
  Remove patch service-mod.patch</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Remove obsolete Requires for pre/post install sections</changelog>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1545134400">- bsc#1118974, remove the deprecated comment.
  Add patch remove-comment-of-drbdoverview.patch</changelog>
</package>
<package pkgid="2d4fe5f63febb2fb146ac9c7023b2ac8925a84fbba198ca78c3242741edd2d39" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.6.0" rel="lp150.7.1"/>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1545134400">- bsc#1118974, remove the deprecated comment.
  Add patch remove-comment-of-drbdoverview.patch</changelog>
  <changelog author="nwang@suse.com" date="1557489600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1563883200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1564488000">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac
  Remove patch remove-comment-of-drbdoverview.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
</package>
<package pkgid="2732022356c949ec5c00dde1e869364577266bb019cdd02eea100512c54c2094" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.6.0" rel="lp150.7.1"/>
  <changelog author="nwang@suse.com" date="1490184000">- Update to v8.9.10 for drbd9.0.6 and drbdmanage
- new drbdmon tool
  drbdadm parser got faster
  send SIGKILL to childs if parent drbdadm dies
  compat fixes for linux kernel</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to v8.9.11rc1
- OCF resource agent and crm-fence-peer for drbd9
  introduce quorum support
  JSON output fixes
  set bitmap to 0 on metadata creation
- Remove patch support-drbd9-ra.patch
  Remove patch initialize-node-id-when-create-md.patch
- Corresponding user space change of bsc#1031299</changelog>
  <changelog author="kgronlund@suse.com" date="1491307200">- Disable quorum in default configuration (bsc#1032142)
- Add 0001-Disable-quorum-in-default-configuration-bsc-1032142.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1491307201">- Update to v8.9.11
  * No source changes from v8.9.11rc1</changelog>
  <changelog author="nwang@suse.com" date="1493294400">- bsc#1032074, fix Inconsistent metadata after upgrade
- Add Pass-md_index-information-to-detect_md.patch
  * will be merged into upstream in v8.9.12</changelog>
  <changelog author="nwang@suse.com" date="1496836800">- Update to v9.0.0
  * drbd udev: fix inconsistent inheritance of implicit volumes
  * Fix regressions of the out-of-the-box DRBD 8.4 experience
  * DrbdMon: can now focus on "problem" resources
  * v9: support new option on_no_quorum
  * drbdadm: fix segfaults, improve error reporting
  * adjust: fix deleting unrelated peer(s) on "adjust resource:specific-peer"
  * drbdmeta create-md/convert: fix check for existing external meta-data
- Merged into upstream, remove Pass-md_index-information-to-detect_md.patch</changelog>
  <changelog author="nwang@suse.com" date="1500984000">- bsc#1048671, Fix handler called from kernel always invalid
  for stacking resource
- Add fix_call_khelper_with_stack.patch</changelog>
  <changelog author="nwang@suse.com" date="1502452800">- bsc#1052352, support block drbd for legacy format.
- Add Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1503662400">- fate#323392, enable drbdmon which imported in 8.9.10</changelog>
  <changelog author="nwang@suse.com" date="1504267200">- Update to 9.1.0
  * allow events2 --now polling
  * fix ambiguous inheritance for peer-device-options
  * fixup fallback path for BLKZEROOUT for older kernels
  * fix v9 proxy support
  * modernized XEN scripts
  * reproducible builds support
  * create-md --force for v8.4 (for compat to v9)
  * fix cstate output
  * resize: give resize more time (same as attach)
  * drbdmon: peer-device status, version info, node name
  * "drbdadm status" for v8.4
  * set peer-device-options only once
- Remove Update-block-drbd-script-to-support-xen.patch</changelog>
  <changelog author="nwang@suse.com" date="1508155200">- bsc#1061145, fencing is moved from disk secion to net
  Add move_fencing_from_disk_to_net_in_example.patch
- bsc#1061147, skip running drbdadm sh-b-pri in drbd9
  Add skip_sh-b-pri_in_v9.patch</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.2.0
  * Japanese man pages
  * initial vertias cluster agent support
  * quorum integration (including agents)
  * improve drbd9 (mesh)/drbd-proxy integration
  * pull fixups from 9.1.1 branch
  * switch to github
  * drbdmon: page naviagation
  * debian: add mount as dependency</changelog>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1545134400">- bsc#1118974, remove the deprecated comment.
  Add patch remove-comment-of-drbdoverview.patch</changelog>
  <changelog author="nwang@suse.com" date="1557489600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1563883200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1564488000">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac
  Remove patch remove-comment-of-drbdoverview.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
</package>
<package pkgid="696e1b785858ed26e96ae02e446fed41f7ba9d9339e58761e9248b3bb70e6f23" name="drkonqi5" arch="src">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502712000">- Initial package, split from plasma5-workspace</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Don't repeat work of KAboutData::setupCommandLine()
  * Call KLocalizedString::setApplicationDomain only after QApp creation</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Correct assert in BacktraceGenerator::start()
  * CMake: Announce dep on X11Extras in FeatureSummary
  * Make Qt5::X11Extras really optional
  * macOS: Don't create bundles for test executables
  * Modernize: Use nullptr where possible
  * Add a desktop file for DrKonqi to fix Wayland icon.
  * ui: Put colon inside italics tags</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Add explicit includes to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1552219200">- Add ptools as runtime dependency to get required tool
  pbuildid for fetching symbols</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1552219201">- Recommend gdb for useful backtraces (moved from the pattern)</changelog>
</package>
<package pkgid="8d18781a5c06ef778fd0efb99f4978fb0bd16f97848d5d61efe48a8a9591ba6e" name="drkonqi5" arch="x86_64">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502712000">- Initial package, split from plasma5-workspace</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Don't repeat work of KAboutData::setupCommandLine()
  * Call KLocalizedString::setApplicationDomain only after QApp creation</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Correct assert in BacktraceGenerator::start()
  * CMake: Announce dep on X11Extras in FeatureSummary
  * Make Qt5::X11Extras really optional
  * macOS: Don't create bundles for test executables
  * Modernize: Use nullptr where possible
  * Add a desktop file for DrKonqi to fix Wayland icon.
  * ui: Put colon inside italics tags</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Add explicit includes to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1552219200">- Add ptools as runtime dependency to get required tool
  pbuildid for fetching symbols</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1552219201">- Recommend gdb for useful backtraces (moved from the pattern)</changelog>
</package>
<package pkgid="a0877fa08fd0ae0f87e38590ec5f319d83120c80cd7b35d05aef6688d1e2f30f" name="drkonqi5-lang" arch="noarch">
  <version epoch="0" ver="5.12.8" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502712000">- Initial package, split from plasma5-workspace</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Don't repeat work of KAboutData::setupCommandLine()
  * Call KLocalizedString::setApplicationDomain only after QApp creation</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Correct assert in BacktraceGenerator::start()
  * CMake: Announce dep on X11Extras in FeatureSummary
  * Make Qt5::X11Extras really optional
  * macOS: Don't create bundles for test executables
  * Modernize: Use nullptr where possible
  * Add a desktop file for DrKonqi to fix Wayland icon.
  * ui: Put colon inside italics tags</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Add explicit includes to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- No code changes since 5.12.6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1551787200">- Update to 5.12.8
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.8.php
- No code changes since 5.12.7</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1552219200">- Add ptools as runtime dependency to get required tool
  pbuildid for fetching symbols</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1552219201">- Recommend gdb for useful backtraces (moved from the pattern)</changelog>
</package>
<package pkgid="363414304dc909b46e32f369c7ef641d473e37878769f7272a5332d26075029a" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp150.11.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="ec7cf9016965a81db1f77fe71eb8ecc91b755718caf7d2f838b6e1468719dcbe" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.11.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="7b23b8e4b0a9885b2f155262544f71365461a02f79dd911969ac9d9e3b6a7442" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="7f92f379a3b7936102ba35e1f41bd135b5f11a90068444dff6aec6f4d83dfe19" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="0951748f882520b0ad2db6c38957382eed572c939af6dd2090d89678bd1e2658" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp150.8.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="dd23d79f985664bfc9f82f740d7fdf0f1f1f765cdf655d521f5849834a37c920" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.8.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="584f1b6effd4cccbcded786d0e74fec0f528435ffd93a1709aee65b9cea6ff8c" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.11.1"/>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
</package>
<package pkgid="18a3d0ac87bf7839d6a298fa96c9c0317ec3ee1deacf13a7931bc63eea9c8d25" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="e528c1672fa119f6dbf84f4ce3f6cb98aad75c6f0d805372af5467c446ff301c" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.8.1"/>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
</package>
<package pkgid="8b7167eb59804210b595d8ee89c53079433ca550ef0ecf266cac9c72f0aa1d96" name="ebtables" arch="src">
  <version epoch="0" ver="2.0.10.4" rel="lp150.4.3.1"/>
  <changelog author="lnussel@suse.de" date="1306843200">- cleanup up initscript
  * don't use /var/lock/subsys
  * read /etc/sysconfig/ebtables for setting and restore state from
    /etc/ebtables where the script actually saved the state to.</changelog>
  <changelog author="puzel@novell.com" date="1307361600">- update to 2.0.9-2
  * fix unwanted zeroing of counters in the last user-defined chain
  * fix hidden symbol compilation error when using ld directly
  * fix return value checking of creat to give a correct error
    message if the atomic file couldn't be created
  * correct info in INSTALL about compilation of ulog
- use spec-cleaner
- update ebtables-v2.0.8-makefile.diff
- license is GPLv2, not GPLv2+
- package COPYING and ChangeLog files</changelog>
  <changelog author="jengelh@medozas.de" date="1310299200">- update to 2.0.10.1
  * fix --among-dst-file, which translated to --among-src
  * Makefile: respect LDFLAGS during ebtables build
  * Makefile: create directories to avoid build failure when DESTDIR
  is supplied
  * incorporate fixes for possible issues found by Coverity analysis
  * extend ebt_ip6 to allow matching on ipv6-icmp types/codes
  * add --concurrent option, which enables using a file lock to
  support concurrent scripts updating the ebtables kernel tables
- run spec-beautifier over specfile</changelog>
  <changelog author="jengelh@medozas.de" date="1313064000">- Update to new upstream release 2.0.10.2
  * minor compilation fixes: respect LDFLAGS in Makefiles
- Remove obsolete ebtables-typepuns.diff patch (fixed upstream)</changelog>
  <changelog author="jengelh@medozas.de" date="1323000000">- Update to new upstream release 2.0.10.3
  * fix a counter setting bug</changelog>
  <changelog author="jengelh@medozas.de" date="1323950400">- Update to new upstream release 2.0.10.4
  * previous counter bug was still present and has been addressed now</changelog>
  <changelog author="jengelh@inai.de" date="1355918400">- Have build succeed on non-SUSE</changelog>
  <changelog author="vcizek@suse.com" date="1393588800">- add missing BuildRequires: sed (bnc#865848)</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Remove support for old distros from specfile
  (prjconf can do substitutions instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="bd86d42e800d1eb20083b87e301fe2c48c59a455a3c155cf1d378d282d31ca12" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp150.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
</package>
<package pkgid="afe3668afd9c038d1c125a2cab16ab95f17771bf50239ad6617b581497490932" name="elfutils" arch="src">
  <version epoch="0" ver="0.168" rel="lp150.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="7c7b8f66f957c1969591dfd48783e7ffd167a63f6bcba52b8d35409bedf022c3" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.168" rel="lp150.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="2ceb3ba6267b6161ad74b0dff447a3b2e4c40d3cfd0c621efa0e73bcc995b755" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.168" rel="lp150.3.3.1"/>
  <changelog author="tonyj@suse.com" date="1441972800">- Update to version 0.163
  Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
  Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
  Drop patch elfutils-portability-0.161.patch
  Add patch elfutils-portability-0.163.patch
  Changelog:
  0.163:
  - Bug fixes only, no new features.
  0.162:
  - libdw: Install new header elfutils/known-dwarf.h.
    dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
    DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
    handles DW_TAG_atomic_type.
  - addr2line: Input addresses are now always interpreted as hexadecimal
    numbers, never as octal or decimal numbers.
    New option -a, --addresses to print address before each entry.
    New option -C, --demangle to show demangled symbols.
    New option --pretty-print to print all information on one line.
  - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
  - backends: x32 support.</changelog>
  <changelog author="idonmez@suse.com" date="1448020800">- Update to version 0.164
  Drop the following patches, fixed upstream:
  * elfutils-portability-0.163.patch
  * elfutils-revert-portability-scanf.patch
  * elfutils-uninitialized.diff
  * libebl-prototype-fix.diff
  Changelog:
  - strip, unstrip:
  * Handle ELF files with merged strtab/shstrtab tables.
  * Handle missing SHF_INFO_LINK section flags.
  - libelf:
  * Use int64_t for offsets in libelf.h instead of loff_t.
  - libdw:
  * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
  - libdwfl:
  * dwfl_standard_find_debuginfo now searches any subdir of the binary
    path under the debuginfo root when the separate debug file couldn't
    be found by build-id.
  * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
    have been reported.
- Implement %check</changelog>
  <changelog author="schwab@suse.de" date="1450180800">- dt-ppc-opt.patch: add support for DT_PPC_OPT</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1456574400">- rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
  and add reference to upstream commit id</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1460808000">-  add elfutils-0.164-gcc6.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1467028800">- Update to version 0.166:
  + config: The default program prefix for the installed tools is now
  eu-. Use configure --program-prefix="" to not use a program
  prefix.
  + Various bugfixes.
- Drop elfutils-0.164-dt-ppc-opt.patch and
  elfutils-0.164-gcc6.patch (merged upstream)
- Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
  self-comparison error with GCC 6.
- Changes from 0.165:
  + Add eu-elfcompress
  + Add pkg-config files for libelf and libdw.</changelog>
  <changelog author="schwab@suse.de" date="1468238400">- disable-tests-with-ptrace.patch: disable tests that use ptrace when
  running under qemu-linux-user</changelog>
  <changelog author="matz@suse.com" date="1472558400">- Update to version 0.167:
  libasm: Add eBPF disassembler for EM_BPF files.
  backends: Add m68k and BPF backends.
  ld: Removed.
  dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
    dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
    dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
  Support compressed sections from binutils 2.27.
- Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.</changelog>
  <changelog author="mliska@suse.cz" date="1481284800">- Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
  new warning introduced in GCC 7.
- Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
  warning introduced in GCC 7.</changelog>
  <changelog author="rguenther@suse.com" date="1490875200">- Update to version 0.168:
  libelf: gelf_newehdr and gelf_newehdr now return void *.
  libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
  readelf: Add optional --symbols[=SECTION] argument to select section name.
- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
  and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
  required after a debugedit fix.</changelog>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="Joao Moreira &lt;jmoreira@suse.com&gt;" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="e0dd0c0cee5a1bd73149898e2dee5e2d9e8d25cabc982cc79a2de38f8cb8864e" name="emacs" arch="src">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="01f7aa204037224c477c6228a8cdca22318dd97aace6ac927a8a8306faba21a4" name="emacs" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="ccc67e2de16777bd3d0472471729555fb18d17ce8755a28e8606d96896fc0395" name="emacs-el" arch="noarch">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="66b376b397aef459ab0469292f078947a175afd10e00e759e28d5a585aef31f4" name="emacs-info" arch="noarch">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="9d13455715cd647c3e8d3d56410987ab8b5f8dbb5c0e1c70033727413ef19237" name="emacs-nox" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="23ce6286c9fcf0490145ef391a9e109dcc0aa7063368615ac2c92e5321949c45" name="emacs-x11" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="10bdf19de140c23cb68013c351b8e69c504fcedb7cf47f29fe0d0612e7cef715" name="endless-sky" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="lp150.2.3.1"/>
  <changelog author="mailaender@opensuse.org" date="1446292800">- initial packaging</changelog>
  <changelog author="mailaender@opensuse.org" date="1448107200">- update to 0.8.7
- use scons to install the game
- Added fix-data-path.patch to fix installation path of data.</changelog>
  <changelog author="rpm@fthiessen.de" date="1449662400">- Update to 0.8.8:
  * Fixed various bugs with how the game determines which ship is
    your "flagship."
  * The "Uninhabited" government on Ruin will no longer fine the
    player for illegal outfits.
  * Fixed a crash that could happen while taking off if missions
    failed due to lack of space.
  * For detailed changes see changelog in tar-ball.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1471176000">- update to 0.9.2
- see changelog file to list of changes</changelog>
  <changelog author="mailaender@opensuse.org" date="1472299200">- add license, copyright information and changelog
- add an appdata.xml file</changelog>
  <changelog author="mailaender@opensuse.org" date="1479556800">- update to 0.9.4
  * Vara Ke'sok no longer starts out as an Unfettered planet.
  * Fixed a hang that occurred when maximizing the window.
  * Systems created by game events are now properly connected to the map.
  * The info panel can now handle ships with many more outfits or weapons.
- drop appdata.patch (applied upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1500120000">- Update to 0.9.6
  * Fixed a depreciation bug causing random prices for outfits on some systems.
  * Eliminated "death benefits." Depreciation is now the main way that plundering is balanced.
  * Depreciation happens about 3 times slower than it did in 0.9.5.
  * Coalition jobs now "repeat" instead of only being offered once.
  * Fixed a bug where "surveillance" ships scan the player's ship over and over.
  * Added images for all the Coalition and Heliarch outfits.</changelog>
  <changelog author="sparschauer@suse.de" date="1545048000">- Prevent that the game blocks the main menu buttons due to broken
  symlinks in the data directory caused by brp-25-symlink not handling
  spaces in paths properly (boo#1119628, boo#1119674)
  * Let fdupes create hardlinks instead of symlinks as a workaround</changelog>
</package>
<package pkgid="e9e5b0a092bf51f503cbebcaf9161a008b450063c2391ad0ee07f5fa0f2240c9" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.11" rel="lp150.31.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="6f009d0c11e5aa060b0bcc63fdf1021b539cf20d65eee510bf5e0580d2d38377" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="lp150.31.1"/>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
</package>
<package pkgid="97c5f58da1e7163b529b10bed38128ce1b61b756448b6a9570e67a75b00abae5" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="d109dca08134f7bac2ea74cad506bcbbab16d38967135ddd98674dbfae300379" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="2f9b341d33a753845cb311cbe193646854c0bf9283e854ffac4c2b25fafc9732" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="48401c06c2f4d72c1aff0f82ff7a1c584a5b4b10ee7656d574a4fda32be2a46d" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="lp150.2.12.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="a0d7277c8c39ffd4c1937319f2a179468c4eb6619b6cac29e3157c990d7619d4" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp150.2.15.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="67f159495a2aa59b4cfd7c17b07dd751776fe3bec4886e9d32f6989dbeea6018" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.18.1"/>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
</package>
<package pkgid="f2083eee9fc802d9b39a2d4028ce6121e435ac08e6c088a3e853bc5d80207b29" name="enigmail" arch="src">
  <version epoch="0" ver="2.1.2" rel="lp150.34.1"/>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
</package>
<package pkgid="04ec97f66ed44887d6acc6d55d0eeac8e6a0c2ea39336167df17d059aeb9f512" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="lp150.34.1"/>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- enigmail 2.0.9, fixing one security issues:
  * An HTTP authentication dialog maye displayed during web key
    discovery, allowing remote attackers to possibly trick the user
    into entering e-mail credentials (bsc#1118935)
- other bugs fixed:
  * pEp - PGP/MIME signed-only messages are ignored
  * Autocrypt overrules manually created Per-Recipient Rules
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1553860800">- enigmail 2.0.10:
  * various bug fixes for configuring and handling encrypted e-mail
  * UI fixes for dialogs, messages, and dark Thunderbird themes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1558526400">- enigmail 2.0.11:
  * CVE-2019-12269: Specially crafted inline PGP messages could
    spoof a "correctly signed" message (boo#1135855)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1562846400">- enimail 2.0.12:
  * set the default keyserver to keys.openpgp.org in order to
    mitigate the SKS Keyserver Network Attack boo#1141025</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566302400">- enigmail 2.1.2:
  * compatibility with Mozilla Thunderbird 68
  * New simplified setup wizard
  * Full support for keys.openpgp.org
  * Default to ECC keys on GnuPG 2.1 or later
  * Autocrypt: implemented key-gossip and updates to known keys</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1568980800">- boo#1151317: SeaMonkey is no longer supported. Update description
  and no longer put in SeaMonkey addons path</changelog>
</package>
<package pkgid="a0cce2ac93f79de5611b8e364dd340146293ce8240673f77ce08f4d41003c033" name="epiphany" arch="src">
  <version epoch="0" ver="3.28.1.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="3252c60ed09a244fc21dba146f294d4e6aa0bfb88468aed07b279e1539889943" name="epiphany" arch="x86_64">
  <version epoch="0" ver="3.28.1.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="086b2fe9b297dc12887e999a9f161599c35b2830c8da5a73ed7ae5d891c14ef7" name="epiphany-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.28.1.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="cac86d5ebe3bff274ecce07ef797fe242d60737ca42ad3cea968e01663e161bc" name="epiphany-lang" arch="noarch">
  <version epoch="0" ver="3.28.1.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="c87b787532c5452dabe6f20c20cb46ce4f230cb142bf6533a041d1456fbc683a" name="eric" arch="noarch">
  <version epoch="0" ver="18.06" rel="lp150.2.15"/>
  <changelog author="termim@gmail.com" date="1494072000">- Update to 17.05
  - bug fixes
  - Editor
  - - changed the indication of the current instruction line and the error line
    to use a green or red arrow instead of a colored background
  - PyQt Tools
  - - added a configuration option for the path of the PyQt tools
  - Shell
  - - added a standalone shell window
  - Web Browser (NG)
  - - added the last visited time and date to the bookmark properties dialog
  - - added a visit count to the history entries (shown in the history dialog)
  - - made full screen mode really full screen
  - Third Party packages
  - - updated Pygments to 2.2.0
  - - updated chardet to 3.0.2</changelog>
  <changelog author="termim@gmail.com" date="1498996800">- Update to 17.07
  - Background Services
  - - added functionality to limit the number of processes used for
    background services
  - Bug Reporting / Feature Request (Email)
  - - added the capability to send these emails via Google Mail using
    OAuth2 authentication
  - Diff Dialogs
  - -  made the colors of the diff dialogs configurable
  - Third Party packages
  - - updated chardet to 3.0.4
- Update to 17.06
  - bug fixes
  - Checkers
  - - extended the source documentation checker to check for raised/documented
    exceptions and defined/documented signals
  - Editor
  - - reintroduced the highlighting of current instruction line and the error
    line using colored background. It is configurable whether to use these
    backgrounds or the arrows.
  - - added capability to perform the various replace methods via keyboard
    shortcuts
  - Plugin Manager
  - - added an option to cleanup the plug-ins download area during startup
  - Qt Tools
  - - added code to auto-discover the presence of the new 'pyqt5-tools' wheel
    (Windows only) (thanks to Kyle Altendorf for providing this wheel)
  - Web Browser (NG)
  - - united the stop and reload buttons of the navigation bar
  - - added a super menu to modernize the look &amp; feel
  - - added Ctrl-Click and middle click actions to the navigation buttons
    to perform the action in a new tab</changelog>
  <changelog author="termim@gmail.com" date="1501848000">- Update to 17.08
  - bug fixes
  - Shell
  - - added support for different history navigation styles (disabled,
    Linux, Windows)
  - - improved shell history dialog
  - Templates
  - added some new predefined template variables (time, path_name_rel,
    dir_name_rel)
  - Web Browser (NG)
  - - added support for sessions</changelog>
  <changelog author="termim@gmail.com" date="1504267200">- Update to 17.09
  - bug fixes
  - Debugger
  - -  unified the Python2 and Python3 debugger interfaces
  - Exporter
  - - extended the HTML exporter to convert Markdown and ReST files to
    HTML
  - Plugin Manager
  - - added a bar with counts for new/local updates/remote updates to the
    plug-in repository dialog
  - Previewers
  - - added capability to configure the output format for the markdown
    and docutils (ReST) previewers
  - Web Browser (NG)
  - - added support for Google Safe Browsing
  - Third Party packages
  - - updated jasy to 1.5-beta5 (latest release available)
- remove i18 tarballs - they are already in the main archive.</changelog>
  <changelog author="termim@gmail.com" date="1507550400">- Update to 17.10
  - bug fixes
  - Web Browser (NG)
  - added a downloader and installer/uninstaller dialog for spell check
    dictionaries</changelog>
  <changelog author="termim@gmail.com" date="1509710400">- Update to 17.11
  - Debugger:
  - added capability to enter an interpreter in the Start... dialog
  - Editor
  - added support for auto-completion lists being provided asynchronously
  - added a viewer for source code documentation extracted by providers
    to be implemented by plug-ins (like rope and jedi)
  - Web Browser (old style)
  - changed logic in order to put new downloads at the top of the list of
    downloads and added the download date and time to the shown info
  - Web Browser (NG)
  - changed logic in order to put new downloads at the top of the list of
    downloads and added the download date and time to the shown info</changelog>
  <changelog author="termim@gmail.com" date="1511092800">- Update to 17.11.1
  - Bug fixes</changelog>
  <changelog author="termim@gmail.com" date="1512475200">- Update to 17.12:
  - bug fixes
  - General
  - - added support for Google protobuf protocol files
  - Code Documentation Viewer
  - - added possibility to show the type of the object info is shown for
  - - modified the top row and the search part in order to allow smaller sizes
  - Debugger / Variables Viewer
  - - introduced a configuration option to limit the variables shown by the
    variables viewers depending on their size (in order to avoid overload
    situations on low power or low memory machines)
  - Styles
  - - added a dark style (*.qss and Python lexers) provided by Giuseppe
    Corbelli
  - Third Party packages
  - - updated send2trash to version 1.4.2
  * *NOTE**: This release introduces a new project file format that will be
    rejected by previous releases. The new format is needed for the Google
    protobuf support.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512734400">- Use PyQt5
- Drop python3-sip requires, python-qt5 already requires it
- Run spec-cleaner
- Use full URL for Source:</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Remove marketing from description.</changelog>
  <changelog author="termim@gmail.com" date="1515067200">- fix rpm build</changelog>
  <changelog author="termim@gmail.com" date="1515240000">- Update to 18.01:
  - bug fixes
  - Debugger / Breakpoint Viewer
  - - added the capability to remember the most recently used file names and
    conditions
  - Editor
  - - added an action to the view menu to clear all folds of the current editor
  - - added an entry to delete all change markers to the marker margin context
    menu
  - Project
  - - If a project does not contain protobuf files, the old project file format
    (5.1) is generated to make the file backward compatible.
  - Plug-ins
  - - added the pip interface plug-in to the core plug-ins
  - - added the virtualenv/pyvenv interface plug-in to the core plug-ins
  - - added the setup.py wizard plug-in to the core plug-ins
  - - added the eric plug-in wizard plug-in to the core plug-ins
  - - added the .desktop wizard plug-in to the core plug-ins
  - - added the translator plug-in to the core plug-ins
  - - added the git plug-in to the core plug-ins
  * *Note**: These plug-ins should be deinstalled via the plug-in
  uninstallation dialog of eric before upgrading eric. A reconfiguration of
  these plug-ins may be neccessary.
  - PluginToolPip
  - PluginWizardVirtualenv</changelog>
  <changelog author="hpj@urpla.net" date="1525089600">- Update to 18.04:
  - bug fixes
  - General
  - - added config option to disable the use of the global menu bar on Linux
    Code Style Checker
  - - added checks for default docstring in functions and modules
  - - added check for dictionaries with sorted keys
  - - added checks for logging statements
  - - added check for the 'gettext' import statement
  - - added some checks of the bugbear checker
- Update to 18.03:
  - bug fixes
  - Editor
  - - added support for EditorConfig
  - - added VCS conflict markers to the types shown on the marker map
- Update to 18.02:
  - bug fixes
  - General
  - - extended the session to store/retrieve the split views and the order of
    the editors (Note: The new session file format is not backward compatible
    and cannot be read by eric releases prior to 18.02)
  - - added basic support for Cython
  - Editor
  - - added a context menu entry to "Execute Selection In Console"
  - Web Browser (NG)
  - - added support for HTML5 "Desktop Video Capture" and "Desktop Audio and
    Video Capture" as of Qt 5.10.0/PyQt 5.10.0
  - - added the capability to pause/resume download (Qt 5.10.0/PyQt 5.10.0)
  - - added support for attributes introduced by Qt 5.9 and Qt 5.10
- Rename package to eric6</changelog>
  <changelog author="hpj@urpla.net" date="1525176000">- Update to 18.05:
  - bug fixes
  - General
  - - added the '--disable-plugin=' option to disable plug-ins via the command
    line
  - Code Style Checker
  - - added support for '# noqa' and '# NOQA' comments to suppress warnings
  - - extended the dialog to be able to define the number of blank lines
    before class and function/method definitions
  - Project
  - - added support for 'make' to the Project menu and run it automatically
    before the main script is started (configuration option)
  - Syntax Checker
  - - added support for '# noqa' and '# NOQA' comments to suppress warnings
  - Translator
  - - updated the translator URL for DeepL
  - Web Browser (NG)
  - - improvement of the download manager
  - - added support for the Google Safe Browsing Lookup API (v4)
  - Third Party packages
  - - updated coverage.py to 4.5.1
  - - updated pycodestyle to 2.4.0
  - - updated send2trash to version 1.5.0
- Fix desktop files executable path</changelog>
  <changelog author="hpj@urpla.net" date="1525435200">- use upstream fix for desktop files</changelog>
  <changelog author="hpj@urpla.net" date="1526904000">- fix requires/obsoletes
- cleanup spec</changelog>
  <changelog author="mcepl@suse.com" date="1527163200">- Rename files from eric6 to eric, when applicable
- Build with Qt4 on LEAP 42.3</changelog>
  <changelog author="hpj@urpla.net" date="1527422400">- Use build conditionals to select qt version
- Further spec file cleanup
- Fix eric-api recommendation</changelog>
  <changelog author="hpj@urpla.net" date="1528113600">- Update to 18.06:
  - bug fixes
  - Editor
  - - added a configuration option (Editor-&gt;Style page) to show the marker map
    on the left or right of the editor
  - - added a context menu for the "fold" margin
  - - improved handling of folded lines when using "go to" functions
  - - resize auto complete list box to fit with contents
  - - added a configuration option (Editor-&gt;autocomplete to set up maximum
    width and height of the auto complete list box
  - Shell
  - - resize auto complete list box to fit with contents
  - pip Interface
  - - added an action to install a locally available package/wheel
  - Web Browser (NG)
  - - improved the sending of the "Referer" header like it is done by Firefox
- remove eric-fix-bindir.patch: desktop files install fix is released from
  upstream</changelog>
  <changelog author="hpj@urpla.net" date="1528372800">- fix api requires/obsoletes</changelog>
</package>
<package pkgid="9bb1f309b854dce21080f83e564c89f140858b64e310240b3ca55fe5f54ab5a2" name="eric" arch="src">
  <version epoch="0" ver="18.06" rel="lp150.2.15"/>
  <changelog author="termim@gmail.com" date="1494072000">- Update to 17.05
  - bug fixes
  - Editor
  - - changed the indication of the current instruction line and the error line
    to use a green or red arrow instead of a colored background
  - PyQt Tools
  - - added a configuration option for the path of the PyQt tools
  - Shell
  - - added a standalone shell window
  - Web Browser (NG)
  - - added the last visited time and date to the bookmark properties dialog
  - - added a visit count to the history entries (shown in the history dialog)
  - - made full screen mode really full screen
  - Third Party packages
  - - updated Pygments to 2.2.0
  - - updated chardet to 3.0.2</changelog>
  <changelog author="termim@gmail.com" date="1498996800">- Update to 17.07
  - Background Services
  - - added functionality to limit the number of processes used for
    background services
  - Bug Reporting / Feature Request (Email)
  - - added the capability to send these emails via Google Mail using
    OAuth2 authentication
  - Diff Dialogs
  - -  made the colors of the diff dialogs configurable
  - Third Party packages
  - - updated chardet to 3.0.4
- Update to 17.06
  - bug fixes
  - Checkers
  - - extended the source documentation checker to check for raised/documented
    exceptions and defined/documented signals
  - Editor
  - - reintroduced the highlighting of current instruction line and the error
    line using colored background. It is configurable whether to use these
    backgrounds or the arrows.
  - - added capability to perform the various replace methods via keyboard
    shortcuts
  - Plugin Manager
  - - added an option to cleanup the plug-ins download area during startup
  - Qt Tools
  - - added code to auto-discover the presence of the new 'pyqt5-tools' wheel
    (Windows only) (thanks to Kyle Altendorf for providing this wheel)
  - Web Browser (NG)
  - - united the stop and reload buttons of the navigation bar
  - - added a super menu to modernize the look &amp; feel
  - - added Ctrl-Click and middle click actions to the navigation buttons
    to perform the action in a new tab</changelog>
  <changelog author="termim@gmail.com" date="1501848000">- Update to 17.08
  - bug fixes
  - Shell
  - - added support for different history navigation styles (disabled,
    Linux, Windows)
  - - improved shell history dialog
  - Templates
  - added some new predefined template variables (time, path_name_rel,
    dir_name_rel)
  - Web Browser (NG)
  - - added support for sessions</changelog>
  <changelog author="termim@gmail.com" date="1504267200">- Update to 17.09
  - bug fixes
  - Debugger
  - -  unified the Python2 and Python3 debugger interfaces
  - Exporter
  - - extended the HTML exporter to convert Markdown and ReST files to
    HTML
  - Plugin Manager
  - - added a bar with counts for new/local updates/remote updates to the
    plug-in repository dialog
  - Previewers
  - - added capability to configure the output format for the markdown
    and docutils (ReST) previewers
  - Web Browser (NG)
  - - added support for Google Safe Browsing
  - Third Party packages
  - - updated jasy to 1.5-beta5 (latest release available)
- remove i18 tarballs - they are already in the main archive.</changelog>
  <changelog author="termim@gmail.com" date="1507550400">- Update to 17.10
  - bug fixes
  - Web Browser (NG)
  - added a downloader and installer/uninstaller dialog for spell check
    dictionaries</changelog>
  <changelog author="termim@gmail.com" date="1509710400">- Update to 17.11
  - Debugger:
  - added capability to enter an interpreter in the Start... dialog
  - Editor
  - added support for auto-completion lists being provided asynchronously
  - added a viewer for source code documentation extracted by providers
    to be implemented by plug-ins (like rope and jedi)
  - Web Browser (old style)
  - changed logic in order to put new downloads at the top of the list of
    downloads and added the download date and time to the shown info
  - Web Browser (NG)
  - changed logic in order to put new downloads at the top of the list of
    downloads and added the download date and time to the shown info</changelog>
  <changelog author="termim@gmail.com" date="1511092800">- Update to 17.11.1
  - Bug fixes</changelog>
  <changelog author="termim@gmail.com" date="1512475200">- Update to 17.12:
  - bug fixes
  - General
  - - added support for Google protobuf protocol files
  - Code Documentation Viewer
  - - added possibility to show the type of the object info is shown for
  - - modified the top row and the search part in order to allow smaller sizes
  - Debugger / Variables Viewer
  - - introduced a configuration option to limit the variables shown by the
    variables viewers depending on their size (in order to avoid overload
    situations on low power or low memory machines)
  - Styles
  - - added a dark style (*.qss and Python lexers) provided by Giuseppe
    Corbelli
  - Third Party packages
  - - updated send2trash to version 1.4.2
  * *NOTE**: This release introduces a new project file format that will be
    rejected by previous releases. The new format is needed for the Google
    protobuf support.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512734400">- Use PyQt5
- Drop python3-sip requires, python-qt5 already requires it
- Run spec-cleaner
- Use full URL for Source:</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Remove marketing from description.</changelog>
  <changelog author="termim@gmail.com" date="1515067200">- fix rpm build</changelog>
  <changelog author="termim@gmail.com" date="1515240000">- Update to 18.01:
  - bug fixes
  - Debugger / Breakpoint Viewer
  - - added the capability to remember the most recently used file names and
    conditions
  - Editor
  - - added an action to the view menu to clear all folds of the current editor
  - - added an entry to delete all change markers to the marker margin context
    menu
  - Project
  - - If a project does not contain protobuf files, the old project file format
    (5.1) is generated to make the file backward compatible.
  - Plug-ins
  - - added the pip interface plug-in to the core plug-ins
  - - added the virtualenv/pyvenv interface plug-in to the core plug-ins
  - - added the setup.py wizard plug-in to the core plug-ins
  - - added the eric plug-in wizard plug-in to the core plug-ins
  - - added the .desktop wizard plug-in to the core plug-ins
  - - added the translator plug-in to the core plug-ins
  - - added the git plug-in to the core plug-ins
  * *Note**: These plug-ins should be deinstalled via the plug-in
  uninstallation dialog of eric before upgrading eric. A reconfiguration of
  these plug-ins may be neccessary.
  - PluginToolPip
  - PluginWizardVirtualenv</changelog>
  <changelog author="hpj@urpla.net" date="1525089600">- Update to 18.04:
  - bug fixes
  - General
  - - added config option to disable the use of the global menu bar on Linux
    Code Style Checker
  - - added checks for default docstring in functions and modules
  - - added check for dictionaries with sorted keys
  - - added checks for logging statements
  - - added check for the 'gettext' import statement
  - - added some checks of the bugbear checker
- Update to 18.03:
  - bug fixes
  - Editor
  - - added support for EditorConfig
  - - added VCS conflict markers to the types shown on the marker map
- Update to 18.02:
  - bug fixes
  - General
  - - extended the session to store/retrieve the split views and the order of
    the editors (Note: The new session file format is not backward compatible
    and cannot be read by eric releases prior to 18.02)
  - - added basic support for Cython
  - Editor
  - - added a context menu entry to "Execute Selection In Console"
  - Web Browser (NG)
  - - added support for HTML5 "Desktop Video Capture" and "Desktop Audio and
    Video Capture" as of Qt 5.10.0/PyQt 5.10.0
  - - added the capability to pause/resume download (Qt 5.10.0/PyQt 5.10.0)
  - - added support for attributes introduced by Qt 5.9 and Qt 5.10
- Rename package to eric6</changelog>
  <changelog author="hpj@urpla.net" date="1525176000">- Update to 18.05:
  - bug fixes
  - General
  - - added the '--disable-plugin=' option to disable plug-ins via the command
    line
  - Code Style Checker
  - - added support for '# noqa' and '# NOQA' comments to suppress warnings
  - - extended the dialog to be able to define the number of blank lines
    before class and function/method definitions
  - Project
  - - added support for 'make' to the Project menu and run it automatically
    before the main script is started (configuration option)
  - Syntax Checker
  - - added support for '# noqa' and '# NOQA' comments to suppress warnings
  - Translator
  - - updated the translator URL for DeepL
  - Web Browser (NG)
  - - improvement of the download manager
  - - added support for the Google Safe Browsing Lookup API (v4)
  - Third Party packages
  - - updated coverage.py to 4.5.1
  - - updated pycodestyle to 2.4.0
  - - updated send2trash to version 1.5.0
- Fix desktop files executable path</changelog>
  <changelog author="hpj@urpla.net" date="1525435200">- use upstream fix for desktop files</changelog>
  <changelog author="hpj@urpla.net" date="1526904000">- fix requires/obsoletes
- cleanup spec</changelog>
  <changelog author="mcepl@suse.com" date="1527163200">- Rename files from eric6 to eric, when applicable
- Build with Qt4 on LEAP 42.3</changelog>
  <changelog author="hpj@urpla.net" date="1527422400">- Use build conditionals to select qt version
- Further spec file cleanup
- Fix eric-api recommendation</changelog>
  <changelog author="hpj@urpla.net" date="1528113600">- Update to 18.06:
  - bug fixes
  - Editor
  - - added a configuration option (Editor-&gt;Style page) to show the marker map
    on the left or right of the editor
  - - added a context menu for the "fold" margin
  - - improved handling of folded lines when using "go to" functions
  - - resize auto complete list box to fit with contents
  - - added a configuration option (Editor-&gt;autocomplete to set up maximum
    width and height of the auto complete list box
  - Shell
  - - resize auto complete list box to fit with contents
  - pip Interface
  - - added an action to install a locally available package/wheel
  - Web Browser (NG)
  - - improved the sending of the "Referer" header like it is done by Firefox
- remove eric-fix-bindir.patch: desktop files install fix is released from
  upstream</changelog>
  <changelog author="hpj@urpla.net" date="1528372800">- fix api requires/obsoletes</changelog>
</package>
<package pkgid="ad58364e555b91d1ed4e57346fda0b9583454ea8fb013431eb6499d0a158f292" name="eric-api" arch="noarch">
  <version epoch="0" ver="18.06" rel="lp150.2.15"/>
  <changelog author="termim@gmail.com" date="1494072000">- Update to 17.05
  - bug fixes
  - Editor
  - - changed the indication of the current instruction line and the error line
    to use a green or red arrow instead of a colored background
  - PyQt Tools
  - - added a configuration option for the path of the PyQt tools
  - Shell
  - - added a standalone shell window
  - Web Browser (NG)
  - - added the last visited time and date to the bookmark properties dialog
  - - added a visit count to the history entries (shown in the history dialog)
  - - made full screen mode really full screen
  - Third Party packages
  - - updated Pygments to 2.2.0
  - - updated chardet to 3.0.2</changelog>
  <changelog author="termim@gmail.com" date="1498996800">- Update to 17.07
  - Background Services
  - - added functionality to limit the number of processes used for
    background services
  - Bug Reporting / Feature Request (Email)
  - - added the capability to send these emails via Google Mail using
    OAuth2 authentication
  - Diff Dialogs
  - -  made the colors of the diff dialogs configurable
  - Third Party packages
  - - updated chardet to 3.0.4
- Update to 17.06
  - bug fixes
  - Checkers
  - - extended the source documentation checker to check for raised/documented
    exceptions and defined/documented signals
  - Editor
  - - reintroduced the highlighting of current instruction line and the error
    line using colored background. It is configurable whether to use these
    backgrounds or the arrows.
  - - added capability to perform the various replace methods via keyboard
    shortcuts
  - Plugin Manager
  - - added an option to cleanup the plug-ins download area during startup
  - Qt Tools
  - - added code to auto-discover the presence of the new 'pyqt5-tools' wheel
    (Windows only) (thanks to Kyle Altendorf for providing this wheel)
  - Web Browser (NG)
  - - united the stop and reload buttons of the navigation bar
  - - added a super menu to modernize the look &amp; feel
  - - added Ctrl-Click and middle click actions to the navigation buttons
    to perform the action in a new tab</changelog>
  <changelog author="termim@gmail.com" date="1501848000">- Update to 17.08
  - bug fixes
  - Shell
  - - added support for different history navigation styles (disabled,
    Linux, Windows)
  - - improved shell history dialog
  - Templates
  - added some new predefined template variables (time, path_name_rel,
    dir_name_rel)
  - Web Browser (NG)
  - - added support for sessions</changelog>
  <changelog author="termim@gmail.com" date="1504267200">- Update to 17.09
  - bug fixes
  - Debugger
  - -  unified the Python2 and Python3 debugger interfaces
  - Exporter
  - - extended the HTML exporter to convert Markdown and ReST files to
    HTML
  - Plugin Manager
  - - added a bar with counts for new/local updates/remote updates to the
    plug-in repository dialog
  - Previewers
  - - added capability to configure the output format for the markdown
    and docutils (ReST) previewers
  - Web Browser (NG)
  - - added support for Google Safe Browsing
  - Third Party packages
  - - updated jasy to 1.5-beta5 (latest release available)
- remove i18 tarballs - they are already in the main archive.</changelog>
  <changelog author="termim@gmail.com" date="1507550400">- Update to 17.10
  - bug fixes
  - Web Browser (NG)
  - added a downloader and installer/uninstaller dialog for spell check
    dictionaries</changelog>
  <changelog author="termim@gmail.com" date="1509710400">- Update to 17.11
  - Debugger:
  - added capability to enter an interpreter in the Start... dialog
  - Editor
  - added support for auto-completion lists being provided asynchronously
  - added a viewer for source code documentation extracted by providers
    to be implemented by plug-ins (like rope and jedi)
  - Web Browser (old style)
  - changed logic in order to put new downloads at the top of the list of
    downloads and added the download date and time to the shown info
  - Web Browser (NG)
  - changed logic in order to put new downloads at the top of the list of
    downloads and added the download date and time to the shown info</changelog>
  <changelog author="termim@gmail.com" date="1511092800">- Update to 17.11.1
  - Bug fixes</changelog>
  <changelog author="termim@gmail.com" date="1512475200">- Update to 17.12:
  - bug fixes
  - General
  - - added support for Google protobuf protocol files
  - Code Documentation Viewer
  - - added possibility to show the type of the object info is shown for
  - - modified the top row and the search part in order to allow smaller sizes
  - Debugger / Variables Viewer
  - - introduced a configuration option to limit the variables shown by the
    variables viewers depending on their size (in order to avoid overload
    situations on low power or low memory machines)
  - Styles
  - - added a dark style (*.qss and Python lexers) provided by Giuseppe
    Corbelli
  - Third Party packages
  - - updated send2trash to version 1.4.2
  * *NOTE**: This release introduces a new project file format that will be
    rejected by previous releases. The new format is needed for the Google
    protobuf support.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512734400">- Use PyQt5
- Drop python3-sip requires, python-qt5 already requires it
- Run spec-cleaner
- Use full URL for Source:</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Remove marketing from description.</changelog>
  <changelog author="termim@gmail.com" date="1515067200">- fix rpm build</changelog>
  <changelog author="termim@gmail.com" date="1515240000">- Update to 18.01:
  - bug fixes
  - Debugger / Breakpoint Viewer
  - - added the capability to remember the most recently used file names and
    conditions
  - Editor
  - - added an action to the view menu to clear all folds of the current editor
  - - added an entry to delete all change markers to the marker margin context
    menu
  - Project
  - - If a project does not contain protobuf files, the old project file format
    (5.1) is generated to make the file backward compatible.
  - Plug-ins
  - - added the pip interface plug-in to the core plug-ins
  - - added the virtualenv/pyvenv interface plug-in to the core plug-ins
  - - added the setup.py wizard plug-in to the core plug-ins
  - - added the eric plug-in wizard plug-in to the core plug-ins
  - - added the .desktop wizard plug-in to the core plug-ins
  - - added the translator plug-in to the core plug-ins
  - - added the git plug-in to the core plug-ins
  * *Note**: These plug-ins should be deinstalled via the plug-in
  uninstallation dialog of eric before upgrading eric. A reconfiguration of
  these plug-ins may be neccessary.
  - PluginToolPip
  - PluginWizardVirtualenv</changelog>
  <changelog author="hpj@urpla.net" date="1525089600">- Update to 18.04:
  - bug fixes
  - General
  - - added config option to disable the use of the global menu bar on Linux
    Code Style Checker
  - - added checks for default docstring in functions and modules
  - - added check for dictionaries with sorted keys
  - - added checks for logging statements
  - - added check for the 'gettext' import statement
  - - added some checks of the bugbear checker
- Update to 18.03:
  - bug fixes
  - Editor
  - - added support for EditorConfig
  - - added VCS conflict markers to the types shown on the marker map
- Update to 18.02:
  - bug fixes
  - General
  - - extended the session to store/retrieve the split views and the order of
    the editors (Note: The new session file format is not backward compatible
    and cannot be read by eric releases prior to 18.02)
  - - added basic support for Cython
  - Editor
  - - added a context menu entry to "Execute Selection In Console"
  - Web Browser (NG)
  - - added support for HTML5 "Desktop Video Capture" and "Desktop Audio and
    Video Capture" as of Qt 5.10.0/PyQt 5.10.0
  - - added the capability to pause/resume download (Qt 5.10.0/PyQt 5.10.0)
  - - added support for attributes introduced by Qt 5.9 and Qt 5.10
- Rename package to eric6</changelog>
  <changelog author="hpj@urpla.net" date="1525176000">- Update to 18.05:
  - bug fixes
  - General
  - - added the '--disable-plugin=' option to disable plug-ins via the command
    line
  - Code Style Checker
  - - added support for '# noqa' and '# NOQA' comments to suppress warnings
  - - extended the dialog to be able to define the number of blank lines
    before class and function/method definitions
  - Project
  - - added support for 'make' to the Project menu and run it automatically
    before the main script is started (configuration option)
  - Syntax Checker
  - - added support for '# noqa' and '# NOQA' comments to suppress warnings
  - Translator
  - - updated the translator URL for DeepL
  - Web Browser (NG)
  - - improvement of the download manager
  - - added support for the Google Safe Browsing Lookup API (v4)
  - Third Party packages
  - - updated coverage.py to 4.5.1
  - - updated pycodestyle to 2.4.0
  - - updated send2trash to version 1.5.0
- Fix desktop files executable path</changelog>
  <changelog author="hpj@urpla.net" date="1525435200">- use upstream fix for desktop files</changelog>
  <changelog author="hpj@urpla.net" date="1526904000">- fix requires/obsoletes
- cleanup spec</changelog>
  <changelog author="mcepl@suse.com" date="1527163200">- Rename files from eric6 to eric, when applicable
- Build with Qt4 on LEAP 42.3</changelog>
  <changelog author="hpj@urpla.net" date="1527422400">- Use build conditionals to select qt version
- Further spec file cleanup
- Fix eric-api recommendation</changelog>
  <changelog author="hpj@urpla.net" date="1528113600">- Update to 18.06:
  - bug fixes
  - Editor
  - - added a configuration option (Editor-&gt;Style page) to show the marker map
    on the left or right of the editor
  - - added a context menu for the "fold" margin
  - - improved handling of folded lines when using "go to" functions
  - - resize auto complete list box to fit with contents
  - - added a configuration option (Editor-&gt;autocomplete to set up maximum
    width and height of the auto complete list box
  - Shell
  - - resize auto complete list box to fit with contents
  - pip Interface
  - - added an action to install a locally available package/wheel
  - Web Browser (NG)
  - - improved the sending of the "Referer" header like it is done by Firefox
- remove eric-fix-bindir.patch: desktop files install fix is released from
  upstream</changelog>
  <changelog author="hpj@urpla.net" date="1528372800">- fix api requires/obsoletes</changelog>
</package>
<package pkgid="d4a183b3cefd1ec659fb4446811df0ea0b64d4c18c90adecc674f581141d336f" name="erlang" arch="src">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="823c83cf7fc9dfb2b8547ea1c63ca3209ff97f189e9a96f81c07775aa7ac6c41" name="erlang" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="bee1aec48eac13ab9500aa5dea2228c078265aa9a673a7ee581fa66ab8aa0d6f" name="erlang-debugger" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="dbda888a483152e74a24d841458201692b21b336ad7813d7dfa8a7bb5025e859" name="erlang-debugger-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="ba925dbc9f69403d6927fa4e732ef13bd47579c9469810ae2864d2f4f12d7710" name="erlang-dialyzer" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="6c5c0e9f189e855552f13a2257202509666010d6eb44591f591cc5aad9acf45a" name="erlang-dialyzer-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="dc0b4b85e5a67ed1617c4e70ea7daea42ad15aa2117232ee7ed0e187c7b16fcb" name="erlang-diameter" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="9520048a96564e8785c0da4abc70cb8d00de4152de6dd6a0b8cb64e71b7ce1ce" name="erlang-diameter-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="9cbfb08691614b2e7b59d3b5fb5291258c2a860a03ae034f7761b828ad566c75" name="erlang-doc" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="99759f76aba5fd89438558eaaad37bf8455973baff38554f293cd6479a1be016" name="erlang-epmd" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="d07dd29db5a37a08ed993485b1bd08ddc3b93bd98b787c1390f3d7fabcc5f986" name="erlang-et" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="b0378c4f75c9448040843e733313487a9231f14f1ab705ae88318d8ec701a734" name="erlang-et-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="01105993d3d4bb19e8b36c3d58656b45ff058b6e8bb565c308ff10f5dfd077fc" name="erlang-jinterface" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="1e9db94ef2f83d7507b402db400289e7634457bc00343e96e3424bdfa166acf8" name="erlang-jinterface-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="3351a13d058cf234cc84875eb86778d0b61dc8e866b41aded6ae5192b9daccfb" name="erlang-observer" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="173345f9cd36c37af279cc26cc57657785b4a0382a850984659a41b9718d70c8" name="erlang-observer-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="9cb480c87832419a6a465da2c6d96e33082d9668f30805c2608b74adcca541f5" name="erlang-reltool" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="25021b6d6c36f1200d292a3a7dfecefa905fdcfbab21321aa7821f65e0cec693" name="erlang-reltool-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="65527b9d1f39104b1f7d3152f6e732acac53926afce6e45d0fb3480e2ce7dc13" name="erlang-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="24a713a7698a745c9f94f4139d48cd1942808c4e94fad2c01f7c381fcc9d709b" name="erlang-wx" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="899a34393439a41d8e176741b928e34b07ee5d6e1b185e7f2ff887af63bb0d40" name="erlang-wx-src" arch="x86_64">
  <version epoch="0" ver="20.3.8.15" rel="lp150.4.2"/>
  <changelog author="matwey.kornilov@gmail.com" date="1489147200">- Add missed scripts requires for erlang-epmd package</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480000">- Changes since 19.2:
  * crypto, ssh: The implementation of the key exchange algorithms
  diffie-hellman-group-exchange-sha* are optimized, up to a factor
  of 11 for the slowest ( = biggest and safest) group size.
  * dialyzer: The peak memory consumption is reduced. Analyzing
  modules with binary construction with huge strings is now much
  faster.
  * erts: A received SIGTERM signal to beam will generate a 'stop'
  message to the init process and terminate the Erlang VM nicely.
  This is equivalent to calling init:stop/0.
  * kernel: The functions in the file module that take a list of
  paths (e.g. file:path_consult/2) will now continue to search in
  the path if the path contains something that is not a directory.
  * kernel: Two OTP processes that are known to receive many
  messages are rex (used by rpc) and error_logger. Those processes
  will now store unprocessed messages outside the process heap,
  which will potentially decrease the cost of garbage collections.
  * public_key: New function pkix_verify_hostname/2,3 implements
  certificate hostname checking. See the manual and RFC 6125.-
  * public_key, ssh: The ssh host key fingerprint generation now
  also takes a list of algorithms and returns a list of
  corresponding fingerprints. See
  public_key:ssh_hostkey_fingerprint/2 and the option
  silently_accept_hosts in ssh:connect.
  * ssl: Move PEM cache to a dedicated process, to avoid making the
  SSL manager process a bottleneck. This improves scalability of
  TLS connections.
  * stdlib: filename:safe_relative_path/1 to sanitize a relative
  path has been added.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1491480001">- Update to 19.3.1:
  * crypto: Fix a bug with AES CFB 128 for 192 and 256 bit keys.
  Thanks to kellymclaughlin !
  * erts: Trying to open a directory with file:read_file/1 on Unix
  leaked a file descriptor. This bug has now been fixed.
  * erts: Invoking init:stop/0 via the SIGTERM signal, in a non-SMP
  BEAM, could cause BEAM to terminate with fatal error. This has
  now been fixed and the BEAM will terminate normally when SIGTERM
  is received.
  * inets: Fixed a bug in ftp that made further operations after a
  recv_chunk operation impossible.
  * ssh: ssh:daemon_info/1 crashed if the listening IP was not 'any'
  * ssl: Correct active once emulation, for TLS. Now all data
  received by the connection process will be delivered through
  active once, even when the active once arrives after that the
  gen_tcp socket is closed by the peer.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1493553600">- Update to 19.3.2:
  * erts: The +Bi command line argument of erl erroneously caused
  SIGTERM to be ignored by the VM as well as of all its child
  processes. This bug was introduced in erts version 8.3.</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- Disable global PIE for erlang, code is currently not fully
  ready.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1500292800">- Update to 20.0.1:
  * erts: Fixed a bug in gen_tcp:send where it never returned when
  repeatedly called on a remotely closed TCP socket.
  * erts: Fixed segfault that could happen during cleanup of aborted
  erlang:port_command/3 calls. A port_command is aborted if the
  port is closed at the same time as the port_command was issued.
  This bug was introduced in erts-8.0.
  * erts: Fixed implementation of statistics(wall_clock) and
  statistics(runtime) so that values do not unnecessarily wrap due
  to the emulator. Note that the values returned by
  statistics(runtime) may still wrap due to limitations in the
  underlying functionality provided by the operating system.
  * erts: Fix performance bug in pre-allocators that could cause
  them to permanently fall back on normal more expensive memory
  allocation. Pre-allocators are used for quick allocation of
  short lived meta data used by messages and other scheduled
  tasks. Bug exists since OTP_R15B02.
  * runtime_tools: A faulty encoding comment was added when saving
  trace patterns to file. This is now corrected.
  * stdlib: A bug in proc_lib:format() introduced in Erlang/OTP 20.0
  is corrected.
  * stdlib: Fix string:len/1 to be compatible with previous
  versions.
  * stdlib: In OTP-20.0, the behavior of c, make, and ct_make was
  changed so that in some cases the beam files by default would be
  written to the directory where the source files were found. This
  is now changed back to the old behavior so beam files are by
  default written to current directory.
- Update to 20.0.0:
  * Potential Incompatibilities
  * ERTS:
  * The non SMP Erlang VM is deprecated and not built by default
  * Remove deprecated erlang:hash/2
  * erlang:statistics/1 with scheduler_wall_time now also
    includes info about dirty CPU schedulers.
  * The new purge strategy introduced in OTP 19.1 is mandatory
    and slightly incompatible for processes holding funs
  * see erlang:check_process_code/3.
  * The NIF library reload is not supported anymore.
  * Atoms can now contain arbitrary unicode characters which
    means that the DFLAG_UTF8_ATOMS capability in the
    distribution protocol must be supported if an OTP 20 node
    should accept the connection with another node or library.
    Third party libraries which uses the distribution protocol
    need to be updated with this.
  * Asn1: Deprecated module and functions removed (asn1rt,
    asn1ct:encode/3 and decode/3)
  * Ssh: client only option in a call to start a daemon will now fail
  * Highlights
  * Erts:
  * Dirty schedulers enabled and supported on VM with SMP support.
  * support for ?dirty? BIFs and ?dirty? GC.
  * erlang:garbage_collect/2 for control of minor or major GC
  * Erlang literals are no longer copied when sending messages.
  * Improved performance for large ETS tables, &gt;256 entries
    (except ordered_set)
  * erlang:system_info/1 atom_count and atom_limit
  * Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  * enif_select, map an external event to message
  * Improvements of timers internally in the VM resulting in
    reduced memory consumption and more efficient administration
    for timers
  * Compiler:
  * Code generation for complicated guards is improved.
  * Warnings for repeated identical map keys. #{'a'=&gt;1, 'b'=&gt;2,
    'a'=&gt;3} will warn for the repeated key a.
  * By default there is now a warning when export_all is used.
    Can be disabled
  * Pattern matching for maps is optimized
  * New option deterministic to omit path to source + options
    info the BEAM file.
  * Atoms may now contain arbitrary unicode characters.
  * compile:file/2 has an option to include extra chunks in the
    BEAM file.
  * Misc other applications:
  * Significantly updated string module with unicode support and
    many new functions
  * crypto now supports OpenSSL 1.1
  * Unnamed ets tables optimized
  * gen_fsm is deprecated and replaced by gen_statem
  * A new event manager to handle a subset of OS signals in
    Erlang
  * Optimized sets add_element, del_element and union
  * Added rand:jump/0-1
  * When a gen_server crashes, the stacktrace for the client
    will be printed to facilitate debugging.
  * take/2 has been added to dict, orddict, and gb_trees.
  * take_any/2 has been added to gb_trees
  * erl_tar support for long path names and new file formats
  * asn1: the new maps option changes the representation of
    SEQUENCE to be maps instead of records
  * A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  * ssl: DTLS documented in the API, experimental
  * ssh: improving security, removing and adding algorithms
  * New math:fmod/2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1501502400">- erlang-gs application has been depricated</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503230400">- Update to 20.0.2:
  * asn: Fixed compilation error of generated code caused by a
  missing quotation of function names as part of an external call for
  encoding.
  * erts: Added missing release notes for OTP-14491 ("performance
  bug in pre-allocators") which was included in erts-9.0.1 (OTP-20.0.1).
  * erts: Fixed a bug that prevented TCP sockets from being
  closed properly on send timeouts.
  * erts: Fixed bug in operator bxor causing erroneuos result
  when one operand is a big *negative* integer with the lowest N*W bits as
  zero and the other operand not larger than N*W bits. N is an integer of 1
  or larger and W is 32 or 64 depending on word size.
  * kernel: The documentation for the 'quiet' option in
  disk_log:open/1 had an incorrect default value.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1503835200">- Update to 20.0.4:
  * dializer: Fix a bug where merging PLT:s could lose info. The
    bug was introduced in Erlang/OTP 20.0.
  * erts: A timer internal bit-field used for storing scheduler id
    was too small. As a result, VM internal timer data structures
    could become inconsistent when using 1024 schedulers on the
    system. Note that systems with less than 1024 schedulers are
    not effected by this bug. This bug was introduced in ERTS
    version 7.0 (OTP 18.0).
  * erts: Automatic cleanup of a BIF timer, when the owner process
    terminated, could race with the timeout of the timer. This
    could cause the VM internal data structures to become
    inconsistent which very likely caused a VM crash. This bug was
    introduced in ERTS version 9.0 (OTP 20.0).
- Update to 20.0.3:
  * asn1: Default values now work in extension for PER, so if you
    give the atom asn1_DEFAULT instead of a value it will become
    the default value.
  * compiler: Fail labels on guard BIFs weren't taken into account
    during an optimization pass, and a bug in the validation pass
    sometimes prevented this from being noticed when a fault
    occurred.
  * erts: Binary append operations did not check for overflow,
    resulting in nonsensical results when huge binaries were
    appended.
  * ssh: All unknown options are sent to the transport handler
    regardless of type.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390400">- Update to 20.0.5:
  * erts: Fixed bug in binary_to_term and binary_to_atom that could
    cause VM crash. Typically happens when the last character of an
    UTF8 string is in the range 128 to 255, but truncated to only
    one byte. Bug exists in binary_to_term since ERTS version
    5.10.2 (OTP_R16B01) and binary_to_atom since ERTS version 9.0
    (OTP-20.0).
  * inets: http_uri aligned to follow RFC 3986 and not convert "+"
    to space when decoding URIs.
  * inets: Added new option max_client_body_chunk to httpd server
    to allow chunked delivery of PUT and POST data to mod_esi
    callback. Note, new mod_esi callback implementation is
    required. Also correct value provided by server_name
    environment variable.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1505390401">- Only Java 1.6 is supported by Erlang since 18.0 release</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1508414400">- Update to 21.1.2:
  * diameter: An inadvertently removed monitor in diameter 2.1
    caused the ets table diameter_reg to leak entries, and caused
    service restart and more to fail.
  * erts: Fixed bug that could cause a VM crash when a corrupt
    message is received on distribution channel from other node.
- Update to 20.1.1:
  * compiler: The compiler could issue an incorrect internal
    consistency failure diagnostic for some complicated bit syntax
    maches.
  * erts: The new zlib module returned a data_error when inflating
    concatenated streams, which was incompatible with the old
    module's behavior of returning the uncompressed data up to the
    end of the first stream.
  * erts: zlib:gunzip/1 will no longer stop at the end of the first
    stream when decompressing concatenated gzip files.
  * ssh: Fixed broken printout
  * ssh: Disable aes_gcm ciphers if peer is OpenSSH 6.2 which is
    known to have trouble with them in some cases.
- Update to 20.1:
  * crypto, public_key: Extend crypto and public_key functions
    sign and verify with: support for RSASSA-PS padding for
    signatures and for saltlength setting X9.31 RSA padding. sha,
    sha224, sha256, sha384, and sha512 for dss signatures as
    mentioned in NIST SP 800-57 Part 1. ripemd160 to be used for
    rsa signatures. A new tuple in crypto:supports/0 reports
    supported MAC algorithms.
  * diameter: Add service option decode_format to allow incoming
    messages to be decoded into maps instead of records. Decode
    performance has been improved. Add service/transport option
    avp_dictionaries to give better support for dictionaries only
    defining AVPs.
  * erts: Upgraded the ERTS internal PCRE library from version
    8.40 to version 8.41.
  * erts, kernel, tools: Profiling with lock counting can now be
    fully toggled at runtime in the lock counting emulator
    (-emu_type lcnt). Everything is enabled by default to match
    the old behavior, but specific categories can be toggled at
    will with minimal runtime overhead when disabled. Refer to the
    documentation on lcnt:rt_mask/1 for details.
  * lcnt:collect and lcnt:clear will no longer block all other
    threads in the runtime system. This makes it possible to run
    the lock counting under heavier load.
  * erts: The zlib module has been refactored and all its
    operations will now yield appropriately, allowing them to be
    used freely in concurrent applications.
  * erts, tools: Add erlang:iolist_to_iovec/1, which converts an
    iolist() to an erlang:iovec(), which is suitable for use with
    enif_inspect_iovec().
  * erts: Add new nif API functions for managing an I/O Queue. The
    added functions are: enif_ioq_create(), enif_ioq_destroy(),
    enif_ioq_enq_binary(), enif_ioq_enqv(), enif_ioq_deq(),
    enif_ioq_peek(), enif_inspect_iovec(), enif_free_iovec()
  * observer/crashdump_viewer: Reading of crash dumps with many
    binaries is optimized. A progress bar is shown when the detail
    view for a process is opened. The cdv script now sets
    ERL_CRASH_DUMP_SECONDS=0 to avoid generating a new crash dump
    from the node running the Crashdump Viewer.
  * observer: Add system statistics and limits to frontpage in
    observer.
  * public_key, ssl**: Improved error propagation and reports
  * ssh: A new option modify_algorithms is implemented. It enables
    specifying changes on the default algorithms list. See the
    reference manual and the SSH User's Guide chapter "Configuring
    algorithms in SSH".
  * tools/xref: The predefined Xref analysis locals_not_used now
    understands the -on_load() attribute and does not report
    unused functions.
  * tools/fprof: When sampling multiple processes and analyzing
    with totals set to true, the output now sums together all
    caller and callee entries which concerns the same function.
    Previous behaviour was to report each contributing entry
    separately.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1511784000">- Update to 20.1.5:
  * erts: Fixed a regression in zlib:gunzip/1 that prevented it
    from working when the decompressed size was a perfect multiple
    of 16384. This regression was introduced in 20.1.1
  * erts: Fixed a memory corruption bug in enif_inspect_iovec;
    writable binaries stayed writable after entering the iovec.
  * erts: Fixed a crash in enif_inspect_iovec on encountering empty
    binaries.
  * erts: zlib:deflateParams/3 will no longer return buf_error when
    called after zlib:deflate/2 with zlib 1.2.11.
  * inets: Correct the handling of location headers so that the
    status code is not hard coded. This should have been fixed by
    commit 2cc5ba70cbbc6b3ace81a2a0324417c3b65265bb but
    unfortunately was broken during a code refactoring and
    unnoticed due to a faulty placed test case.
- Update to 20.1.4:
  * inets: Fix broken handling of POST requests
  * inets: Make sure ints:stop/2 of the service httpd is
    synchronous
  * inets: Honor status code returned by ESI script and modernize
    "location" header handling.
- Update to 20.1.3:
  * diameter: A fault introduced in diameter 2.1 could cause decode
    errors to be ignored in AVPs following the header of aGrouped
    AVP.
  * erts: Added zlib:set_controlling_process/2 to move a zstream()
    between processes.
  * erts: Fix so that schedulers are bound correctly when the first
    available cpu is not the first detected cpu. e.g. when using
    "taskset -c X..Y" when X is not equal to 0.
  * snmp: The recbuf configuration option was not propagated
    correctly to the socket for the SNMP Manager.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1517486400">- Update to 20.2.2.
- Changes for 20.2.2:
  * mnesia: Removed a quadratic behavior in startup. This change
  implies that backend plugins (if used) must be set when the
  schema is created or via configuration parameters before mnesia
  is started.
  * mnesia: Bad timing could crash mnesia after a checkpoint was
  deactivated and reactivated with the same checkpoint name on
  different tables.
- Changes for 20.2.1:
  * ssh: Fix problem with OpenSSH 7.2 (and later) clients that has
  used sha1 instead of sha2 for rsa-sha-256/512 user's public
  keys.
- Highlighted changes for 20.2:
  * crypto, ssl: The crypto API is extended to use private/public
  keys stored in an Engine for sign/verify or encrypt/decrypt
  operations. The ssl application provides an API to use this new
  engine concept in TLS.
  * ssh: SSH can now fetch the host key from the private keys stored
  in an Engine. See the crypto application for details about
  Engines.
  * ssl: A new command line option -ssl_dist_optfile has been added
  to facilitate specifying the many options needed when using SSL
  as the distribution protocol.
  * stdlib: Improve performance of the new string functionality when
  handling ASCII characters.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1523707200">- Update to 20.3.2
  * ssl: Added new API functions to facilitate cipher suite handling
  * erts, observer: More crash dump info such as: process binary
  virtual heap stats, full info for process causing out-of-mem
  during GC, more port related info, and dirty scheduler info.
  * inets: Add support for unix domain sockets in the http client.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534248000">- Update to 20.3.8.5.
- Changes for 20.3.8.5:
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * compiler: Fixed an issue where files compiled with the
  +deterministic option differed if they were compiled in a
  different directory but were otherwise identical.
  * crypto: Fixed a node crash in crypto:compute_key(ecdh, ...)
  when passing a wrongly typed Others argument.
  * erts: Fixed a bug which caused an emulator crash when
  enif_send() was called by a NIF that executed on a dirty
  scheduler. The bug was either triggered when the NIF called
  enif_send() without a message environment, or when the process
  executing the NIF was send traced.
  * erts: Fixed a bug causing some Erlang references to be
  inconsistently ordered. This could for example cause failure
  to look up certain elements with references as keys in search
  data structures. This bug was introduced in R13B02. Thanks to
  Simon Cornish for finding the bug and supplying a fix.
  * mnesia: When master node is set do not force a load from
  ram_copies replica when there are no available disc_copies,
  since that would load an empty table. Wait until a disk
  replica is available or until user explicitly force_loads the
  table.
  * mnesia: Allow to add replicas even if all other replicas are
  down when the other replicase are not stored on disk.
  * ssl: Correct handling of empty server SNI extension
  * ssl: Correct cipher suite handling for ECDHE_*, the incorrect
  handling could cause an incorrrect suite to be selected and
  most likly fail the handshake.
- Changes for 20.3.8.4:
  * asn1: A bug in ASN.1 BER decoding has been fixed. When
  decoding a recursively enclosed term the length was not
  propagated to that term decoding, so if the length of the
  enclosed term was longer than the enclosing that error was not
  dectected. A hard coded C stack limitation for decoding
  recursive ASN.1 terms has been introduced. This is currently
  set to 8 kWords giving a nesting depth of about 1000 levels.
  Deeper terms can not be decoded, which should not be much of a
  real world limitation.
- Changes for 20.3.8.3:
  * erts: Fixed a race condition in the inet driver that could
  cause receive to hang when the emulator was compiled with gcc8.
  * erts: Fix bug in generation of erl_crash.dump, which could
  cause VM to crash. Bug exist since erts-9.2 (OTP-20.2).
  * ic: Fixed potential buffer overflow bugs in
  oe_ei_encode_long/ulong/longlong/ulonglong functions on 64-bit
  architectures. These functions expect 32 bit integers as the
  IDL type "long" is defined as 32 bits. But there is nothing
  preventing user code from "breaking" the interface and pass
  larger values on 64-bit architectures where the C type "long"
  is 64 bits.
  * inets: Enhance error handling, that is mod_get will return 403
  if a path is a directory and not a file.
  * kernel: Non semantic change in dist_util.erl to silence
  dialyzer warning.
  * ssl: Improve cipher suite handling correcting ECC and TLS-1.2
  requierments. Backport of solution for ERL-641
  * ssl: Option keyfile defaults to certfile and should be trumped
  with key. This failed for engine keys.
- Changes for 20.3.8.2:
  * erl_interface: Make ei_connect and friends also accept state
  ok_simultaneous during handshake, which means the other node
  has initiated a connection setup that will be cancelled in
  favor of this connection.
  * erts: Fixed a rare bug that could cause processes to be
  scheduled after they had been freed.
  * ic: Fixed bug in ic causing potential buffer overrun in
  funtion oe_ei_encode_atom. Bug exists since ic-4.4.4
  (OTP-20.3.4).
  * kernel: Fix some potential buggy behavior in how ticks are
  sent on inter node distribution connections. Tick is now sent
  to c-node even if there are unsent buffered data, as c-nodes
  need ticks in order to send reply ticks. The amount of sent
  data was also calculated wrongly when ticks were suppressed
  due to unsent buffered data.
- Changes for 20.3.8.1:
  * inets: Options added for setting low-level properties on the
  underlying TCP connections. The options are: sock_ctrl,
  sock_data_act and sock_data_pass. See the manual for details.
  * ssh: SFTP clients reported the error reason "" if a non-OTP
  sftp server was killed during a long file transmission. Now
  the signal name (for example "KILL") will be the error reason
  if the server's reason is empty. The documentation also lacked
  type information about this class of errors.
  * ssh: Fix ssh_sftp decode error for sftp protocol version 4
  * syntax_tools: Fix a bug regarding reverting map types.
- Changes for 20.3.8:
  * erts: Fixed bug in ets that could cause VM crash if process A
  terminates after fixating a table and process B deletes the
  table at "the same time". The table fixation could be done
  with ets:safe_fixtable or if process A terminates in the
  middle of a long running select or match call.
  * snmp: The Snmp MIB compiler now allows using a
  TEXTUAL-CONVENTION type before defining it.
- Changes for 20.3.7:
  * erl_docgen: Update makefile so db_funcs.xsl is a part of the
  installed application.
  * erts: Fixed bug in enif_binary_to_term which could cause
  memory corruption for immediate terms (atoms, small integers,
  pids, ports, empty lists).
  * erts: Fixed bug in erlang:system_profile/2 that could cause
  superfluous {profile,_,active,_,_} messages for terminating
  processes.
  * inets: The option max_headers operated on the individual
  header length instead of the total length of all headers. Also
  headers with empty keys are now discarded.
- Changes for 20.3.6:
  * crypto: If OPENSSL_NO_EC was set, the compilation of the
  crypto nifs failed.
  * crypto: C-compile errors for LibreSSL 2.7.0 - 2.7.2 fixed
  * ssh: Host key hash erroneously calculated for clients
  following draft-00 of RFC 4419, for example PuTTY
  * ssh: Renegotiation could fail in some states
- Changes for 20.3.5:
  * erts: Fixed a crash in heart:get_cmd/0 when the stored command
  was too long.
  * ssl: Proper handling of clients that choose to send an empty
  answer to a certificate request.
- Changes for 20.3.4:
  * erl_interface: Fix bug in ei_connect functions that may cause
  failure due to insufficient buffer space for gethostbyname_r.
  * erl_interface, ic: Optimize encoding/decoding for pure 7-bit
  ascii atoms.
  * inets: Fix broken options handling in httpc (ERL-441).
  * ssh: An ssh_sftp server (running version 6) could fail if it
  is told to remove a file which in fact is a directory.
  * ssh: Fix rare spurios shutdowns of ssh servers when receiveing
  {'EXIT',_,normal} messages.
- Changes for 20.3.3:
  * sasl: When upgrading with instruction 'restart_new_emulator',
  the generated temporary boot file used 'kernelProcess'
  statements from the old release instead of the new release.
  This is now corrected.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1534334400">- Update to 20.3.8.6:
  * inets: Change status code for no mod found to handle request
  to 501</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1538308800">- update to 20.3.8.9:
  - Changes for 20.3.8.9:
  - http://erlang.org/download/OTP-20.3.8.9.README
  * Fix a regression in OTP-15204 that removed .beam file metadata
  - Changes for 20.3.8.8:
  - http://erlang.org/download/OTP-20.3.8.8.README
  * inets: Do not use chunked-encoding with 1xx, 204 and 304
    responses when using mod_esi
  * inets: Add robust handling of chunked-encoded HTTP responses
    with an empty body (1xx, 204, 304)
  - Changes for 20.3.8.7:
  - http://erlang.org/download/OTP-20.3.8.7.README
  * crypto: Update the crypto engine functions to handle multiple
    loads of an engine
  * mnesia: Fixed a bug where the bag table index data was not
    deleted when objects were deleted.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1544356800">- Update to 20.3.8.15 (boo#1118869)
- Changes for 20.3.8.15:
  * asn1: Handle erroneous length during decode (BER only) without
    crashing.
- Changes for 20.3.8.14:
  * ssh: Incompatibility with newer OpenSSH fixed. Previously
    versions 7.8 and later could cause Erlang SSH to exit.
- Changes for 20.3.8.13:
  * ssl: Add engine support for RSA key exchange
- Changes for 20.3.8.12:
  * erts: List subtraction (The -- operator) will now yield properly
    on large inputs.
  * stdlib: List subtraction (The -- operator) will now yield
    properly on large inputs.
  * ssl: Extend check for undelivered data at closing, could under
    some circumstances fail to deliverd all data that was acctualy
    recivied.
- Changes for 20.3.8.11:
  * erts: ERTS internal trees of monitor structures could get into
    an inconsistent state. This could cause 'DOWN' messages not to
    be delivered when they should, as well as delivery of 'DOWN'
    messages that should not be delivered.
- Changes for 20.3.8.10:
  * erts: Fixed bug in ets:select_replace when called with a fully
    bound key could cause a following call to ets:next or ets:prev
    to crash the emulator or return invalid result.
  * eldap: A race condition at close could cause the eldap client to
    exit with a badarg message as cause.</changelog>
</package>
<package pkgid="fa8568bdeac968d7f9db09c2c9143ec8977b8987d58269aa41bd657767a15865" name="etags" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473422400">- Add emacs-24-fix-missing-gtk-icons.patch: Bring emacs up to speed
  on gtk3-3.20 changes. Fixes missing icons in emacs-gtk.</changelog>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
</package>
<package pkgid="fd712a27df3fd41c778d5007c36acbaaf608422501e34efb1b60d1b290caab04" name="ethtool" arch="src">
  <version epoch="0" ver="4.13" rel="lp150.3.3.1"/>
  <changelog author="puzel@suse.com" date="1355745600">- Update to new upstream release 3.7
  * Fix: Gracefully handle failure of register pretty-printer (-d
    option)
  * Feature: Add support for et131x registers (-d option)
  * Feature: Basic optical diagnostics for SFF-8472 modules (-m
    option)</changelog>
  <changelog author="puzel@suse.com" date="1366632000">- Update to new upstream release 3.8
  * Feature: Allow setting destination MAC address in L3/L4 flow
    spec rules (-N/-U option)
  * Fix: Show full 64 bits of user-data (-n/-u option)
  * Fix: Add version check for et131x regs (-d option)
  * Doc: Improve description of -f, -t, -s, -N/-U, -W options in
    man page
  * Fix: Restore 20000baseKR2 cap display (no options)</changelog>
  <changelog author="jengelh@inai.de" date="1372939200">- Update to new upstream release 3.10
  * Displaying of support for 10000BASE-KR link mode was implemented.
  * Support for new versions of ixgbe register dump was added.
  * The private flags print output was beautified.
- More robust make install call
- Optional signature verification</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 3.12.1
  * Fix: Memory corruption when applying external calibration to
  SFF-8472 module diagnostics (-m option)
  * Feature: Add Intel 82599 and x540 DCB registers to dump
  (-d option)
- Changes from 3.12
  * Fix: Remove alternate method to check for VLAN tag offload on Linux
  &lt; 2.6.37 (-k/-K options)
  * Fix: Hide state of VLAN tag offload and LRO if the kernel is too old
  for us to reliably detect them (-k option)
  * Feature: Add register dump support for Solarflare SFC9100 family
  (-d option)
- Changes from 3.11
  * Feature: Update Realtek chip list for register dump to match
  r8169 driver in Linux 3.11 (-d option)
  * Feature: Add ixgbevf support for register dump (-d option)
  * Feature: Filter ixgbe register dump according to the specific chip
  (-d option)</changelog>
  <changelog author="puzel@suse.com" date="1386244800">- Add '-q' command line option to display switch port attributes
  (bnc#853637, fate#315293)
- added patches:
  * ethtool-display-switch-port-attributes.patch</changelog>
  <changelog author="puzel@suse.com" date="1391688000">- Drop ethtool-display-switch-port-attributes.patch (failed
  upstream acceptance and has to be reworked)</changelog>
  <changelog author="jengelh@inai.de" date="1416312000">- Update to new upstream release 3.16
  * Support for configurable RSS hash key (-x/-X options)
  * Add register dump support for Altera Triple Speed Ethernet
  (-d option)
  * Report Backplane as a supported port
- Remove unused call to %gpg_verify (the macro expands to nothing);
  source validation handled by osc.</changelog>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
</package>
<package pkgid="ac43e0071256a95870cc060ce4e5026d7397b80b98079337bd0b91c5a397dd51" name="ethtool" arch="x86_64">
  <version epoch="0" ver="4.13" rel="lp150.3.3.1"/>
  <changelog author="puzel@suse.com" date="1355745600">- Update to new upstream release 3.7
  * Fix: Gracefully handle failure of register pretty-printer (-d
    option)
  * Feature: Add support for et131x registers (-d option)
  * Feature: Basic optical diagnostics for SFF-8472 modules (-m
    option)</changelog>
  <changelog author="puzel@suse.com" date="1366632000">- Update to new upstream release 3.8
  * Feature: Allow setting destination MAC address in L3/L4 flow
    spec rules (-N/-U option)
  * Fix: Show full 64 bits of user-data (-n/-u option)
  * Fix: Add version check for et131x regs (-d option)
  * Doc: Improve description of -f, -t, -s, -N/-U, -W options in
    man page
  * Fix: Restore 20000baseKR2 cap display (no options)</changelog>
  <changelog author="jengelh@inai.de" date="1372939200">- Update to new upstream release 3.10
  * Displaying of support for 10000BASE-KR link mode was implemented.
  * Support for new versions of ixgbe register dump was added.
  * The private flags print output was beautified.
- More robust make install call
- Optional signature verification</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 3.12.1
  * Fix: Memory corruption when applying external calibration to
  SFF-8472 module diagnostics (-m option)
  * Feature: Add Intel 82599 and x540 DCB registers to dump
  (-d option)
- Changes from 3.12
  * Fix: Remove alternate method to check for VLAN tag offload on Linux
  &lt; 2.6.37 (-k/-K options)
  * Fix: Hide state of VLAN tag offload and LRO if the kernel is too old
  for us to reliably detect them (-k option)
  * Feature: Add register dump support for Solarflare SFC9100 family
  (-d option)
- Changes from 3.11
  * Feature: Update Realtek chip list for register dump to match
  r8169 driver in Linux 3.11 (-d option)
  * Feature: Add ixgbevf support for register dump (-d option)
  * Feature: Filter ixgbe register dump according to the specific chip
  (-d option)</changelog>
  <changelog author="puzel@suse.com" date="1386244800">- Add '-q' command line option to display switch port attributes
  (bnc#853637, fate#315293)
- added patches:
  * ethtool-display-switch-port-attributes.patch</changelog>
  <changelog author="puzel@suse.com" date="1391688000">- Drop ethtool-display-switch-port-attributes.patch (failed
  upstream acceptance and has to be reworked)</changelog>
  <changelog author="jengelh@inai.de" date="1416312000">- Update to new upstream release 3.16
  * Support for configurable RSS hash key (-x/-X options)
  * Add register dump support for Altera Triple Speed Ethernet
  (-d option)
  * Report Backplane as a supported port
- Remove unused call to %gpg_verify (the macro expands to nothing);
  source validation handled by osc.</changelog>
  <changelog author="jengelh@inai.de" date="1420977600">- Update to new upstream release 3.18
  * Fix: Lookup of SFP Tx bias in SFF-8472 module diagnostics
  (-m option)
- Drop usrmerge compat symlinks</changelog>
  <changelog author="mkubecek@suse.cz" date="1433160000">- Update to new upstream release 4.0
  * Fix: Formatting of RX flow hash indirection table when size not
    divisible by 8 (-x option)
  * Fix: Add missing Advertised speeds (no option and -s option)
  * Feature: Add support to get expansion ROM version (-i option)
  * Feature: Include SFP serial number and date in EEPROM dump
    (-m option)</changelog>
  <changelog author="mkubecek@suse.cz" date="1444392000">- Update to new upstream release 4.2
  * Feature: Support soldered-on modules in module EEPROM dump
    (-m option)
  * Feature: Add register dump support for VMware vmxnet3
    (-d option)
  * Feature: Update register dump support for IBM EMAC (-d option)
    (requires Linux 4.3 or a future stable update to 4.1 or 4.2)
  * Doc: Fix typo in man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1458043200">- Update to new upstream release 4.5
  * Fix: Heap corruption when dumping registers from a file
    (-d option)
  * Fix: Stricter input validation for EEPROM setting (-E option)
  * Feature: Add PHY statistics support (--phy-statistics option)
  * Feature: Support setting default Rx flow indirection table
    (-X option)
  * Doc: Properly indent sub-options in man page
  * address build issues (mostly compiler warnings)</changelog>
  <changelog author="mkubecek@suse.cz" date="1467633600">- Update to new upstream release 4.6
  * Feature: Support register dump on Intel X550 NICs (-d option)
  * Fix: Correct some reported register offsets on Intel 10GbE NICs
    (-d option)
  * Feature: Add IPv6 support to NFC (-n, -N, -u and -U options)
  * Feature: Add support for ETHTOOL_xLINKSETTINGS ioctls (no
    option and -s option)
  * Feature: Use netlink socket when AF_INET not available</changelog>
  <changelog author="mkubecek@suse.cz" date="1476187200">- Update to new upstream release 4.8
  * Feature: QSFP Plus/QSFP28 Diagnostics Information Support
  * Feature: Enhancing link mode bits to support 25G/50G/100G
  * Feature: add support for 1000BaseX and missing 10G link mode
  * Fixes: address Coverity issues 1363118 - 1363125</changelog>
  <changelog author="mkubecek@suse.cz" date="1490875200">- Update to new upstream release 4.10
  * Fix: Fix the "advertise" parameter logic.
  * Feature: Implement ETHTOOL_PHY_GTUNABLE/ETHTOOL_PHY_STUNABLE and PHY downshift
  * Feature: add register dump support for fjes driver (-d option)
- add keyring with John Linville's key for tarball verification</changelog>
  <changelog author="mkubecek@suse.cz" date="1496750400">- Update to new upstream release 4.11
  * Feature: Support for configurable RSS hash function
  * Feature: support queue and VF fields for rxclass filters
  * Feature: Add support for 2500baseT/5000baseT link modes
  * Fix: Fix SFF 8079 cable technology bit parsing
  * Fix: sync help output for -x/-X with man page</changelog>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
</package>
<package pkgid="ec38b2feb6e45a39ca6ef3561998ce6b41ff89cd634182857c848b4d0206e070" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="9ec6f7d9786bbf5ec001cadba61f8ea28db08f1f17d72d160dc442e0026b0d07" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="04294fdf78cc048cab3f3b9328ebfb1531be77961b2068ee5d93e2def20576de" name="evince" arch="src">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="25ab10c47db8423d501b9b481a7b2633ce0d84c9f99527f51e49a893bfb2bf35" name="evince" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="0b5455fc0aa26312d46e79ceec288bd5841e1cd5ea6138c758afe846bb76afca" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="7e44e275ba0a9b7d15e5a68de1433759b9f61ad701a415630e43894e129524bc" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="0abd80f5a56d8f5e405b9dfdbc7bf7638dc8e0737727c35f9239ee8dba4d7bdb" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="ad9c874cbb0f1993f2d0e2d14b06430928beba1e8a0b2ea6d8234a7683605598" name="evince-lang" arch="noarch">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="fb66d4d3b61a6afa57e8cd9ebaf52944508636a597cef4883c90ff10603e55b7" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="b69b4789f7e5e62bac96ddea07153e79a615bb285b9b0669475d6ce65849b582" name="evince-plugin-comicsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="f2a2fb746e8b3ba3b48e347ad231257af4ac163a9af6e3943db6395072b16cb7" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="d02a9dfb9b2c3f3bfb5a0d0dce4926fd4e98561c220f308472087a87faa7da69" name="evince-plugin-djvudocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="0b0657d686bd4a5eb812a17948111ae3cc77769f9ff6d66c1e7ef994ba8b00e8" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="4ee93a96941ff913bf5dd7ecda22007ce2cb70f65a4632f991f62b6e97895ba7" name="evince-plugin-dvidocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="0c652ea824234b6f42578423c3758ffd499ceaab356b54beb3058b21b0d287d6" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="233196ce55114754b83ce84ddc5af5c1cb1dd26d087d07b0a7f15a5c549e6ccb" name="evince-plugin-pdfdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="d3c1da0d812167e818c7ebf37bc231c333ab35fc1c4a8c315e1177546fe80744" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="e26dd07e2c73b2cefa27bb49d5a86c8a15b25fb98870f48ac8892afa4997939b" name="evince-plugin-psdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="f63edf9807adad6d82edb0d0491e13271832010ebf5a2557fab948f9002e65b2" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="a920bbef4a7a4a544859a2e24a36d7aea05f4e71baf62681030183805bdd8e87" name="evince-plugin-tiffdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="613b32097b594454bfb3fb4f0fb8c45404a8459b9047a13fc399a4965a017883" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1467633600">- Update to version 3.21.3:
  + New features and improvements:
  - Fix style rendering issues with GTK+ 3.20 (bgo#765557,
    bgo#758793).
  - Stop using first page thumbnail as window icon (bgo#767747).
  - Scroll pages fitting in the window in non-continuous mode
    (bgo#562257).
  - Show the document URI on a tooltip for recent view items
    (bgo#764405).
  - Add Keyboard Shortcuts entry to App Menu (bgo#761803).
  - Make the systemd user unit conditional (bgo#755897).
  - Allow to pass URIs to the previewer (bgo#766531).
  - Remove the MimeType association from the previewer desktop
    file (bgo#744893).
  + Bugs fixed:
  - Fix build with GCC 6.
  - Fix calculation of the maximum width of page selector
    (bgo#764771).
  - Fix typo in zoom in/out gesture shortcuts (bgo#761803).
  - Remove X11 depedency of nautilus extension (bgo#766710).
  + Updated translations.
- Stop passing V=1 to make, debugging is done locally.
- Remove a conditional tweak for old and no longer supported
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
</package>
<package pkgid="7803aef9918c3beeaffcf06852c051215ab7a6252c344a32ec401ca3703588f7" name="evince-plugin-xpsdocument" arch="x86_64">
  <version epoch="0" ver="3.26.0+20180128.1bd86963" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1469016000">- Update to version 3.21.4:
  + Improve annotation properties dialog UI (bgo#767895).
  + Center sidebar action menu (bgo#767895).
  + Make Esc close annotation window (bgo#768448).
  + Do not hide the fullscreen toolbar when view or action popover
    is shown.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Add application/vnd.comicbook+zip to the list of mime-types
    supported by the comics backend (bgo#770903).
  + Fix mime-type comparisons in commics backend (bgo#770903).
  + The browser plugin no longer claims to support loading
    documents in Wayland.
  + Fix several memory leaks (bgo#770070, bgo#770069).
  + Fix scaling calculation in PostScript backend (bgo#755776).
  + Fix a crash when processing button events in EvView
    (bgo#769700).
  + Fix a crash when opening a copy of a document with annotation
    popup windows (bgo#760299).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Sort pages in natural order in comics backend (bgo#770695).
  + Sort bookmarks by page number instead of title (bgo#772277).
  + Fix possible read beyond allocated buffer (bgo#771612).
  + Updated translatitons.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480593600">- Workaround bgo#738270: Disable the browser-plugin (pass
  - -disable-browser-plugin to configure) and evince-browser-plugin
  package, make main package obsolete the browser-plugin package to
  avoid update issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + New features and improvements:
  - Ask the user before automatically reloading the document when
    it has been modified (bgo#769123).
  - Use IBEAM cursor for TEXT_MARKUP annotations (bgo#774018).
  + Bugs fixed: bgo#770695, bgo#771612, bgo#772277, bgo#774005,
    bgo#775536, bgo#780206.
  + Updated translations.</changelog>
  <changelog author="adrien.plazas@suse.com" date="1499947200">- Add evince-comics-remove-tar-commands-support.patch to avoid code
  execution in the comic book backend's .tar support. (bnc#1046856,
  bgo#784630, CVE-2017-1000083).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724800">- Update to version 3.24.1:
  + Remove support for tar and tar-like commands in commics backend
    (CVE-2017-1000083, bgo#784630).
  + Improve performance of the links sidebar (bgo#779614).
  + Improve performance of scrolling in thumbnails sidebar
    (bgo#691448).
  + Don't copy remote files before thumbnailing (bgo#780351).
  + Fix toggling layers that are not in the current visible range
    of pages (bgo#780139).
  + Fix ev_page_accessible_get_range_for_boundary() to ensure the
    start and end offsets it returns are within the allowed range
    (bgo#777992).
  + Fix crash with Orca screen reader (bgo#777992).
  + Updated translations.
- Drop evince-comics-remove-tar-commands-support.patch: Fixed
  upstream.
- Following the above: Drop libtool BuildRequires and stop passing
  autoreconf, no longer needed as we do not carry any patches.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500724801">- Update to version 3.25.4:
  + The comics backend now uses libarchive and unarr instead of
    spawning commands (bgo#720742).
  + Add flag EV_DOCUMENT_LOAD_FLAG_NO_CACHE to not setup the
    document cache during the load. It will be setup later only if
    needed (bgo#780210).
  + Speed up thumbnailing by using EV_DOCUMENT_LOAD_FLAG_NO_CACHE
    flag (bgo#780210).
- Add pkgconfig(libarchive) BuildRequires, new dependency.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of it for us.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 3.25.91:
  + New features and improvements: Add support for Adobe
    Illustrator documents (bgo#311990).
  + Bugs fixed:
  - Fix gnome-settings-daemon MediaKeys API use (bgo#786262).
  - Fix infinite loop when removing annotation windows
    (bgo#785975).
  - Fix rendering of layer state in layers tree sidebar
    (bgo#786464).
  - Properly quote arguments when executing dvipdfm in DVI
    backend (bgo#784947).
  - Fix runtime warnings on exit (bgo#774833).
  - Fix debug borders coordinate translation (bgo#785758).
  - Properly handle errors in comics backend (bgo#784963).
  - Don't strip filenames when extracting comic documents
    (bgo#784963).
  + Documentation:
  - Remove custom-shortcuts section dropped in GTK 3.10
    (bgo#758246).
  - Cover F9 shortcut (bgo#783276).
  - Update 'Adding Annotations' to reflect the UI.
  - Update several screenshots.
  - Update custom shortcut instructions.
  - 'Index' dropdown is called 'Outline' now.
  - Fix several typos in documentation.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504699200">- Update to version 3.25.92:
  + Bug fixes:
  - Do not change the current page when adding or removing
    bookmarks (bgo#732834).
  - Fix unarr build on s390x (bgo#787248).
  - Update LZMA SDK to use lzma1701.7z for unarr (bgo#787035).
  + Documentation: Add missing close parenthesis in text selection
    page (bgo#786825).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1510660800">- Backport fix:
  + libdocument-return-96-dpi-if-unable-to-determine.patch
    Backport libdocument fallback dpi to get rid of broken zoom
    view on wayland (bgo#719400 bsc#1066138).</changelog>
  <changelog author="mgorse@suse.com" date="1512993600">- Remove Suggests for unzip, unrar, and 7zip; the comics back end
  no longer uses them (bsc#1072120).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.0+20171120.3955d480:
  + Updated translations.
- Switch to git-checkout via source service.
- Following the above, add gnome-common BuildRequires, pass
  autogen.sh and pass enable-gtk doc to configure, as we need to
  bootstrap the tarball.
- Clean up spec, use modern macros.
- Drop update-desktop-files BuildRequires and stop using
  suse_update_desktop macro, no longer needed.
- Drop obsolete conditionals for no longer supported versions of
  openSUSE.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Update to version 3.26.0+20180128.1bd86963:
  + shell: Fix media-player keys not working.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Remove Supplements from psdocument package, so that it isn't
  pulled in by default (boo#1122794).</changelog>
  <changelog author="mgorse@suse.com" date="1559563200">- Add CVE-2019-11459.patch: fix display of uninitialized memory if
  TiffReadRGBAImageOriented fails (boo#1133037 CVE-2019-11459
  glgo#GNOME/evince#1129).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1564142400">- Add CVE-2019-1010006.patch: Fix overflow checks in tiff backend
  (boo#1141619 bgo#788980 CVE-2019-1010006)</changelog>
</package>
<package pkgid="a9ac755c4352a62cd930a5e2de587265da7be580e9c45320528a468795475a0d" name="evolution" arch="src">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="c6431cec916b91c58a5092c604166fbc774e8c6a8200b3700a57b1dbba8ddb18" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="7856967c8a2e3932e749cbb896b8504a6ec16895d0abf49353ffdead713caea7" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="7070ba29ae24f09d650ac431983b6e74771796629b34b161236721fedd78e7ea" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="5eb82e48c90cf07c51972ac8394d0629766564d87564aed70fce3d5fe40a2d0b" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="48cdb70da15370d11be97c655e9c4019629a69951e7a1a287e7714f609522297" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="6ad78f2f17a97e6a5b080e571c83be10a5ea0d5049b938779ba3e1270301880e" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="f80cdc99d60712e63fa5bb43d088442a660f215d13655eb8ae126c350c5652b4" name="exempi" arch="src">
  <version epoch="0" ver="2.4.5" rel="lp150.2.3.1"/>
  <changelog author="hfiguiere@suse.de" date="1218628800">- New upstream version 2.0.2
  + Fix bug fdo#16598: TLS detection.
  + Better error management
  + Bugs fdo#14612 and fdo#14613</changelog>
  <changelog author="maw@suse.de" date="1224676800">- Make debug packages require a specific %{version}-%{release}.</changelog>
  <changelog author="hfiguiere@suse.de" date="1230120000">- New upstream version 2.1.0
  + Upgrade XMPCore to Adobe XMP 4.4.2
  + New: NS_PDF namespace for PDF.
  + New: API xmp_prefix_namespace_uri() and xmp_namespace_prefix(). fdo#14962.
  + Bug: make sure boost &gt;1.35 does not fail test with system().
  + Bug: unit test now use boost/test/minimal.hpp to work with more boost
    install. (known boost.test bug)
  + Bug: fix a typo in a CHECK_PTR call causing warnings on gcc &lt; 4.
  + Bug: no longer define UNIX_ENV in exempi.cpp and let CPPFLAGS do it.
  + Bug fdo#16139: the list of exported symbols was too large.
  + Bug fdo#18635: fix crasher.
- Added patch exempi-rpmlint.diff to make rpmlint happy. fdo#19312
- Added zlib-devel as a dependency
- Remove .la and disable static</changelog>
  <changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files
- correct -devel package deps</changelog>
  <changelog author="vuntz@novell.com" date="1240920000">- Add exempi-gcc44.patch to fix build with gcc 4.4.
- Remove AutoReqProv: it's default now.</changelog>
  <changelog author="vuntz@novell.com" date="1248091200">- Update to version 2.1.1:
  + Added shave to the build system for sane output. (build only)
  + fdo#16030: if the property is an array or struct allow "" to be
    passed as a value.
  + fdo#19312: source/XMPFiles/FileHandlers/P2_Handler.cpp was
    using an improper string comparison. (made rpmlint unhappy).
  + fdo#20554: Missing file on MacOS X.
  + fdo#20554: Detect ldflags properly.
  + fdo#20622: Catch unhandled exceptions in
    xmp_files_can_put_xmp().
  + fdo#21934: Mismatched new [] / delete.
  + fdo#22554: Fix a SIGFPE encountered on some invalid files.
    (bgo#586720)
- Drop exempi-rpmlint.diff: fixed upstream.
- Drop exempi-gcc44.patch: fixed upstream.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283860800">- Add pkg-config BuildRequires to get a pkgconfig() provides for
  the devel subpackage.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291896000">- run make check
- Disable usage of "shave-libtool" that messes up post build checks
  provide --disable-silent-rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1317384001">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="280e7e1a50b3e6e28e23911d865b641ec70e82f654cf13de84404fac685cfc85" name="exempi-tools" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1317384000">- use original tar</changelog>
  <changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 2.2.0:
  + New 'exempi' command line tool.
  + Upgrade XMPCore to Adobe XMP 5.1.2
  - Quicktime support now works without Quicktime.
  - Reconciliation with ID3v2.
  - "Blessed" 64-bits support (we already had it in exempi).
  - Slight change in the way XMP are written for MWG compliance.
  - Fixed a serious bug with RIFF.
  - Change in the way local text encoding is dealt with.
  - Alternative languages behave slightly differently by changing
    how the default language property is managed.
  - Probably a bunch of bugs fixed that I don't know about.
  + Update unit tests.
  - Refactor the fixtures.
  + Use automake silent rules instead of shave. (build only)
  + "make dist" generate a bzip2 archive as well. (build only)
  + Remove some obsolete warning flags. (build only)
  + Build xmpcommandtool
  + Several new APIs.
  + Bug fixes: fdo#37747.
- Drop exempi-no-shave.patch: shave is not used upstream anymore.
- Drop libtool BuildRequires, autoreconf call and
  - -disable-silent-rules that were used because of patch above.
- Create a tools subpackage for new exempi command line tool.
- Change group of libexempi3 from "Development/Libraries/C and C++"
  to System/Libraries.
- Use V=1 during the build to get a verbose build.</changelog>
  <changelog author="dmueller@suse.de" date="1330257600">- fix build under qemu</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 2.2.1:
  + fdo#54011: Use POSIX API for files on MacOS.
  + fdo#58175: Replace OS X FlatCarbon headers.
  + Added a manpage for exempi(1).
  + Added the -n option to the command line for arbitrary
    namespaces.</changelog>
  <changelog author="zaitor@opensuse.org" date="1419595200">- Update to version 2.2.2:
  + Public header cleanup and documentation update.
  + Update Doxygen config.
  + fdo#73058: Add missing include for MacOS.
  + fdo#72810: Fix typo in date test in MP3 handler.
  + fdo#83313: Fix crash on invalid Exif (from Samsung).
  + Fix valgrind testing for xmpcore.sh.
  + Fix delete / delete[] mismatch in ID3_Support.hpp.
- Add baselibs.conf to Source to comply with current rules in
  Factory.</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 2.4.5:
  * Fix a buffer overflow in the PSD parser. (CVE-2018-7730 bnc#1085295)
  * Fix a buffer overflow in the TIFF parser. (CVE-2018-7728 bnc#1085297)
  * Fix a buffer overflow in PostScript parser. (CVE-2018-7729 bnc#1085296)
  * Fix a null dereference in WEBP parser. (CVE-2018-7731 bnc#1085294)
  * Properly initialize pointers in WEBP.
  * Fix an infinite loop in RIFF parser.
  * Fix an infinite loop in QuickTime parser.
  * Fix an infinite loop in ASF parser.
  * Adjust minimum version for gcc in documentation.
  * Fix a buffer overrun, memcpy() on overlapping regions, use after free in
    the exception handling.  Fix a fatal assert with corrupt WEBP.
  * Fix a crash on a corrupt file.
  * Upgrade XMPCore to Adobe XMP CC 2014.12.
  * New flag to optimize layout on MPEG4 files.
  * GoPro MPEG4 video files support.
  * Improved JPEG support.
  * iXML support in WAVE files.
  * Several bugs and memory leaks fixes.
  * Changes from Adobe XMP CC 2013.06.
  * Pluggable file handlers (not exposed yet in Exempi)
  * Support for Exif 2.3 properties
  * New RIFF file handler
  * Better Postscript support.
  * Lot of bug fixes.
  * Now require (partial) C++11 support to compile (gcc 4.4.7 tested)
  * WebP format handler (contributed: Frankie Dintino, The Atlantic)
  * Several API improvements
  * Fix potential crash with corrupt TIFF file.
  * Fix header to pass -Wstrict-prototypes</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Extend descriptions.</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1558699200">- Add CVE-2018-12648.patch to fix a NULL pointer dereference issue
  (CVE-2018-12648, boo#1098946).</changelog>
</package>
<package pkgid="435cbb4d82ece693f6807064ff47b65a9d6b757159b933dafbf5a1bcf5165494" name="exfat-utils" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="lp150.2.3.1"/>
  <changelog author="zawertun@gmail.com" date="1307361600">- Update to version 0.9.5:
  + Fixed erasing of the root directory cluster when creating a new FS with mkexfatfs. This bug could cause mkexfatfs to produce invalid FS.
  + Utilities are not linked with libfuse anymore.
  + Ensure that the path being opened is either a device or a regular file.</changelog>
  <changelog author="zawertun@gmail.com" date="1326801600">- Update to version 0.9.6:
  + Fixed write performance regression introduced in 0.9.4.
  + Mount in read-only mode if the device is write-protected.
  + Set ctime to mtime to ensure we don't break programs that rely on ctime
    (e.g. rsync considered that all files are outdated) [Eldad Zack].
  + Indicate that FS in not clean when it was not cleanly unmounted.
  + Utilities are now compatible with GNU/Hurd.
  + Fixed several memory leaks that could occur on error handling paths.
  + Improved handling of corrupted file systems.</changelog>
  <changelog author="zawertun@gmail.com" date="1336219200">- Update to version 0.9.7:
  + Out-of-the-box FreeBSD support (via ublio library).
  + Fixed "missing EOD entry" error (could happen while reading
    directory that consists of several clusters).
  + Fixed interpretation of minutes field in files timestamps
    (minutes could be displayed incorrectly).
  + Fixed mtime seconds field initialization for newly created file
    (mtime could be 1 sec less than creation time).
  + SConscript now respects CC, CCFLAGS and LDFLAGS environment
    variables.</changelog>
  <changelog author="zawertun@gmail.com" date="1348142400">- Update to version 0.9.8:
  + The mkfs utility can now create huge file systems (up to several
    exabytes).
  + Fixed handling of characters beyond Basic Multilingual Plane.
  + Echo messages to syslog only if stderr is not connected to a
    terminal.</changelog>
  <changelog author="zawertun@gmail.com" date="1358078400">- %{optflags} passed as the value for CCFLAGS and CPPFLAGS</changelog>
  <changelog author="zawertun@gmail.com" date="1358769600">- Update to version 1.0.0:
  + Fixed crash when renaming a file within a single directory and
    a new name differs only in case.
  + Fixed clusters allocation: a cluster beyond valid clusters
    range
    could be allocated.
  + Fixed crash when a volume is unmounted while some files are
    open.
  + SConscript now respects AR and RANLIB environment variables.
  + Improved error handling.
  + Enabled big_writes. This improves write speed (larger block
    size means less switches between kernel- and user-space).
  + Do BLKROGET ioctl to make sure the device is not read-only:
    after "blockdev --setro" kernel still allows to open the device
    in read-write mode but fails writes.</changelog>
  <changelog author="zawertun@gmail.com" date="1358856000">- Added link from man page exfatfsck.8 to fsck.exfat.8 and from
  mkexfatfs.8 to mkfs.exfat.8</changelog>
  <changelog author="zawertun@gmail.com" date="1364299200">- Update to version 1.0.1:
  + Fixed unexpected removal of a directory if it is moved into
    itself.
  + Fixed "Operation not permitted" error on reading an empty file.</changelog>
  <changelog author="zawertun@gmail.com" date="1404820800">- Update to version 1.1.0:
  + Relicensed the project from GPLv3+ to GPLv2+.
  + OpenBSD support [Helg Bredow].
  + Improved I/O errors handling.
  + Implemented fsync() and fsyncdir().
  + Fixed crash on Mac OS X 10.5 caused by non-standard use of
    realpath(). Also fixed TrueCrypt disks unmounting.
  + Avoid extra erase on writes to the end of a file. This should
    improve linear write speed.
  + Allow arbitrary changing of lower 9 bits of mode. Allow
    owner/group changing to the same owner/group. This fixes rsync.
  + Fixed buffers overflows when handling lengthy file names.
  + Fixed "real size does not equal to size" error on volumes with
    pagefile.sys.
  + Fixed negative IUsed in "df -i" output.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1408449600">- specfile cleanup using spec-cleaner
- package Changelog and COPYING file
- recommend exfat-fuse package
- bzip the source</changelog>
  <changelog author="virtuousfox@gmail.com" date="1424779200">- Update to version 1.1.1:
  * Fixed mkfs crash on some sectors-per-cluster (-s option) values.</changelog>
  <changelog author="dsterba@suse.cz" date="1441108800">- update to version 1.2.0
  * Switched from SCons to autotools.
  * Added musl libc support [Brendan Heading].
  * Worked around "FS is larger than device" error for memory cards
    formatted by Panasonic Lumix cameras.
  * Worked around "unknown entry type 0xe1" error for memory cards
    formatted by Sony cameras.</changelog>
  <changelog author="mpluskal@suse.com" date="1443268800">- Update to 1.2.1
  * Fixed compatibility with Zalman VE-200: now newly created
    directories do not have archive bit set.
  * Fixed heap corruption: malformed FS can use invalid sector or
    cluster size.
  * Fixed hang on mount: malformed FS can have cyclic references
    in the clusters map.</changelog>
  <changelog author="mpluskal@suse.com" date="1449835200">- Update to 1.2.2
  * Improved reliability in case of a sudden unplug: FS will be in
  a clean state after closing all files and performing sync(1).
  * Fixed compilation on Debian GNU/kFreeBSD and GNU/Hurd
  platforms.
  * Updated mount.exfat-fuse man page.</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 1.2.3
  * Fixed clusters loss when file renaming replaces target.</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Provide symlinks to /sbin (see boo#965476)</changelog>
  <changelog author="dap.darkness@gmail.com" date="1465128000">- Update to 1.2.4:
  * Fixed wrong files names hashes.
  * Man pages are now installed by default.
  * Commas and backslashes in device names are now escaped.</changelog>
  <changelog author="asarai@suse.com" date="1503144000">- Update to 1.2.7.
  * Fixed handling of two last clusters: operations with files that occupy these clusters could fail.
  * Fixed crash when started with stdin, stdout or stderr closed.
  [1.2.6]
  * Operations with directories (except initial listing) now make less read/write system calls.
  * Fixed handling of files with optional tail entries (0xe0-0xff): videoclip files created by Sony cameras were missing.
  * Write operations now correctly return ENOSPC (instead of EIO) when there is no free disk space left.
  * Fixed max file name length: it's 255 16-bit code units (not 256).
  [1.2.5]
  * Added an option for dumpexfat to show file fragments [Daniel Drake].
  * Fixed crash when directory starts with an invalid cluster.
  * Daylight saving time in now properly reflected in file timestamps.</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- exfat-utils 1.2.8:
  * Fixed new files or directories creation in the root directory:
    ensure there are no 0x00 entries before valid ones; otherwise
    Windows can corrupt them boo#1118871</changelog>
</package>
<package pkgid="b36ecb3efe97f4e1fcfa062682a54414c561076804ba1c91fb7d2e43f88b2c25" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp150.3.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="7922e8d07c2f924c41294715879cb69163d4396dc43a2b1672a0785beead17d3" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="8e23e547f06a7798bb10385ad1f86f3ae6f71d5975e3151de7b05c21d849e482" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp150.3.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="e9c00fcd42856805a48962d311d421c6cfee0c6e1bef4d83153b06a3bcf2dc23" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="9c158f67468a968e8e5656f11744bcda5d22814e3b85efbc417de91f92bdf64f" name="exim" arch="src">
  <version epoch="0" ver="4.88" rel="lp150.3.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="1b846c7bbeec7087c84a1476b2284df0acdc8368475badb286c0d14ad57c6b90" name="exim" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="da9842e45a3bb0c123e8ce7be0b03583dfe11ea27fcb020e432432f7f98f8536" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="3a34be516545232fc83380b4cd0ea6c6c249b1f6101f0369d949de299fdc9a47" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="457455c64302d0b7c39e3e0053db93703696f34cbbbfd65c4a5ec32a82e62846" name="eximon" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="3344241c1bee11162902c3b9c0e2efc4495f7c7ba7be4f60d9c2854c37e1153e" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.3.1"/>
  <changelog author="lmuelle@suse.com" date="1422100800">- Set CFLAGS_OPT_WERROR only on post-5 CentOS and RHEL systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
</package>
<package pkgid="8cb4703dedc3bd35855e48d022efd12f4c8c95b94939b44875e5e16edd0f562d" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.6.1"/>
  <changelog author="lmuelle@suse.com" date="1426248000">- Replace the fixed ExecStart arguments by ${EXIM_ARGS} as defined in
  /etc/sysconfig/exim; (bsc#922145).</changelog>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
</package>
<package pkgid="b8733e27a5b28e9dacde164bea18f2178414d2881815ce47c131e45de2cd3c23" name="eximstats-html" arch="x86_64">
  <version epoch="0" ver="4.88" rel="lp150.3.9.1"/>
  <changelog author="lmuelle@suse.com" date="1429272000">- Install fitting eximstats.conf depending on SUSE version; (bsc#926861).
- Add attribute dir to /etc/apache2 and /etc/apache2/conf.d in the file list.</changelog>
  <changelog author="lmuelle@suse.com" date="1430913600">- Fix the systemd service file by not passing EXIM_ARGS as one single
  argument by removing the curly brackets (shell syntax).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1443787200">- Update to 4.86
  * Support for using the system standard CA bundle.
  * New expansion items $config_file, $config_dir, containing the file
    and directory name of the main configuration file. Also $exim_version.
  * New "malware=" support for Avast.
  * New "spam=" variant option for Rspamd.
  * Assorted options on malware= and spam= scanners.
  * A commandline option to write a comment into the logfile.
  * If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
    be configured to make connections via socks5 proxies.
  * If built with EXPERIMENTAL_INTERNATIONAL, support is included for
    the transmission of UTF-8 envelope addresses.
  * If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
    used encoding of Maildir folder names.
  * A logging option for slow DNS lookups.
  * New ${env {&lt;variable&gt;}} expansion.
  * A non-SMTP authenticator using information from TLS client certificates.
  * Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
    Patch originally by Wolfgang Breyha.
  * Main option "dns_trust_aa" for trusting your local nameserver at the
    same level as DNSSEC.
- Dropped exim-enable_ecdh_openssl.patch as included in upstream</changelog>
  <changelog author="lmuelle@suse.com" date="1449835200">- Update the Exim Maintainers Keyring file 'exim.keyring'.
- Use URL for the source line of the main tar ball.</changelog>
  <changelog author="opensuse@cboltz.de" date="1454500800">- Move AppArmor profile to /usr/share/apparmor/extra-profiles/, which is
  the directory for inactive profiles since AppArmor 2.9</changelog>
  <changelog author="lmuelle@suse.com" date="1456747200">- Update to 4.86.1
  + Add support for keep_environment and add_environment options;
    CVE-2016-1531; (boo#968844).</changelog>
  <changelog author="lmuelle@suse.com" date="1456920000">- Update to 4.86.2
  + Fix minor portability issues for *BSD and OS/X.</changelog>
  <changelog author="e.istomin@edss.ee" date="1459771200">- Makefile tuning:
  + add sqlite support
    + disable WITH_OLD_DEMIME
    + enable AUTH_CYRUS_SASL
    + enable AUTH_TLS
    + enable SYSLOG_LONG_LINES
    + enable SUPPORT_PAM
    + MAX_NAMED_LIST=64
    + enable EXPERIMENTAL_DMARC
    + enable EXPERIMENTAL_EVENT
    + enable EXPERIMENTAL_PROXY
    + enable EXPERIMENTAL_CERTNAMES
    + enable EXPERIMENTAL_DSN
    + enable EXPERIMENTAL_DANE
    + enable EXPERIMENTAL_SOCKS
    + enable EXPERIMENTAL_INTERNATIONAL</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1493035200">- conditionally disable DANE on SuSE versions with OpenSSL &lt; 1.0
- exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch:
  import exim-4_86_2+fixes branch
    + fix CVE-2016-1531
    when installed setuid root, allows local users to gain privileges via the perl_startup
    argument.
    + fix Bug 1805: store the initial working directory, expand $initial_cwd
    + fix Bug 1671: segfault after delivery (https://bugs.exim.org/show_bug.cgi?id=1671)
    + Don't issue env warning if env is empty
- fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch:
  DKIM information leakage</changelog>
  <changelog author="meissner@suse.com" date="1497873600">- exim-CVE-2017-1000369.patch: Fixed memory leaks that could be
  exploited to "stack crash" local privilege escalation (bsc#1044692)
- Require user(mail) group(mail) to meet new users handling in TW.
- Prerequire permissions (fixes rpmlint).</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- specify users with ref:mail, to make them dynamic. bsc#1046971</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Explicitly buildrequire libnsl-devel on suse_version &gt;= 1330:
  libnsl used to be an integrated part of glibc. Since the build
  system / makefiles explicitly reference libnsl, it is our own
  duty to ensure we have our deps in place.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511784000">- exim-CVE-2017-16943.patch: fixed possible code execution (CVE-2017-16943 bsc#1069857)</changelog>
  <changelog author="kstreitova@suse.com" date="1511784001">- add exim-4.86.2-mariadb_102_compile_fix.patch to fix compilation
  with the mariadb 10.2 (in our case the build with libmariadb
  library from the mariadb-connector-c package)
  * upstream commits: a12400fd4493b676e71613ab429e731f777ebd1e and
  31beb7972466a33a88770eacbce13490f2ddadc2</changelog>
  <changelog author="dmueller@suse.com" date="1511784002">- update to 4.88:
  drops fix-CVE-2016-9963-31c02defdc5118834e801d4fe8f11c1d9b5ebadf.patch,
    exim-4.86.2+fixes-867e8fe25dbfb1e31493488ad695bde55b890397.patch
- remove exim4-manpages.tar.bz2: upstream does not exist anymore
- update keyring</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1512043200">- add exim-CVE-2017-16944.patch:
  backport of commit 178ecb70987f024f0e775d87c2f8b2cf587dd542
  fix for CVE-2017-16944 (#bsc1069859)</changelog>
  <changelog author="Robert Frohl &lt;rfrohl@suse.com&gt;" date="1559736000">- CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
  backport of commit d740d2111f189760593a303124ff6b9b1f83453d
  add CVE-2019-10149.patch</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564142400">- CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)
  backpport of commit 21aa05977abff1eaa69bb97ef99080220915f7c0
  add CVE-2019-13917.patch</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1567771200">- CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process
  where a remote attacker could execute code with root privileges
  by sending crafted SNI data (boo#1149182).
  backport commit 2600301ba6dbac5c9d640c87007a07ee6dcea1f4
  add CVE-2019-15846.patch</changelog>
</package>
<package pkgid="01fd708381b2c511495bceffc7c7a73e0fe2342974780a4f731e218048c0e619" name="exiv2" arch="src">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="4bda278a42619a872508e90868f486e4bad3378b856a152b9b4dca12b9698c8e" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="2e5d2f6ae753acc81c9d33c72ad383498e1f4a0ad31bffd5069f2bd53c4bd496" name="exiv2" arch="src">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="248ce1920aded3428a6a205be73a8bee9744701328eb66d4a7c5b80cf2fd897a" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="c0eb67d29997c84cdd5ec6e35598441bda667d490c9eb9276d35d30ea5510c6b" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="421c8ab439d87841c5738e96d47bdce32adff5cd1a05298ec1cd8be3ae39786b" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp150.5.6.1"/>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Fix build on python3 only system by making sure we use
  python3 when building</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1539691200">- update to latest 0.26 branch:
  * Fixes CVE-2018-12264, CVE-2018-12265 (bsc#1097599)</changelog>
</package>
<package pkgid="4736a69370e02de297f608d495a8b08f242111bcf622030d6885e1da0dec5f3a" name="exo-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="2d3a0a4bb99dcf34a6dd400674f7d8338e54c91baeae924d53480ecc28ddd2f3" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1358510400">- really hide private Xml* symbols [bnc#798644]
  * modified visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="c54c9fc949a96f92679af356cfcbb2f002e10250276c83ba6dcde3807394c358" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
</package>
<package pkgid="50210f39d1a70e2154e0b8cbcba3de3eb89f6b67e3324eeb26bf5e7103be73a7" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.2.6.1"/>
  <changelog author="jengelh@inai.de" date="1358856000">- Executing autoreconf requires autoconf BuildRequire</changelog>
  <changelog author="pgajdos@suse.com" date="1358942400">- fix of fix of [bnc#798644]
- according to upstream changelog:
  - Improved ability to build without the configure-generated
    expat_config.h header.  This is useful for applications
    which embed Expat rather than linking in the library.
  because I am not exactly sure about implication of this, rather use
  - DXML_HAVE_VISIBILITY in CFLAG_VISIBILITY in expat-visibility.patch</changelog>
  <changelog author="schwab@suse.de" date="1359979200">- Update config.guess/sub for aarch64</changelog>
  <changelog author="jengelh@inai.de" date="1361448000">- Sanitize description of expat (replace it with a more current
  one from the homepage)</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="6bede60c86bef302461f39b5371f338a95de4ab5d0a13df70ae2da6fffe70aae" name="expat" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1436616000">- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 2.1.1
  * Fixes CVE-2015-1283 ? Multiple integer overflows in the
    XML_GetBuffer function
  * Fix potential null pointer dereference
  * Symbol XML_SetHashSalt was not exported
  * Output of xmlwf -h was incomplete
  * Document behavior of calling XML_SetHashSalt with salt 0
  * Minor improvements to man page xmlwf(1)
- Simplify expat-visibility.patch, refresh expat-alloc-size.patch
- Drop config-guess-sub-update.patch, fixed upstream.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1459512000">- After simplification of expat-visibility.patch, it became
  uneffective as no symbols are getting hidden. add
  - fvisibility=hidden to CFLAGS again.
- expat-alloc-size.patch: fix braino, realloc()-like functions
  should not take __attribute__(malloc)</changelog>
  <changelog author="kstreitova@suse.com" date="1463572800">- add expat-2.1.1-avoid_relying_on_undef_behaviour.patch to avoid
  relying on undefined behavior in the original CVE-2015-1283 fix
  [bnc#980391], [bnc#983985], [CVE-2016-4472]
- add expat-2.1.1-parser_crashes_on_malformed_input.patch to fix
  Expat XML parser that mishandles certain kinds of malformed input
  documents [bnc#979441], [CVE-2016-0718]
- use spec-cleaner to clean specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1468497600">- Version update to 2.2.0:
  * Fixes bnc#983215 CVE-2012-6702
  * Fixes bnc#983216 CVE-2016-5300
  * Various cmake and autotools script updates
  * Fix detection of utf8 character boundaries
- Remove all patches merged upstream:
  * expat-2.1.1-avoid_relying_on_undef_behaviour.patch
  * expat-2.1.1-parser_crashes_on_malformed_input.patch
  * expat-alloc-size.patch
  * expat-visibility.patch</changelog>
  <changelog author="jengelh@inai.de" date="1468843200">- Remove pointless --with-pic (for static only)</changelog>
  <changelog author="meissner@suse.com" date="1499169600">- Version update to 2.2.1 Sat June 17 2017
  - Security fixes:
    CVE-2017-9233 / bsc#1047236 -- External entity infinite loop DoS
    Details: https://libexpat.github.io/doc/cve-2017-9233/
    Commit c4bf96bb51dd2a1b0e185374362ee136fe2c9d7f
  - [MOX-002]      CVE-2016-9063 / bsc#1047240 -- Detect integer overflow;
    (Fixed version of existing downstream patches!)
  - (SF.net) #539  Fix regression from fix to CVE-2016-0718 cutting off
    longer tag names;
    [#25]  More integer overflow detection (function poolGrow);
  - [MOX-002]      Detect overflow from len=INT_MAX call to XML_Parse;
  - [MOX-005] #30  Use high quality entropy for hash initialization:
  * arc4random_buf on BSD, systems with libbsd
    (when configured with --with-libbsd), CloudABI
  * RtlGenRandom on Windows XP / Server 2003 and later
  * getrandom on Linux 3.17+
    In a way, that's still part of CVE-2016-5300.
    https://github.com/libexpat/libexpat/pull/30/commits
  - [MOX-005] For the low quality entropy extraction fallback code,
    the parser instance address can no longer leak,
  - [MOX-003] Prevent use of uninitialised variable; commit
  - [MOX-004] a4dc944f37b664a3ca7199c624a98ee37babdb4b
    Add missing parameter validation to public API functions
    and dedicated error code XML_ERROR_INVALID_ARGUMENT:
  - [MOX-006] * NULL checks; commits
  * Negative length (XML_Parse); commit
  - [MOX-002] 70db8d2538a10f4c022655d6895e4c3e78692e7f
  - [MOX-001] #35  Change hash algorithm to William Ahern's version of SipHash
    to go further with fixing CVE-2012-0876.
    https://github.com/libexpat/libexpat/pull/39/commits
  - Bug fixes:
    [#32] Fix sharing of hash salt across parsers;
    relevant where XML_ExternalEntityParserCreate is called
    prior to XML_Parse, in particular (e.g. FBReader)
    [#28] xmlwf: Auto-disable use of memory-mapping (and parsing
    as a single chunk) for files larger than ~1 GB (2^30 bytes)
    rather than failing with error "out of memory"
    [#3]  Fix double free after malloc failure in DTD code; commit
    7ae9c3d3af433cd4defe95234eae7dc8ed15637f
    [#17] Fix memory leak on parser error for unbound XML attribute
    prefix with new namespaces defined in the same tag;
    found by Google's OSS-Fuzz; commits
    xmlwf on Windows: Add missing calls to CloseHandle
  - New features:
    [#30] Introduced environment switch EXPAT_ENTROPY_DEBUG=1
    for runtime debugging of entropy extraction
    Bump version info from 7:2:6 to 7:3:6</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Build with profiling when possible</changelog>
  <changelog author="jayvdb@gmail.com" date="1507377600">- Allow building when do_profiling is undefined</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
</package>
<package pkgid="0408e4a0e2bca143d003d93728b709dca059414063ee9585e0c9fc56c66829db" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.5" rel="lp150.2.3.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="75907c46fb5219d899318b0d8849ba55066dfa06a6f513737b1824794692187a" name="fcitx-mozc" arch="x86_64">
  <version epoch="0" ver="2.18.2612.102" rel="lp150.3.3.1"/>
  <changelog author="liujianfeng1994@gmail.com" date="1417435200">- Upstream update to 1.15.1917.102
  * Fix Warning message from keymap editor should be updated
- Upstream update to 1.15.1895.102
  * Fix Partial suggestion for numbers are not annotated by &lt;????&gt;</changelog>
  <changelog author="ftake@geeko.jp" date="1418904000">- Add boo906143-revert-session.patch
  * Fix pre-edit is not reset after focus lost (boo#906143)</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1419768000">- Upstream update to 2.16.2003.102
  * Updated main dictionary, Emoji dictionary, emoticon dictionary, and single kanji dictionary
  * Fix IME crashes when using US International hardware keyboard
  * Fix ibus-mozc + XIM: preedit text is not cleared after preedit commit triggered by focus change
  * Fix An empty word can be suggested in the candidate list
- Remove boo906143-revert-session.patch: Merged by upstream
- Update gyp to r2012</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1421928000">- Upstream update to 2.16.2020.102
  * Fix Noisy candidate "itsumo" due to language aware conversion
  * Fix AssertionError in gen_zip_code_seed.py</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1425470400">- Upstream update to 2.16.2037.102
  * Fix: Inconsistency between suggestion candidates and conversion candidates
  * add llvm-clang as build dependence</changelog>
  <changelog author="i@marguerite.su" date="1435492800">- add fcitx-mozc-2.16.2037.102.2.patch
- add mozc-ninja-verbose-build.patch
- update gyp 20150628
- use-libprotobuf=0 for internal protobuf to workaround system
  one's symbol undefined errors caused by gcc-5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1439467200">- ExcludeArch ppc ppc64 ppc64le because no support in
  third_party/protobuf/src/google/protobuf/stubs/ atomicops</changelog>
  <changelog author="dvaleev@suse.com" date="1439812800">- Enable PowerPC builds.
  * Add generic atomics on Power (protobuf-generic-atomic.patch ,
    protobuf-atomic.patch)
  * Workaround llvm bug https://llvm.org/bugs/show_bug.cgi?id=22248
    (mozc-stack-protector.patch)</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Fix ibus-mozc does not allow to remove tha last character
  of preedit text on Qt5 application
  * workaround for the Qt5 bug (boo#947013)
  * Add ibus-qt5-hide_preedit_text-workaround.patch</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1444392000">- Upstream update to 2.17.2123.102
  * Update system dictionary
  * Support rule-based zero query suggestion in 2.16.2080.102
  * GYP repository is switched from code.google.com to chromium.googlesource.com
  * Fix: ibus predict window is shown at the previous cursor position
  * Fix: Preedit and candidate changes buffer modification flag
  * Fix a typo
  * Fix: Possible build failure due to missing dependency on commands_proto from key_info_util
  * Fix: ibus-mozc should enable undo-commit if and only if IBUS_CAP_SURROUNDING_TEXT is set
  * ibus-mozc no longer tries to align suggestion window to the left edge of the composing text
- add fcitx-mozc-2.17.2102.102.1.patch
- remove fcitx-mozc-2.16.2037.102.2.patch
- Specify GYP_DEFINES="use_libzinnia=1" to link to system-installed Zinnia</changelog>
  <changelog author="ftake@geeko.jp" date="1457438400">- Upstream update to 2.17.2313.102
  * "-j" option is deprecated
  * Calculator supports inputs starting with "="
  * ibus-mozc supports "icon_prop_key" and input mode labels are
    shown on tray icon
  * Minor updates and refactoring
- Update ibus-provide-layout-variations.patch
- Update mozc-ninja-verbose-build.patch</changelog>
  <changelog author="ftake@geeko.jp" date="1467460800">- Update Japanese zip code / address table (June 2016)</changelog>
  <changelog author="qzhao@suse.com" date="1469620800">- Add mozc-build-gcc.patch, Force mozc build with gcc(g++).
  Exclude PPC, PPC64, PPC64LE and AARCH64 build target.(bsc#990844)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1469793600">- remove ExcludeArch as related failure caused by workaround
- remove workaround https://llvm.org/bugs/show_bug.cgi?id=22248
  in spec as now using gcc not clang.
  remove mozc-stack-protector.patch</changelog>
  <changelog author="ftake@geeko.jp" date="1470139200">- fix unnecessary "BuildRequires: protobuf-devel"</changelog>
  <changelog author="mgorse@suse.com" date="1471953600">- Disable fcitx on SLE again.</changelog>
  <changelog author="i@marguerite.su" date="1480852800">- update 2.18.2612.102
  * fixed unexpected size bloat of the APK
  * fixed duplicate candidates after undo
  * fixed suggestion-only user dictionary entry may not work
  * fixed abbreviation user dictionary entry may not work
  * fixed suppression word may not work
  * fixed single character noun user dictionary entry may not work
- fcitx-mozc updated to 2.18.2612.102
  * dropped patch: fcitx-mozc-2.17.2102.102.1.patch
  * added patch: fcitx-mozc-2.18.2612.102.1.patch
- protobuf updated to 3.1.0
  * dropped patch: protobuf-atomic.patch, upstreamed
  * dropped patch: protobuf-generic-atomic.patch, upstreamed
- gyp updated to latest master@940a15e
- added patch: mozc-gen_zip_code_seed_py.patch</changelog>
  <changelog author="ro@suse.de" date="1521979200">- add excludearch for ppc/ppc64/s390/s390x as the code assumes
  little endian all over the place (bsc#1086763)</changelog>
  <changelog author="ftake@geeko.jp" date="1532433600">- add gcc-8.1-ZeroQueryDict-iterator.patch
  * fix a build error with gcc 8</changelog>
  <changelog author="ftake@geeko.jp" date="1555070400">- update to support the Japanese new era, Reiwa (boo#1132450)
  * add-Japanese-new-era-reiwa-ligature-to-dict.patch
  * add-Japanese-new-era-reiwa-to-date_rewriter.patch
  * add-Japanese-new-era-reiwa-to-dict.patch
- update zip code dictionary</changelog>
</package>
<package pkgid="340a3b971800c1fc12dcfc9e4dff1fd7051696d4092755ce9a451617c28455f6" name="feh" arch="x86_64">
  <version epoch="0" ver="2.27.1" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="3630424cef2d4b9132770992c54844f3fa08c44bbfaec6bc04312c21d82341b1" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="1b91d1c3468c077d361662fd01c9ffad282f64f36eed600f3563b6aa25bdf37d" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.2.1+git.1529316875.1a39345b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
</package>
<package pkgid="22a7ebca219fe4d656bac0fa7d6261730a714ab1c4c509ccd1cc19ba632ee385" name="fence-agents" arch="src">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp150.2.10.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
</package>
<package pkgid="be3bd4ce3e865ca1453ff427a8ef607f42bc7372b349013143b80be25f28468f" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp150.2.10.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
</package>
<package pkgid="4f2acdc34fc1e967ef2685fce697c049f86d0320a3d2551c3a5db8b7e7b21787" name="fence-agents-amt_ws" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp150.2.10.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
</package>
<package pkgid="cb95f616c869282bd840bbc79956e220107df0d8e59ee0f457ee0325c7f8753a" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="1bfa74bbf78850030b826081a388c6b256d3da851e26843e23ac4e372b0d379d" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.2.1+git.1529316875.1a39345b" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
</package>
<package pkgid="b1806b7a6d84b65445910efc0018864c5c1fde9a55492aaacb13edcd8b0bb0c2" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp150.2.10.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
</package>
<package pkgid="0d8eb5bb03be9e8c5c8563936ec31ffac17384341a9348a1a9370d4e6d7d1d81" name="festival" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
</package>
<package pkgid="96a8794dc665242f889618b4ad9ec7c64b0ba3ff8d9f3baca5326e7b1af6627b" name="festival-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1244462400">- Add speech_tools-1.2.96-beta-const.patch to fix build: strchr
  return value changed from char* to const char*</changelog>
  <changelog author="vuntz@opensuse.org" date="1285761600">- Add festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch: do not change
  LD_LIBRARY_PATH to include a directory that can be used by
  malicious users. Fix bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1285848000">- Add festival-safe-temp-file.patch: do not use the PID of the
  process to create a temporary file. Mentioned in bnc#642507.</changelog>
  <changelog author="vuntz@opensuse.org" date="1309176000">- Update to version 2.1:
  + Integrated and updated support for HTS, Clustergen, Multisyn
    and Clunits voices.
  + Build fixes for newer gcc.
  + Bug fixes galore.
- Drop various patches that were needed to fix build issues
  (generally caused by recent gcc): festival-1.95-gcc4.patch,
  festival-1.96.patch, speech_tools-1.2.95-gcc4.patch,
  speech_tools-1.2.95-gcc41.patch,
  speech_tools-1.2.95-returnvalue.patch,
  speech_tools-1.2.96-beta-const.patch,
  speech_tools-1.2.96-beta.patch.
- Rebase festival-no-LD_LIBRARY_PATH-extension.patch and
  speech_tools-no-LD_LIBRARY_PATH-extension.patch, and change them
  to not remove empty files (which introduces errors during the
  build) by keeping an empty line in those files.
- Add speech_tools-undefined-operation.patch, which contains the
  only interesting bit left from speech_tools-1.2.95-gcc41.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331985600">- Add speech_tools-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="schwab@suse.de" date="1365508800">- Update config.guess/sub for speech_tools</changelog>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
</package>
<package pkgid="b73840519b044d458d75b80460a8b00490785bd1efbc6baf7ce6bc27e7406a12" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="8d21dfba78d42857e2eecb2d09960c38b55bef065728757dd237424e1dcd1a29" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="41aa10046f42bced8f9a90700131d1eaca25a706878492da2b97a2a14fc7f131" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="485bc32de075b07425e822c7d2435f3305cdead36b09b37bb4fc644c2a3c300b" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="acfb9533084b7788bd0e3b40d2df5cca6b97354ecd6dd72ab32e812c9a1264f9" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="990e8f00f5dc2144edff46c2da2e00a205bb00b919f22498ec78f56a326b8423" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="1342ee88a0377bd99827f5279d5a072cb888ac23d5aa6826a930088d7531412b" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="661ed0ec01857f71f732bee3de87ced3fce3e35638326497f480027f9fcb5969" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0bf6c71948777169bc3df053df18ffe20302393f841d8e7b3d7560fd14da6a27" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="bbfbbead7d0cddf64ed1759522a39ef33149eeee07f69c139e6bc4715504ddbb" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="49431a2c47ec5f26515f29898b1522c722ddcc84f78ee8f6f77f0ee727c1a067" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="eb69e53face83397cccbe00b763289c4bf288ce0e19646ed03167cca190b9296" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="06ba103cc72a9cdbd1c16c5db184f0f7b9aab80a802e5bb91a9c1428df25d56d" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a90cd1bfac01b6dc63a1bfbefb8396c2bbe386c80dc3a32cffa0820b5f1d9563" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="fc64c18119fe62993889d048759754d1bc2bfb1745c1be6b67af62873efb8f89" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="30edf36d6f96e4cda4d2aa0080987eb302764d87737e9bc33ba574605950d856" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b2aa68490c68d865a6bd180275e0ac032755c01ab4d5560bb24138711f7cf5cb" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a83eba5dd1058537e6f88bec027964aea17a0e7921295632293e861f0a25eff1" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="c5d72cd19dc3831ac2da4ba82d4fe9ae74fbd645f5e54b68f1d28c66396a3e01" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="b8d24bc88985028fe198ce870f2b05af8c4e6c7f114b958470ba5e5eb0b90679" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="f94f6e9e31b2652c761c8a1c4981d8d0bcd5d28cc99fc4643950db70bbfbda2f" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="f90244855b5ac170d80b87bb2c268e11b9f221c01c88fcc5c36fb573658efb13" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b818ac20002fc979d5d079fe0fee8c335c06344f44377349db2db127c852856b" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="bc7f20df378b2ad29d9f2648ca72531ebe84467356f7abb38e7d2d9018677bcf" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="a531fcc30213977440228016747f1350d99a46b2a8cf7b9ed38458e6b5a86f63" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="e6901a07d54b9e7b77f7938bebd1256d07ce016b077053149181a55b0729643a" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="5e92b96e804fc51cba8f4ceae87fba6fb45998f04f44ebf9129152e4c88e8c9e" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="2285eaa853225534eb30152ba6126ce866850532e42622d21c32099144323878" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f88ccd8d21c37d2a0308b09977b4af709d5039e81643356ee46688f6582d7c0e" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="5a82e612386569a0c7d15c8c5573d0ade27ed24bff978f672d6896f0989260b0" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="e6bd99960ab0698fc27b78baf4ac74327f821ae8a7ad94ff0df5f9853b8a02ad" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="8d94ff00dbdf87ca0d1e8f24ee9fc9b563f0b62c8360032b9d91236ecf121851" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="34426eeec3c065ff3b99960f0d203b7a0a27625acdae8ed9ce8ba463041efd80" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="651d0ace23c51879b090ef0531fa9ff06ae8a661f4de7d9547ce2caf44a1941b" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="d84af0373055a7e8ef4af6b11c87c902eba5d629bd8ead4aac771a76cf2f7357" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="78f34d555772f0c9c585f2cdf1d8459de6d78b2265ffd31551e587ea7789ea9c" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="999bf482e3c122813869f8424a8899b346f3ee1f0862352a3ecfefbdfa555cb6" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="7297d3738e38dc5eed8f3ef02977b6530b578824f23865b7c14c2a1d728ab65c" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="44008fd301d5795ef1111ce6379270016b0f349e6ba51c0a4ebb6c5156eadb7a" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6d680cf7579f55bcaa0746005f8ff808e3aca10386fb8d3b831a4012f4ffc456" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="33dbf50efd854ee007cc5f85090e4a00ca7457f2de958763c9efb355a77da9dc" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="2879e967394170c4aa47471651d0c84c6089a9f09eaa3c04da9bdacaf0309981" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1f02857a472cb1e9b2172fa0fd4c4727331acfd8de8bb69a0088e05eeeac7209" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="ab94057670c1cdb5b7851e0d5863cb49d9d581c575fd8a9c16772dc5d3f40948" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="5481b75c85da06796f2dd1f80a0d0f740af96a3b59917bf059fb5678fa885387" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="e5840727d41acd28fc9f9c424a23f9474ccbae2ab10e763acdc3881a79142de0" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="f90198657a343e45b6af0cf7df22f6cb813eabf22ac2106b437f2108c9b44c77" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="2baeab28013f0e2b80b5deee91f001bdd638f899382d914fd3d23ee7156fbe21" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="b7ac8f2e07150a75897942ba60770421a47732258159cd21e54dcda436f9a9e5" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fc49cb3b23d23f7dd38231d1181e8e3beeef9068fc3fee7dfd34905207464882" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="8687b9b531712df596429b81d2c41c72f7f538905471959134a17bcf84debcaf" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7de8b0c5f414ef6888023ccafa7f134d14c23c7a2dbd2f7de827c12e85792394" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="446404c9443733e6b9a4fe5695a5ec3af77c143be13e3dcb4028bb053c46796c" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="a4c10b90495bec075842f0908fed8e11bf872a79b9ef37b556642436fabf01f1" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="ef22128cc9d208bb793c6c7bc1fde37d5629db8108e1e038895f98975e215a0c" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="e51374df89cbc42d39bea4ae30089a5ded0b45a0ffe61902dc65afcddd429544" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="7070ee555c04f1cca7c31f07303732f5291d06d97b4e397acd90b7092900f666" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="56e2232f5f66ca30e5e67a2dc864961cc45af1940de50e0c9f7acbbabc164c55" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="95c1443bb48c1825b440f15ac6c2b632c6dbb7a8eb24479dfcd9690599ec800c" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="ef12ef96f0385335f8429a31181a5c8244a0b7d66f6ab4d3aa07a8b2782bf1e0" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="b5ac5696841be7b543209386b396df6eb91cfec8eecb19cb59020245cad70a1a" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="72ef4647403f8d35b58ee4006b3a8a0e4df5345fbee2556bae6074c27713acda" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="57d3684ad2b188810740e8dc6e4e38656df3430cdf691c82a4ec5b604a9c5733" name="file" arch="src">
  <version epoch="0" ver="5.32" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1461067200">- Add patch file-5.26-zmagic.patch
  to fix detection chain if for compresses files are expanded</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add and revert upstream patch file-5.26-revert-close.patch
  (commit 0177f6dd30e1f8c5639c058dcdf1d9edd9f8528c) to help
  rpmbuild not to loose stdin</changelog>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
</package>
<package pkgid="71f735195d3fd5cbbbac07957a19c23f24719c462081cf6cfe79b5b4d0e8d0a3" name="file" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1461067200">- Add patch file-5.26-zmagic.patch
  to fix detection chain if for compresses files are expanded</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add and revert upstream patch file-5.26-revert-close.patch
  (commit 0177f6dd30e1f8c5639c058dcdf1d9edd9f8528c) to help
  rpmbuild not to loose stdin</changelog>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
</package>
<package pkgid="4c98d78bcae6c2edf6aca2d26a3271b934980a239e71290bb69f53817c036a00" name="file-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1461067200">- Add patch file-5.26-zmagic.patch
  to fix detection chain if for compresses files are expanded</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add and revert upstream patch file-5.26-revert-close.patch
  (commit 0177f6dd30e1f8c5639c058dcdf1d9edd9f8528c) to help
  rpmbuild not to loose stdin</changelog>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
</package>
<package pkgid="f840fe84df06bf5aaafe6ac60c95032b4c64346de215be4f04047e717c9e4a9b" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1461067200">- Add patch file-5.26-zmagic.patch
  to fix detection chain if for compresses files are expanded</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add and revert upstream patch file-5.26-revert-close.patch
  (commit 0177f6dd30e1f8c5639c058dcdf1d9edd9f8528c) to help
  rpmbuild not to loose stdin</changelog>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
</package>
<package pkgid="4f03b1b7b0f06f75458dc033aa456c418e7df46ac531750cd540efc557caa6b4" name="file-magic" arch="noarch">
  <version epoch="0" ver="5.32" rel="lp150.6.3.1"/>
  <changelog author="werner@suse.de" date="1461067200">- Add patch file-5.26-zmagic.patch
  to fix detection chain if for compresses files are expanded</changelog>
  <changelog author="werner@suse.de" date="1461153600">- Add and revert upstream patch file-5.26-revert-close.patch
  (commit 0177f6dd30e1f8c5639c058dcdf1d9edd9f8528c) to help
  rpmbuild not to loose stdin</changelog>
  <changelog author="werner@suse.de" date="1464782400">- Update to file version 5.27
  * Errors comparing DER entries or computing offsets
    are just indications of malformed non-DER files.
    Don't print them.
  * Offset comparison was off-by-one.
  * Fix compression code (Werner Fink)
  * Put new bytes constant in the right file (not the generated one)
- Remove patches
    file-5.26-version.patch
    file-5.26-downgrade_DER.patch
    file-5.26-console.diff
    file-5.26-zmagic.patch
  as now upstream
- Disable patch file-5.26-revert-close.patch for test
- Modify patches
    file-5.17-option.dif
    file-5.26.dif</changelog>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
</package>
<package pkgid="9be572d44a9090070cbbde3dfb257f16114fa96a0b8cc5cd19400744b06a3d32" name="filesystem" arch="src">
  <version epoch="0" ver="15.0" rel="lp150.8.3.1"/>
  <changelog author="kukuk@suse.de" date="1490788800">- Move /etc/init.d hiearchy to insserv-compat
- Move /etc/cups to cups-libs [bsc#1025689]</changelog>
  <changelog author="kukuk@suse.de" date="1492430400">- Remove home directories for wwwrun, lp, mail and nobody.
  They are now part of the corresponding system-user-* RPMs.</changelog>
  <changelog author="kukuk@suse.de" date="1496750400">- Change ownership of /etc/ppp, group dialout has meanwhile another
  meaning and there are no setgid dialout binaries who could need
  that.</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Get ride of the last non-root group. /run/lock is created by
  systemd, not filesystem, so remove it from here.</changelog>
  <changelog author="kukuk@suse.de" date="1496923201">- Remove /etc/susehelp.d and subdirectories, susehelp is gone
- Remove /etc/tmpdirs.d, support was removed 2011 and migrated
  to tmpfiles.d
- Remove /var/adm/perl-modules (support was removed with 11.4)</changelog>
  <changelog author="kukuk@suse.de" date="1496923202">- Require user root and group root</changelog>
  <changelog author="kukuk@suse.de" date="1497009600">- Remove /etc/ppp and subdirectories, the current, full list of
  directories is part of the sysconfig package</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Add /usr/share/metainfo: this is the new location defined by
  AppStream to replace /usr/share/appdata.</changelog>
  <changelog author="rbrown@suse.com" date="1510142400">- Add /usr/share/fillup-templates: this is the new location for
  fillup-templates</changelog>
  <changelog author="kukuk@suse.de" date="1511265600">- Create fs-var.conf for systemd-tmpfiles, which contains all
  directories and links below /var. This is needed for systems,
  which use transactional update, read-only root filesystem, or
  other things, where either /var is not available during upgrade
  or does not survive a reboot. So that systemd-tmpfiles could
  create them at next boot.
- Drop deprecated /usr/tmp compat link</changelog>
  <changelog author="kukuk@suse.de" date="1511352000">- Fix incomplete /usr/X11R6 drop from 2013</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Remove /var/adm/backup/{rpmdb,sysconfig}, they belong to
  aaa_base-extras only.</changelog>
  <changelog author="rbrown@suse.com" date="1517832001">- Remove /var/adm/fillup-templates, already prohibited by rpmlint</changelog>
  <changelog author="kukuk@suse.de" date="1517918400">- Adjust aaa_base test for latest aaa_base changes</changelog>
  <changelog author="kukuk@suse.de" date="1518091200">- Exclude some directories from fs-var.conf which are already part
  of systemd [bsc#1078466].
- Remove obsolete, outdated or duplicate directories:
  /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and
  /usr/share/tmac.</changelog>
  <changelog author="schwab@suse.de" date="1518609600">- Use lib64 filelist on riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Handle aaa_base moving the license files to /usr/share/licenses.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
</package>
<package pkgid="985eab3a4fda871250948acd6cf5d1dcb2d91b2dd0b422095897554cde8e86c7" name="filesystem" arch="x86_64">
  <version epoch="0" ver="15.0" rel="lp150.8.3.1"/>
  <changelog author="kukuk@suse.de" date="1490788800">- Move /etc/init.d hiearchy to insserv-compat
- Move /etc/cups to cups-libs [bsc#1025689]</changelog>
  <changelog author="kukuk@suse.de" date="1492430400">- Remove home directories for wwwrun, lp, mail and nobody.
  They are now part of the corresponding system-user-* RPMs.</changelog>
  <changelog author="kukuk@suse.de" date="1496750400">- Change ownership of /etc/ppp, group dialout has meanwhile another
  meaning and there are no setgid dialout binaries who could need
  that.</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Get ride of the last non-root group. /run/lock is created by
  systemd, not filesystem, so remove it from here.</changelog>
  <changelog author="kukuk@suse.de" date="1496923201">- Remove /etc/susehelp.d and subdirectories, susehelp is gone
- Remove /etc/tmpdirs.d, support was removed 2011 and migrated
  to tmpfiles.d
- Remove /var/adm/perl-modules (support was removed with 11.4)</changelog>
  <changelog author="kukuk@suse.de" date="1496923202">- Require user root and group root</changelog>
  <changelog author="kukuk@suse.de" date="1497009600">- Remove /etc/ppp and subdirectories, the current, full list of
  directories is part of the sysconfig package</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Add /usr/share/metainfo: this is the new location defined by
  AppStream to replace /usr/share/appdata.</changelog>
  <changelog author="rbrown@suse.com" date="1510142400">- Add /usr/share/fillup-templates: this is the new location for
  fillup-templates</changelog>
  <changelog author="kukuk@suse.de" date="1511265600">- Create fs-var.conf for systemd-tmpfiles, which contains all
  directories and links below /var. This is needed for systems,
  which use transactional update, read-only root filesystem, or
  other things, where either /var is not available during upgrade
  or does not survive a reboot. So that systemd-tmpfiles could
  create them at next boot.
- Drop deprecated /usr/tmp compat link</changelog>
  <changelog author="kukuk@suse.de" date="1511352000">- Fix incomplete /usr/X11R6 drop from 2013</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Remove /var/adm/backup/{rpmdb,sysconfig}, they belong to
  aaa_base-extras only.</changelog>
  <changelog author="rbrown@suse.com" date="1517832001">- Remove /var/adm/fillup-templates, already prohibited by rpmlint</changelog>
  <changelog author="kukuk@suse.de" date="1517918400">- Adjust aaa_base test for latest aaa_base changes</changelog>
  <changelog author="kukuk@suse.de" date="1518091200">- Exclude some directories from fs-var.conf which are already part
  of systemd [bsc#1078466].
- Remove obsolete, outdated or duplicate directories:
  /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and
  /usr/share/tmac.</changelog>
  <changelog author="schwab@suse.de" date="1518609600">- Use lib64 filelist on riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Handle aaa_base moving the license files to /usr/share/licenses.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
</package>
<package pkgid="c449ff51823126ad791c47656cbda9292162acf09019040c7917d71bbb1de088" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="baab0a01662f7be72d78cb4c68774f83e45b18eee0d9bdfcc597986249e6bbb0" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="e7b68b602000d051b2df57862694914f61bacd65353e649007b2064c1cd7ce74" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="b15dfe8ff7373289ab735395af2c632c3d2f62b4cfee80592dcab68e4ac9a86b" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="1feb98cdd07e16f1d3038a84dc1f8acf4432b731495326825310b86bbd137c53" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="0cce54f09753a552685a630fc67241e1b945d89bf28cc1526831e2a06e0d85fd" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.22.2"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.de&gt;" date="1547812800">- Add upstream patch to fix the error in --runtime-to-permanent
  option about 'settings' variable being referenced before
  assignment. This error occurs only when NetworkManager is not
  used. (bsc#1122151)
  * 0001-firewalld-fix-runtime-to-permanent-if-NM-not-in-use.patch</changelog>
</package>
<package pkgid="b2c9f57f24e37574002153feb2107badf5eb063ad16a44220820bcadbec2b59e" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="468543cc43a12ef70a7836dca8fe6cdbd1011aa2f19c6b31322e6bb1bb236af3" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="6893656b14870f03e93aeb8ac61e3e10745c8651d71af0f8cf47ccba1437a222" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="f56e950de0b375ca8012d567eb7a314c8d075f07f54a8e9970f7d0e3d47a53f1" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="9594a08e257dc30cc5da83601542d5f49cdb6e5085a085758594a8f4c178b7a6" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="d08134fc8248cb1a89a067dfc8e1caccedeb45ddc2d6f6eef97a77696f9c149f" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="d31933e66c64cf140b9ee1f46f3a1105c476894189d29ab72942dc4224a5941e" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.22.2"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.de&gt;" date="1547812800">- Add upstream patch to fix the error in --runtime-to-permanent
  option about 'settings' variable being referenced before
  assignment. This error occurs only when NetworkManager is not
  used. (bsc#1122151)
  * 0001-firewalld-fix-runtime-to-permanent-if-NM-not-in-use.patch</changelog>
</package>
<package pkgid="0abde7790de355470413bdd62b7698e6d1cd359f9becd96fc633bebc21eb5b2b" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="d6b2c2543d602487a4023b4d2e3166096be29c2edfd01aa694646daa0ee3df0c" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="56ce46b69e4044ab6493fdb8a3cfe02e3fce168e41077f805b3cd0b174f3f704" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="b71a695bd773536aa036c7eda189816e63b203d89205ceff275be0e85fa304ed" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="0b240615f8880fe7c0cce9a6f42e366f8e7ceeb5bac751b206999b2d9279bb1c" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="318cedc5b2ec662a8f4ba1dce47604e0d93dd1142067e36b8f70b921345e137b" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="3ec50009de4cd2405d10194d56c4e25252970bf0c290f0a6a4646f7c5eca7262" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.22.2"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.de&gt;" date="1547812800">- Add upstream patch to fix the error in --runtime-to-permanent
  option about 'settings' variable being referenced before
  assignment. This error occurs only when NetworkManager is not
  used. (bsc#1122151)
  * 0001-firewalld-fix-runtime-to-permanent-if-NM-not-in-use.patch</changelog>
</package>
<package pkgid="566ee4f3605c9d13024a1847b1b188bb905e97b3b45cb1569ed08b27718688c9" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="b5d252e3ae05732bf0e52a786a6e9b06a3afad0234e6d11fefb3fe42d7106b08" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="3fc984a5c5ea8aeee3b65b78c717b01ded1b121b1ca76849862d0a8f28f45349" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="53ca7086111c0a550c284c91e81d3428703588d3ddbc5ff9bbbf8e0ada4ebabd" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="7cc099a12c6d5ad9f1e64c604dc2941f5084971aa872d88a5d003b5e421bc0a7" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="e42116dfa0af9ea50e7a80519091075b88eda024526ea508b12b5c86d837a62a" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="837892e750bf8c137343b9f0657ef5335d6c81c44863a51adf7befda0944f7af" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="78f66eba62f8ff295fa3d1892b101043dd42976339e10c5593e71abb3fafbb72" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="4b8e4bea48d0639c17207ed5f549c9cf97117b9016e71d8b8adf107e6877f072" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="d7412589f04c125eaaa09c9d8db8b913ed92e47f392c859f6a30da7dffb0db37" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="9511af734fccdd607a6ef8f3d006ebe2e76c5a37e88884ee1e13efd739c5a894" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="f6c25381467bef6c69c3237870fab08864f1cec0487764949a514c9f167cea11" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.22.2"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.de&gt;" date="1547812800">- Add upstream patch to fix the error in --runtime-to-permanent
  option about 'settings' variable being referenced before
  assignment. This error occurs only when NetworkManager is not
  used. (bsc#1122151)
  * 0001-firewalld-fix-runtime-to-permanent-if-NM-not-in-use.patch</changelog>
</package>
<package pkgid="e30acfb8798f59ca4fd7d2f9c9aef7593802e107895be2d803019865c9fb765f" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.22.2"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.de&gt;" date="1547812800">- Add upstream patch to fix the error in --runtime-to-permanent
  option about 'settings' variable being referenced before
  assignment. This error occurs only when NetworkManager is not
  used. (bsc#1122151)
  * 0001-firewalld-fix-runtime-to-permanent-if-NM-not-in-use.patch</changelog>
</package>
<package pkgid="e92674529b3b5e9ff7c1f799f2dc0a9b2346e9fe9366cc1be3c549e9580f9543" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="5ea47f283f9400d6b5add9605d501920a9af8bfc2635580e02e46f933730adf7" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="773458e36da853e7924a70b438ded89cd6aa5c132e979747b908deac29d2a90a" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="c83059337303cb54aca60df5798b44bd11fb45168d1c902a3843e8c36003a14b" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="e33b48ecbefbfa52cdb5c65c6c9718bc86a4f2068ea061090bf2b998fceee6e3" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.12.1"/>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
</package>
<package pkgid="b62db5e3c7aca433bb4f2ba7fc526449fb8ee9380576bdc34c579c8427fd4934" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
</package>
<package pkgid="bbdaccacdf44c441220ee8fbc1b50022ad625f6f49b8e3eaf9380a124ad018fa" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.18.1"/>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
</package>
<package pkgid="1b5782e093ab4edc131a7bfebcfd174628e356f7be5c6cdd5cb6c823bfe37a95" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.22.2"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1539777600">- Add adapted upstream patch to make --reload/--complete-reload
  forget the runtime configuration and always load the permanent
  one (bsc#1112008)
  * 0001-firewall-core-Always-reload-the-permanent-configurat.patch</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1540468800">- Add upstream patch to fix a python stacktrace when getting the
  zone for a NetworkManager connection (bsc#1106319)
  * 0001-firewall-core-fw_nm-nm_get_zone_of_connection-should.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1541419200">- Import SUSE translations (boo#1108832)
  * added firewalld-0.5.5-po-20181105.tar.xz</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.de&gt;" date="1547812800">- Add upstream patch to fix the error in --runtime-to-permanent
  option about 'settings' variable being referenced before
  assignment. This error occurs only when NetworkManager is not
  used. (bsc#1122151)
  * 0001-firewalld-fix-runtime-to-permanent-if-NM-not-in-use.patch</changelog>
</package>
<package pkgid="96c24fdef11ab8dd9c5c91284207596247c4ad77e09c562a7a77c3e20efec529" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="lp150.2.9.1"/>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536926400">- Update to 0.5.5 (bsc#1108420)
  * update translations
  * firewall/core/fw_nm: nm_get_zone_of_connection should return None or empty string instead of False
  * fw: If direct rules fail to apply add a "Direct" label to error msg
  * fw: if startup fails on reload, reapply non-perm config that survives reload
- spec-cleaner fixes</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1537963200">- Add upstream patch to mark more strings as translatable (bsc#1096542)
  * 0001-Fix-translating-labels-392.patch
- Add upstream patches to fix NetworkManager integration (bsc#1109074)
  * 0001-fw_nm-Make-nm_get_zone_of_connection-only-check-perm.patch
  * 0002-firewall-cmd-On-getZoneOfInterface-only-ask-NM-for-p.patch
  * 0003-firewall-cmd-For-non-permanent-interface-changes-don.patch
  * 0004-fw_nm-New-function-to-get-all-interfaces-from-NM.patch
  * 0005-fw_nm-Add-nm_get_interfaces_in_zone.patch
  * 0006-firewall-cmd-Ask-NM-when-listing-permanent-interface.patch
  * 0007-firewall-cmd-Allow-passing-extra-interfaces-to-print.patch
- Add upstream patch to fix ifcfg ZONE attribute on permanent firewall
  changes (bsc#1109153)
  * 0001-ifcfg-Modify-ZONE-on-permanent-config-changes.patch</changelog>
</package>
<package pkgid="5e6d0f780a934eff7be0395a3d74df1bf2537198e64b6d22306ade67fb4d6041" name="firewalld-rpcbind-helper" arch="noarch">
  <version epoch="0" ver="0.1" rel="lp150.3.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
</package>
<package pkgid="a4e61fa3116e957987b376dfdd4038662249f4ea367fdaff78781724073820bc" name="firewalld-rpcbind-helper" arch="noarch">
  <version epoch="0" ver="0.1" rel="lp150.8.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566216000">Fix for bsc#1146188:
- 0003-main-script-fix-dict_values-object-does-not-support-.patch: fix error
  when running in python3 context and a port in `rpcinfo -p` is running
  neither as tcp nor in udp protocol.</changelog>
</package>
<package pkgid="1c1fd32eb37e2fa6315af6a9f65480b6f4b725b4ad122c05b55e5a6730149a4f" name="firewalld-rpcbind-helper" arch="src">
  <version epoch="0" ver="0.1" rel="lp150.8.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566216000">Fix for bsc#1146188:
- 0003-main-script-fix-dict_values-object-does-not-support-.patch: fix error
  when running in python3 context and a port in `rpcinfo -p` is running
  neither as tcp nor in udp protocol.</changelog>
</package>
<package pkgid="c230f5e5d26de06dba57e175a605553c4074dbcf006eaa05f5422e3a953e7e33" name="fish3" arch="src">
  <version epoch="0" ver="3.0.0" rel="lp150.3.1"/>
  <changelog author="seanpwatson@live.com" date="1412856000">- update to 2.1.1
- The fish_config web interface now uses an authentication token
  to protect requests and only responds to requests from the local
  machine with this token, preventing a remote code execution
  attack (closing CVE-2014-2914).
- psub and funced are no longer vulnerable to attacks which
  allow local privilege escalation and data tampering (closing
  CVE-2014-2906 and CVE-2014-3856)
- fishd uses a secure path for its socket, preventing a local
  privilege escalation attack (closing CVE-2014-2905)
- __fish_print_packages is no longer vulnerable to attacks which
  would allow local privilege escalation and data tampering
  (closing CVE-2014-3219)
- fishd now ignores SIGPIPE, fixing crashes using tools like
  GNU Parallel and which occurred more often as a result of
  the other fishd changes.</changelog>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
</package>
<package pkgid="9770105090b63c7ed7bf30bc03cada012036e4fc846a3fbe9c0fb3c8de9332d4" name="fish3" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="lp150.3.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
</package>
<package pkgid="614a1227e8c0545ebaeef9678cbf628318aa6030807dcb8a905dbce8f227ba3f" name="fish3-devel" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="lp150.3.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
</package>
<package pkgid="97a4267f660d00d58bbdfaf1d50ae5ee807ed5391132f6a2e5fd249abde159f9" name="flac" arch="src">
  <version epoch="0" ver="1.3.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="e4b47399409825ce52ce5c674457b6e8ac2f2b636f65eca52b4bd13f76dac737" name="flac" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="9c02263f1acb6ff1917aefbc964c89907a59c3266a570521f621620817e02c35" name="flac-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="e41c4e17aa24947721462492c459287b3d08c270dc24eeaf248474e30471fa0b" name="flac-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="4e80a6a8be88d771025b05f4b2b7665553f980c2db9433b527703a4b2bdca992" name="flac-doc" arch="noarch">
  <version epoch="0" ver="1.3.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1317470400">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1321790400">- Use O_CLOEXEC in all library code.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327406400">- Support symbol visibility features
- Disable test suite, nothing wrong with it, it just
  takes too long to run and uses private/hidden symbols to
  test flac's internals.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1327665600">- Fix some memory and resources leak.
- Link shared libraries with -Bsymbolic-functions
- annotate relevant functions with proper attributes to
  allow the compiler generate better code (attribute hot. alloc_size)</changelog>
  <changelog author="dvaleev@suse.com" date="1331208000">- don't use fvisibility=hidden on ppc. As it can't find symbols
  afterwards</changelog>
  <changelog author="dimstar@opensuse.org" date="1331640000">- Add flac-gcc47.patch: Replacing strcpy without 'lenght
  limitation' with strncpy, limited to 4 chars. This is safe, as we
  check the length already to be sure it is 4 chars, yet do not
  suffer from the problem that strcpy wants to add a '\0' char in
  plus to the target string.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1346760000">- Don't ignore $(AM_CFLAGS).
- Remove ppc patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1354968000">- Update to current git
  * patches deleted:
  - flac-1.2.1-asm.patch
  - flac-1.2.1-bitreader.patch
  - flac-gcc43-fixes.diff
  - flac-gcc47.patch
  - flac-leaks.patch
  - flac-no-xmms.diff
  - flac-visibility.patch
  - flac-printf-format-fix.diff
  All Upstreamed either by us or other distros.
- Add flac-openssl.patch, do crypto with openssl (not wanted upstream)
- Restore make check</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1355054400">- add xz buildrequires for old distros.</changelog>
  <changelog author="idonmez@suse.com" date="1355832000">- Add flac-fix-pkgconfig.patch to fix includedir in the pkgconfig
  files.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362052800">- add flac-1.2.1-automake1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: BSD-3-Clause and GPL-2.0+ and GFDL-1.2
  Numerous GPL-2.0+ licensed files;documtation is GFDL-1.2</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
</package>
<package pkgid="6fa3f25ec0ec0f738c1ae1e5d1b500eab809d7e1a0b5316122e4ae40a7791416" name="flatpak" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 0.9.5:
  + Fix installation of test-keyring2
  + Don't error out when updating metadata for disabled remotes
  + export: Store the app id in the X-Flatpak key
  + run: Handle file paths when forwarding uris
  + Automatically use a separate builddir with Meson
  + documents: paths in the apps dir ar always accessible
  + builder: Don't warn for unknown properties starting with x-
  + document portal: Fix race condition when unmounting old version
  + document store: Document as-needed functionality of AddFull
  + extra-data: Print exit status if apply_extra_data script fails
  + run: Add debug sprew for all bwrap arguments
  + build-update-repo: Remove unwanted deltas before updating
    summary
  + list: Don't list .Locale and .Debug by default (override with
  - a)
  + remote-ls: Don't show Locale/Debug and secondary arches by
    default.
  + list/remote-ls: Also ignore .Sources by default
  + Handle app ids with dashes when ignoring locale/debug.
  + dbus-portal: Fix return value type of filtered NameHasOwner
  + builder: Add --export-only feature
  + run: Allow regular files for --filesystem=xdg-config/path
  + run: Allow --filesystem=xdg-*/subdir:ro
  + build-commit-from: Don't copy old xa.ref in metadata
- Changes from version 0.9.4:
  + Improve display of partial extension sizes
  + flatpak-run.c:  valid locations, not types
  + Ensure commits are available when checking for extra-data
  + libglnx: Bump to latest master, use new file copy API
  + Document some environment variables (#754)
  + Revise the flatpak repo command slightly
  + repo command: use FlatpakTablePrinter
  + table printer: Introduce a cell struct
  + table printer: Support column alignment
  + repo: Improve formatting of size columns
  + table printer: Support column titles
  + table printer: Only show titles on ttys
  + repo: Set column titles
  + table printer: move to its own source files
  + Add an API to get the summary of a remote
  + Make flatpak remote-ls show more details
  + scripts: Fix flatpak-bisect log
  + Add the possibility of installing/updating without static
    deltas
  + Add a helper for formatted output
  + Use the new output helper
  + Add table printer api for number columns
  + table printer: Use localeconv for decimal point
  + repo: Use the new number column support
  + remote-ls: Improve the output
  + list: Improve output formatting
  + remotes: Improve output formatting
  + Improve info output
  + Fix compiler warnings
  + Don't use escape sequences unless on a tty
  + info: Preserve the previous output format
  + Update the man page a bit
  + info: Use flatpak_fancy_output
  + Add macros for common ANSI tty escape codes
  + info/list: Move subpath list to info
  + Fix man page typo
  + Don't crash if there's more titles than columns
  + Unset TMPDIR in the sandbox
  + Generate fd-passing arguments for document portal
  + Include the generated document portal code in common
  + Implement file forwarding for flatpak_run_app
  + Enable file forwarding in flatpak run
  + Document the --file-forwarding option
  + Handle %f when exporting desktop files
  + Handle %u as well for file forwarding
  + Enable file forwarding for %u as well
  + Handle document portal absence
  + Don't get the doc mount path twice
  + run: Handle forwarding uris better
  + run: Use flatpak_has_path_prefix instead of hand rolling
  + run: Properly handle canonicalization in file exports
  + run: Clean up the exports handling code
  + run: Only forward as document if the target app can't see the
    file
  + builder: Fix ldflags support
  + build: Fix fallout from the TMPDIR unset
  + remote-ls: Fix up the column titles
  + run: Handle the case where /tmp on the host is a symlink
  + Update to bubblewrap 0.1.8 for die-with-parent
  + build: Kill sandbox when flatpak build dies
  + Expose host /etc/hosts and /etc/host.conf
  + install: Make already-installed a warning, not an error
  + Move caches to ~/.cache
  + tests: Fix race condition in tmp webserver
  + Use clearer terminology in docs about extensions
  + info: Print some more information
  + Fix tests by setting XDG_CACHE_HOME
  + install: Handle no-static-delta in --user installs too
  + common: Remove unused flatpak_dir_install_or_update
  + remote-modify: Never update explicitly set values
  + common: Add flatpak_dir_update_remote_configuration_for_summary
  + common: Store the summary signature in the cache too
  + common: Drop verbose log of using cached summary
  + remote-modify: Don't modify if no arguments are specified
  + remote-modify: Implement --update-metadata as a system-helper
    method
  + transaction: Always update metadata for remotes on
    update/install
  + update: Split update into check_for_update and update
  + Optimize flatpak_variant_bsearch_str
  + Use flatpak_variant_bsearch_str to lookup in summary cache
  + Optimize flatpak_summary_match_subrefs
  + remote-add/modify: Break out gpg loading code to helper
  + update_remote_configuration_for_summary: Never use
    system-helper
  + Add support for adding new gpg keys via signed summary
  + install: Fix automatic metadata update
  + Support build-update-repo --redirect-url=
  + Add a missing return
  + Drop an unused variable
  + repo: Print out redirect url too
  + Make it possible to unset values in update-repo
  + Update docs for build-update-repo
  + Document is-set keys in repo config
  + Add a marker to rewritten desktop files
  + tests: Make it possible to create multiple test repos
  + tests: Allow overriding GPG args
  + tests: Add a second gpg keyring
  + tests: Add new test-repo.sh with initial GPG tests
  + tests: Add tests for --redirect-url and new GPG key
  + tests: run test-repo.sh with system repo too
  + repo: Print out gpg key hash too
  + Don't use gdbus-codegen autoptr generation
  + common: Break out the flatpak progress calculator to a helper
    method.
  + Improve error wording
  + Remove unused variables
  + Remove an unused autoptr definition
  + Add workaround to flatpak_repo_collect_sizes for uncommited
    objects
  + export: Add install/download size and metadata to commit
  + build-update-repo: Use the size/metadata info in the commit
    object
  + builder: Use mkdtemp for initial git/bzr checkout
  + builder: Allow specifying the git commit if the branch is a tag
  + fix clang warning
  + update-metadata: silently ignore for non-signed system-helper
    case
  + remote-add: Use the new system-helper for initial metadata
    update
  + remote-ls: Don't rely on active symlink value, use deploy data
  + deploy: Uncouple active link from checksum
  + deploy: Append the subdirs to the checkout dir
  + update: flatpak update --subpath= means all subpaths
  + update: If resused ostree repo fails, blow it away and create
    new
  + update: Fix update for partial commits with system-helper
  + deploy: Verify that xa.metadata in the commit matches the
    deployed file
  + install: Limit the exported file to a whitelist
  + Disable exported search providers by default
  + exports: Fix up exporting of dbus service files
  + Rewrite exported mimetype files
  + Document flatpakrepo format extensions
  + Document flatpakref format extensions
  + dir: Report progress more frequently
  + Require latest flatpak (2017.5)
  + builder: Take "buildsystem" into consideration for cache
    freshness
  + builder: Add a install-rule to allow customized install
  + run: Fix race condition in app identification
  + Improve progress report calculation
  + Use the nicer progress reporting for the CLI too
  + Require ostree 2017.6 for the new progress APIs
  + progress: Use the new atomic progress API
  + progress: Simplify the progress calculations
  + progress: Tweak metadata part of download
  + progress: Don't report ??? in the bar while estimating
  + Remove unused variable
  + Bump libglnx, port to new tmpfile API
  + Update to latest libglnx with tmpfile error fix
  + Update to a libglnx that has GLnxTmpfiles fixed
  + builder: Better debug output from the rofiles-fuse code
  + builder: More GLnxTmpfile fixes
  + OCI: Properly initialize all used progress fields
  + builder: Fix segfault if appstream-compose fails
  + complete: Don't read outside string
  + Add version property to all dbus interfaces
  + document-portal: Add AddFull() operation
  + document-portal: Bump version to 2 due to new AddFull method
  + builder: Make c/cxx/ldflags not override env
  + builder: Update doc for latest cflags vs env var change
  + builder: Add CPPFLAGS similar to the existing flags
  + Update to latest libglnx and use the new GLnxTmpFile API
  + Remove unused variable
  + Add some hints when icons are not found
  + Correct mountpoint handling
  + Small documentation improvements
  + common: Expose FlatpakExports
  + common: Add flatpak_find_current_ref helper
  + run: Use new flatpak_find_current_ref helper.
  + common: Add flatpak_context_load_for_app helper
  + document-portal: Lock just once in AddFull for many paths
  + document-portal: Add XDP_ADD_FLAGS_AS_NEEDED_BY_APP to AddFull
  + lib: Add flatpak_installation_update_appstream_full_sync with
    progress
  + Remove unused variables
  + lib: Fix update checking
  + builder: Add support for screenshot mirroring
  + Use the CLI progress for update --appstream too
  + export: Always set a xa.ref commit metadata
  + progress: Update at 300msec on the CLI
  + deploy: Ensure xa.ref, if set, is correct
  + Dist test-keyring2 dir
- Changes from version 0.9.3:
  + builder-manifest: Rename localized icon fields as well
  + build-update-repo: g_warning doesn't need newlines in the
    message
  + docs: Add flatpak make-current to the list of commands
  + doc: Align build commands with --help
  + docs: Add a / to all mentions of installations.d
  + doc: Add a manpage for the repo config format
  + docs: Add a man page for installation files
  + Fix --help output for --installation
  + doc: Include all man pages in html
  + appstream: Don't strip .desktop extension if thats the actual
    id
  + flatpak-builder: bundle module sources as runtime
  + Bundle sources: add support for bzr
  + Bundle sources: add support to bundle patches as well
  + Bundle sources: add flag --bundle-sources to control the
    bundling
  + Bundle sources: the path is always sources
  + Bundle sources: allow use case to mix local and online sources
  + Bundle sources: rename option to --extra-sources=DIR
  + Bundle sources: use git clone --shared for local sources
    checkout
  + Bundle sources: bundle the manifest
  + Bundle source: use C-style comments
  + Bundle sources: initialize app_dir_path later
  + Bundle sources, git_get_mirror_dir: able to pass NULL for
    is_local
  + Bundle sources, bzr: set error when repo can not be found
  + Bundle sources: bundling has to happen before the extracting
  + Improve html generation
  + Add some structure to the generated html
  + Fix a typo in a comment
  + run: Handle non-default WAYLAND_DISPLAY
  + Drop useless options from flatpak info
  + Avoid confusing behavior of flatpak info
  + Add more useful options to flatpak info
  + Add a --show-extensions option to flatpak info
  + Fix the testsuite
  + flatpak info: Show more information for extensions
  + flatpak info: Properly handle unmaintained extensions
  + Fix a compiler warning
  + builder-module: add "bootstrap.sh" to autogen_names
  + Add a repo command
  + Document flatpak repo command
  + Quiet compiler warnings
  + Don't fail the build if rofiles-fuse is not available
  + Make it a warning
  + docs: Fix a typo
  + Document build-extension
  + More metadata docs
  + build: Ensure we add the default dbus permissions
  + builder: handle module-relative paths for json includes
  + builder: Load source files from the directory of the module
  + build: Always set personality to linux32 when cross-building
  + builder: Print warnings for unknown properties
  + Report full version in http user agent
  + builder: Ignore --extra-data in flatpak-builder --run
  + docs: Mention that rename-icon should not have an extension
  + build-update-repo: Add internal function to create a single
    delta
  + build-update-repo: Spawn subprocesses when generating deltas
  + builder: Use module-relative paths for archive sources too
  + builder: Take build-commands into consideration for rebuild
  + docs: Typo fix: "flatpack-builder" -&gt; "flatpak-builder"
  + builder: Use flatpak_mkdir_p instead of query + mkdir
  + common: Add flatpak_build_file[_va] helper
  + builder: Add builder_context_find_in_sources_dirs
  + builder: Use context_find_in_sources_dirs to simplify code
  + Extend flatpak-builder test
  + builder: Make git patch apply verbose by default
  + Don't bundle inline (data:) URIs
  + builder: Drop the storing of local files to data: uris
  + fixup! common: Add flatpak_build_file[_va] helper
  + builder: Convert bundle sources to cached stage
  + builder: Change how we handle pre-existing git sources
  + builder: Update bzr bundling
  + export: Always make directories accessible
  + builder: Strip trailing whitespace in git submodule urls
  + builder: Add progress reporing while downloading
  + builder: Fix up unused variable warnings from clang
- Changes from version 0.9.2:
  + Fix typo
  + Revert "Fix typo"
  + builder: Remove all SDK extension from the platform
  + Re-fix typo
  + builder: Handle absolute paths in command
  + builder: Add --default-branch=BRANCH
  + build-export: Export all files with canonical permissions
  + document more metadata keys
  + Fix pofiles typo
  + Bump libglnx, use new glnx_throw(), fix callers
  + Import ostree's compiler warnings, fix up callers
  + Fix build if libdwarf dir missing
  + Correctly find system unmaintained extensions
  + Stop using ostree trivial-httpd
  + Drop -Werror for aggregate-returns
  + Add forgotten file
  + Removed a commented string
  + builder: Add a hint about --force-clean
  + test-webserver.sh: Remove accidental debug spew
  + tests: Don't leak SimpleHTTPServers
  + Add new API to the docs
  + OCI: Verify that loaded OCI blobs have the correct checksum
  + builder: Don't pass --require-version along to build
  + Add flatpak_oci_registry_get_uri
  + FlatpakDir: Break out helper
    flatpak_dir_lookup_ref_from_summary
  + oci: Break out get_digest_subpath helper function
  + OCI: fstat in local_open_file helper
  + OCI: Add flatpak_oci_registry_mirror_blob
  + OCI: Add flatpak_archive_read_open_fd_with_checksum
  + OCI: flatpak_pull_from_oci - verify manifest ref
  + OCI: Verify layer checksum while applying
  + OCI: Support OCI with system-helper by mirroring OCI repo
  + update: Don't check for update short-circuit if we're not
    pulling
  + OCI: Add flatpak_oci_sign_data
  + OCI: Add support for strict and mandatory json properties
  + OCI: Add json format for atomic-based signatures
  + OCI: Support signing build-bundld --oci output
  + OCI: Verify signatures
  + OCI: Fix signature checks on updates
  + OCI: Use gpg signatures in tests-oci.sh
  + utils: Prepare for libostree 2017.4 defining autocleanups
  + Split the manifest file docs off
  + CI: Add gpgme-devel to CI build environment
  + Fix ostree autoptr checks for git master
  + Fix unused variable errors reported by clang
  + builder: make appstream-compose failure fatal
  + dbus-proxy: Make Buffer refcounted
  + dbus-proxy: Fix use-after free in header parsing
  + dbus: proxy fix leak in get_arg0_string
  + dbus-proxy: Fix leak of get_arg0_string return value
  + dbus-proxy: Fix leak in setup phase
  + system-helper: Fix check for downgrade
  + update: Only allow downgrades if a commit is explicitly
    specified
  + Handle uris better when detecting .flatpak[repo,ref] suffix
  + Use ostree's BARE_USER_ONLY flag (#674)
  + Build with large file support
  + Use correct format string for guint64 on 32-bit
  + builder: Add disable-fsckobjects to git sources
  + builder: Add commit property to git source
  + builder: Support sdk-extensions also for apps
  + Updated translations.
- Add libqgpgme-devel BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Add flatpak-rpmlintrc as source while we wait for boo#1012961 to
  be resolved. Once this happens, feel free to nuke all traces of
  this change.</changelog>
  <changelog author="aplazas@suse.com" date="1500638402">- Update to version 0.9.7:
  + app/repo: Factor out common GVariant operation.
  + build:
  - Include config.h using CPPFLAGS.
  - Check for system extensions before any other C compiling.
  - Only run each instance of gdbus-codegen once.
  - Re-run gdbus-codegen if the Makefile changes.
  + builder:
  - Allow building modules with no sources if buildsystem=simple.
  - Use build-args during cleanup.
  - Rearrange args to do_export() to make mandatory ones obvious.
  - When bundling git sources, reuse cache.
  + common:
  - Use bulk OstreeAsyncProgress API for setting keys.
  - Split out self and repo arguments for a static function.
  + common/dir:
  - Factor out common code for getting repo metadata.
  - Factor out common code to get and load the summary file.
  - Factor out body of update_remote_configuration_for_summary().
  + dbus-proxy:
  - Make miscellaneous globals static.
  - Don't clear dbus_address twice.
  + docs: Remove --version from flatpak-build docs.
  + flatpak_dir_read_latest: Return NULL, not FALSE on error.
  + tests:
  - Add TEST_SKIP_CLEANUP env var for skipping test cleanup.
  - Add base-64 GPG keys to libtest declarations.
  + .gitignore: Ignore all generated man pages.
  + One more try at not distributing gdbus-codegen-generated
    sources.
  + Update Ukrainian translation.
  + Fix example.
  + Add nullable annotations for progress callbacks.
  + Update pofiles.
- Changes from version 0.9.6:
  + builder:
  - Allow .pyc files without .py.
  - Add inherit-extensions features.
  - Better handling of default-branch.
  - Add ExtensionOf group to created extensions (Debug/Locale).
  + builder: Inherit parent version for inherited extension.
  + build-export: Canonicalize file permissions.
  + builder-options: Fix setting CPPFLAGS.
  + ci:
  - mv .redhat-ci.yml ? .papr.yml.
  - Rework to be based on FAH + priv container.
  - Build ostree from git master.
  + dir:
  - Fix a minor memory leak.
  - Ensure we return on pull error to avoid error-overwrites.
  - Ensure ~/.local/share/flatpak is 0700.
  + doc: Remove duplicate list entry from flatpak-remote.xml.
  + export: Record flatpak version in default commit version.
  + info: Make --show-metadata machine parseable.
  + install: Manually save summary[.sig] in cache repo.
  + ls-remote: Drop unused variable.
  + run: Fix use-after-free in case you were exporting the same
    path twice.
  + testlibrary: Call g_assert_no_error first.
  + tests:
  - Add tests for no world writable dirs &amp; no setuid files.
  - Increase timeouts waiting for file notification.
  + utils: Fix minor formatting issue in gtk-doc comment.
  + xdp-fuse: Add parentheses to clarify precedence in a
    conditional.
  + xdp-main: Fix a typo in a comparison.
  + Don't distribute gdbus-codegen-generated source in tarballs.
  + Update Czech translation.
  + Use new libostree APIs to reject world-writable/suid content.
  + Default to bare-user-only repo.
  + Unless forced via FLATPAK_OSTREE_REPO_MODE user bare-user for
    cache repo.
  + Force the cache repo to use the bare-user mode.
  + Re-create the cache repo if it is not bare-user.
  + Manually copy summary for update and appdata too.
  + Update pofiles.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576000">- Update to version 0.9.8:
  + Core:
  - Experimental support for peer2peer installation, enable with
  - -enable-p2p.
  - Add default language setting to flatpak config. Defaults to
    all locales for system installs and the users locale for
    per-user installs.
  - build-update-repo: Now always keeps the two latest deltas
    around to avoid race conditions with outstanding downloads at
    the time or running the update.
  - Support loading extra data from local lookaside cache.
  + Flatpak-builder:
  - Set terminal title to the currently building module
  - Added ability to specify http url for sources mirror with
  - -extra-sources-url.
  - --install-deps-from=REMOTE installs the dependencies needed
    for the manifest.
  - New option --delete-build-dirs to always delete build
    directories, even on a failed build.
  - New property "add-extension" makes it nicer to create
    extension points.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576001">- Drop flatpak-rpmlintrc: no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 0.9.10:
  + Fix regression in dbus proxy that causes some apps to not work
    in 0.9.9.
- Changes from version 0.9.9:
  + flatpak-builder was split out into its own module:
    https://github.com/flatpak/flatpak-builder
  + When downloading to a temporary directory for later install to
    the system repo we now write to /var/tmp instead of $HOME. This
    is more likely to be the same filesystem as /var/lib/flatpak,
    and thus will not run into issues with e.g. filesystem full.
  + We now get the default language list from AccountService if
    possible.
  + A regression that made --devel crash was fixed.
  + New feature for flatpakrefs, SuggestRemoteName=remotename will
    cause flatpak to ask if you want to create a generic (not app
    specific) remote for the repo url.
  + flatpak build now does not die with the parent by default, you
    have to pass --die-with-parent. This was done because
    die-with-parent uses PR_SET_PDEATHSIG which does not work well
    if the parent is threaded, like e.g. gnome-software is.
  + We now always re-set the personality in the sandboxed process
    in order to avoid inheriting weird settings.
  + We now share a single dbus proxy instance for all proxies for a
    sandbox. dbus-proxy now properly disallows old-style
    eavesdropping.
  + We now support accessibility by starting a customized dbus
    proxy for the a11y bus.
- Drop flatpak-builder sub-package, it is now it's own project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304001">- Update to version 0.9.11:
  + You can now show all outstanding updates with: flatpak
    remote-ls --updates.
  + The dbus filter "org.name.*" now means all subnames of
    org.name, not just the first level. This matches how dbus
    arg0namespace works, and how the comming dbus container support
    will work.
  + Fixed segfault on update.
  + Better commandline tab completion.
  + Flatpak now exposes host icons readonly as
    /run/host/share/icons to the sandbox.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505390400">- Update to version 0.9.12:
  + Fixed a regression in extra-data installation.
  + Don't expose the a11y bus in flatpak build.</changelog>
  <changelog author="fezhang@suse.com" date="1505390401">- Drop the SLE12 / Leap42 conditional definition for _userunitdir.</changelog>
  <changelog author="aplazas@suse.com" date="1509019200">- Update to version 0.10.0:
  + Added the flatpak config option which can set the language
    settings.
  + Fix issue where sometimes ld.so.conf were not generated.
  + /dev/mali0 is added to --device=dri.
  + Work around ostree static delta issues in some cases.
- Changes from version 0.9.99:
  + Requires ostree 2017.12 for important pull stability fix.
  + New libflatpak API: flatpak_dir_cleanup_undeployed_refs,
    flatpak_installation_prune_local_repo,
    flatpak_installation_remove_local_ref_sync,
    flatpak_installation_cleanup_local_refs_sync.
  + build: FLATPAK_ID and FLATPAK_ARCH are now set in the
    environment when building.
  + update: Don't fail the entire update if some remote fails to
    update its metadata.
  + run: /.flatpak-info now lists exact commits and extensions in
    use.
  + run: We now use a per-app ld.so.cache file whenn running. This
    should speed things up, and allows ldconfig to report the
    correct results.
  + The verbose mode was changed into two levels, use -vv to show
    the more detailed info, which currently only contains the full
    bubblewrap argument lists.
  + run: Some common problematic host environment variables are now
    unset in the sandbox (PYTHONPATH, PERLLIB, PERL5LIB and
    XCURSOR_PATH).
  + run: Fixed failure when a higher prio extensions depended on a
    lower prio one.
  + run: The extension ld path order is now: app extensions, app,
    runtime extension, runtime. This was previously incorrect in
    that the app could override app extensions.
  + Extensions are now not downloaded if a matching unmaintained
    extension is already installed.
  + Preemptive changes to handle new bubblewrap change which
    doesn't user /newroot.
  + document portal: Disable debug spew that was accidentally
    enabled.
  + build-finish: New --extension-priority option.
  + run: Fix regression in --persist in 0.9.98.
  + run: Use sealed memfds (instead of just temporary files) when
    passing data to bubblewrap.
  + Updated translations.
- Changes from version 0.9.98.2:
  + Fix permission denied when using the system-helper.
- Changes from version 0.9.98.1:
  + run: Fix homedir access if the app has --filesystem=host
    access.
  + build-update: Fix appstream update in case one arch didn't
    change.
  + Updated translations.
- Changes from version 0.9.98:
  + libflatpak now correctly finds metadata for subset
    installations (like locale data).
  + flatpak build now supports --appdir which exposes the per-app
    directory in the user homedir. This is useful when testing
    builds.
  + The host fontconfig caches are exposed to the sandbox, next to
    the fonts in /run/host. This will (pending fontconfig work)
    allow sharing host fontconfig caches, allowing much faster
    initial startup for flatpak apps.
  + flatpak install now supports --no-pull.
  + Added new extension property "locale-subset", which makes the
    extension point act like a locale extension (i.e. only install
    the subset configured by the locale).
  + flatpak remote-add --oci is disabled for now, as this is not up
    to date with the latest OCI work, and we don't want to break
    existing deployments if this has to change when this lands.
  + Parallel installation/updates are now safe because we take a
    filesystem lock whenever we prune the local ostree repo.
  + Flatpak run now works when important paths like $HOME, etc, are
    symlinks.
  + The ostree min-free-space property is is set to zero by default
    for the flatpak repos. This was causing a lot of problems for
    people, but the feature is still there if you manually enable
    it.
  + Updated translations.
  + Require ostree 2017.12.</changelog>
  <changelog author="aplazas@suse.com" date="1511784000">- Update to version 0.10.1:
  + New command "flatpak remote-info" shows information about
    applications in a remote. In particular the --log operation
    shows the history and can be used in combination with flatpak
    update --commit=XYZ to roll back to a previous version.
  + New command "flatpak search" which allows you to search the
    appstream data from the commandline.
  + flatpak update now updates appstream data for all configured
    remotes, which is important for search to work.
  + Allow automatic installation of gtk themes matching the active
    theme.
  + Handle the case when /etc/resolv.conf is a symlink.
  + /usr an /etc are now expose in /run/host in the app if the app
    has full filesystem access.
  + flatpak remote-add now works as a user when /var/lib/flatpak is
    empty, allowing flatpak to work on stateless systems.
  + Add support for flatpak build --log-session/system-bus, similar
    to what flatpak run already does.
  + flatpak build --readonly runs with the target directory
    (normally /app) mounted read-only.
  + Fall back to LD_LIBRARY_PATH if a runtime doesn't have
    /usr/bin/ldconfig.
  + Updated the support for OCI remotes. This is work in progress
    and still disabled by default though.
  + Updated translations.
- Add pkgconfig(appstream-glib) BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 0.10.2:
  + flatpak update now updates from both system and user
    installations by default.
  + flatpak update is less noisy when updating appstream info.
  + All the remote-* commands now by default automatically decide
    to use --user or --system based on the given remote name.
  + flatpak remote-ls with no remote lists the content of all
    remotes.
  + Fixed regression that made xdg-user-dirs and theme selection
    for kde apps break.
  + flatpak override with no argument now overrides globally, i.e.
    for all apps.
  + flatpak override now supports --nofilesystem properly. For
    example flatpak override --nofilesystem=~/.ssh hides the ssh
    dir for all apps, even those who have homedir access.
  + flatpak install now takes a --reinstall argument which
    uninstalls a previously installed version if necessary. This is
    very useful when you want to install a new version from a
    different source.
  + flatpak install now allows you to pass an absolute pathname as
    remote name, which will create a temporary remote and install
    from that. The remote will be removed when the app is
    uninstalled. This is very useful during development and
    testing.
  + Flatpak now creates CLI wrappers for all installed apps, so if
    you add /var/lib/flatpak/exports/bin or
    ~/.local/share/flatpak/exports/bin to your PATH you can easily
    start flatpak apps by their application id.</changelog>
  <changelog author="alarrosa@suse.com" date="1513944000">- Update to version 0.10.2.1:
  + Fixed crash when installing some flatpak bundle files
  + Fix installation of telegram
  + Fixed some warnings reported by coverity
  + Some leaks fixed
  + Fixed typo in error message</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 0.10.3:
  + Fix vulnerability in dbus proxy.
  + Fix incorrect error message in update --appstream.
  + Ignore unknown permission requests.
  + remote-info: Fix --show-metadata behavior.
  + common: Fix division by zero when  calculate progress.
  + common/dir: Add a missing OstreeAsyncProgress default key.
  + lib/installation: Fix install/update_full() subpaths
    annotation.
  + app: Fix "multiple installations" prompt.
  + common/dir: Use an actual function for autoptr support without
    P2P.
  + Update Polish translation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 0.10.4:
  * allow personality syscall in devel mode
  * configure: Fix copy_file_range detection
  * Add --disable-document-portal configure option
  * lib: Make gnome-software work with an empty /var/lib/flatpak
  * dir: Emit an error on non-root downgrade attempts
  * common/dir: Skip progress reporting while setting up extra-data
  * doc: Fix docs for --update-appstream
  * flatpak remote-ls -u: only consider apps from the current remote
  * extract_appstream: allow component IDs not to end in .desktop
  * common/dir: Fix a memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1520251200">- Do not build document portal anymore, rely on
  xdg-desktop-portal/-gtk instead. Add corresponding dependency.
- Build with --with-system-bubblewrap and Add corresponding
  build and runtime dependency.
- Remove --with-dwarf-header configure flag, it no longer exists.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532347200">- polkit_rules_usability.patch: Improve usability by allowing
  members of the group 'wheel' to bypass polkit authentication
  checks when locally logged in (bnc#984817). This adds a few
  polkit actions to the rules that are not covered by upstream,
  because they are set to 'yes' for active users by default.
  On SUSE we require 'auth_admin' for regular users, however.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542369600">- Make polkit_rules_usability.patch effective by adding a 60- prefix to the
  rules file. This will cause it to be executed before the
  polkit-default-privs are executed (bsc#984817).</changelog>
</package>
<package pkgid="b7a11e92d3280c0c4a1c93b635e4698a4da53a034fd3520aba4828a044a3c2dd" name="flatpak" arch="src">
  <version epoch="0" ver="0.10.4" rel="lp150.8.1"/>
  <changelog author="aplazas@suse.com" date="1500638400">- Update to version 0.9.7:
  + app/repo: Factor out common GVariant operation.
  + build:
  - Include config.h using CPPFLAGS.
  - Check for system extensions before any other C compiling.
  - Only run each instance of gdbus-codegen once.
  - Re-run gdbus-codegen if the Makefile changes.
  + builder:
  - Allow building modules with no sources if buildsystem=simple.
  - Use build-args during cleanup.
  - Rearrange args to do_export() to make mandatory ones obvious.
  - When bundling git sources, reuse cache.
  + common:
  - Use bulk OstreeAsyncProgress API for setting keys.
  - Split out self and repo arguments for a static function.
  + common/dir:
  - Factor out common code for getting repo metadata.
  - Factor out common code to get and load the summary file.
  - Factor out body of update_remote_configuration_for_summary().
  + dbus-proxy:
  - Make miscellaneous globals static.
  - Don't clear dbus_address twice.
  + docs: Remove --version from flatpak-build docs.
  + flatpak_dir_read_latest: Return NULL, not FALSE on error.
  + tests:
  - Add TEST_SKIP_CLEANUP env var for skipping test cleanup.
  - Add base-64 GPG keys to libtest declarations.
  + .gitignore: Ignore all generated man pages.
  + One more try at not distributing gdbus-codegen-generated
    sources.
  + Update Ukrainian translation.
  + Fix example.
  + Add nullable annotations for progress callbacks.
  + Update pofiles.
- Changes from version 0.9.6:
  + builder:
  - Allow .pyc files without .py.
  - Add inherit-extensions features.
  - Better handling of default-branch.
  - Add ExtensionOf group to created extensions (Debug/Locale).
  + builder: Inherit parent version for inherited extension.
  + build-export: Canonicalize file permissions.
  + builder-options: Fix setting CPPFLAGS.
  + ci:
  - mv .redhat-ci.yml ? .papr.yml.
  - Rework to be based on FAH + priv container.
  - Build ostree from git master.
  + dir:
  - Fix a minor memory leak.
  - Ensure we return on pull error to avoid error-overwrites.
  - Ensure ~/.local/share/flatpak is 0700.
  + doc: Remove duplicate list entry from flatpak-remote.xml.
  + export: Record flatpak version in default commit version.
  + info: Make --show-metadata machine parseable.
  + install: Manually save summary[.sig] in cache repo.
  + ls-remote: Drop unused variable.
  + run: Fix use-after-free in case you were exporting the same
    path twice.
  + testlibrary: Call g_assert_no_error first.
  + tests:
  - Add tests for no world writable dirs &amp; no setuid files.
  - Increase timeouts waiting for file notification.
  + utils: Fix minor formatting issue in gtk-doc comment.
  + xdp-fuse: Add parentheses to clarify precedence in a
    conditional.
  + xdp-main: Fix a typo in a comparison.
  + Don't distribute gdbus-codegen-generated source in tarballs.
  + Update Czech translation.
  + Use new libostree APIs to reject world-writable/suid content.
  + Default to bare-user-only repo.
  + Unless forced via FLATPAK_OSTREE_REPO_MODE user bare-user for
    cache repo.
  + Force the cache repo to use the bare-user mode.
  + Re-create the cache repo if it is not bare-user.
  + Manually copy summary for update and appdata too.
  + Update pofiles.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576000">- Update to version 0.9.8:
  + Core:
  - Experimental support for peer2peer installation, enable with
  - -enable-p2p.
  - Add default language setting to flatpak config. Defaults to
    all locales for system installs and the users locale for
    per-user installs.
  - build-update-repo: Now always keeps the two latest deltas
    around to avoid race conditions with outstanding downloads at
    the time or running the update.
  - Support loading extra data from local lookaside cache.
  + Flatpak-builder:
  - Set terminal title to the currently building module
  - Added ability to specify http url for sources mirror with
  - -extra-sources-url.
  - --install-deps-from=REMOTE installs the dependencies needed
    for the manifest.
  - New option --delete-build-dirs to always delete build
    directories, even on a failed build.
  - New property "add-extension" makes it nicer to create
    extension points.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576001">- Drop flatpak-rpmlintrc: no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 0.9.10:
  + Fix regression in dbus proxy that causes some apps to not work
    in 0.9.9.
- Changes from version 0.9.9:
  + flatpak-builder was split out into its own module:
    https://github.com/flatpak/flatpak-builder
  + When downloading to a temporary directory for later install to
    the system repo we now write to /var/tmp instead of $HOME. This
    is more likely to be the same filesystem as /var/lib/flatpak,
    and thus will not run into issues with e.g. filesystem full.
  + We now get the default language list from AccountService if
    possible.
  + A regression that made --devel crash was fixed.
  + New feature for flatpakrefs, SuggestRemoteName=remotename will
    cause flatpak to ask if you want to create a generic (not app
    specific) remote for the repo url.
  + flatpak build now does not die with the parent by default, you
    have to pass --die-with-parent. This was done because
    die-with-parent uses PR_SET_PDEATHSIG which does not work well
    if the parent is threaded, like e.g. gnome-software is.
  + We now always re-set the personality in the sandboxed process
    in order to avoid inheriting weird settings.
  + We now share a single dbus proxy instance for all proxies for a
    sandbox. dbus-proxy now properly disallows old-style
    eavesdropping.
  + We now support accessibility by starting a customized dbus
    proxy for the a11y bus.
- Drop flatpak-builder sub-package, it is now it's own project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304001">- Update to version 0.9.11:
  + You can now show all outstanding updates with: flatpak
    remote-ls --updates.
  + The dbus filter "org.name.*" now means all subnames of
    org.name, not just the first level. This matches how dbus
    arg0namespace works, and how the comming dbus container support
    will work.
  + Fixed segfault on update.
  + Better commandline tab completion.
  + Flatpak now exposes host icons readonly as
    /run/host/share/icons to the sandbox.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505390400">- Update to version 0.9.12:
  + Fixed a regression in extra-data installation.
  + Don't expose the a11y bus in flatpak build.</changelog>
  <changelog author="fezhang@suse.com" date="1505390401">- Drop the SLE12 / Leap42 conditional definition for _userunitdir.</changelog>
  <changelog author="aplazas@suse.com" date="1509019200">- Update to version 0.10.0:
  + Added the flatpak config option which can set the language
    settings.
  + Fix issue where sometimes ld.so.conf were not generated.
  + /dev/mali0 is added to --device=dri.
  + Work around ostree static delta issues in some cases.
- Changes from version 0.9.99:
  + Requires ostree 2017.12 for important pull stability fix.
  + New libflatpak API: flatpak_dir_cleanup_undeployed_refs,
    flatpak_installation_prune_local_repo,
    flatpak_installation_remove_local_ref_sync,
    flatpak_installation_cleanup_local_refs_sync.
  + build: FLATPAK_ID and FLATPAK_ARCH are now set in the
    environment when building.
  + update: Don't fail the entire update if some remote fails to
    update its metadata.
  + run: /.flatpak-info now lists exact commits and extensions in
    use.
  + run: We now use a per-app ld.so.cache file whenn running. This
    should speed things up, and allows ldconfig to report the
    correct results.
  + The verbose mode was changed into two levels, use -vv to show
    the more detailed info, which currently only contains the full
    bubblewrap argument lists.
  + run: Some common problematic host environment variables are now
    unset in the sandbox (PYTHONPATH, PERLLIB, PERL5LIB and
    XCURSOR_PATH).
  + run: Fixed failure when a higher prio extensions depended on a
    lower prio one.
  + run: The extension ld path order is now: app extensions, app,
    runtime extension, runtime. This was previously incorrect in
    that the app could override app extensions.
  + Extensions are now not downloaded if a matching unmaintained
    extension is already installed.
  + Preemptive changes to handle new bubblewrap change which
    doesn't user /newroot.
  + document portal: Disable debug spew that was accidentally
    enabled.
  + build-finish: New --extension-priority option.
  + run: Fix regression in --persist in 0.9.98.
  + run: Use sealed memfds (instead of just temporary files) when
    passing data to bubblewrap.
  + Updated translations.
- Changes from version 0.9.98.2:
  + Fix permission denied when using the system-helper.
- Changes from version 0.9.98.1:
  + run: Fix homedir access if the app has --filesystem=host
    access.
  + build-update: Fix appstream update in case one arch didn't
    change.
  + Updated translations.
- Changes from version 0.9.98:
  + libflatpak now correctly finds metadata for subset
    installations (like locale data).
  + flatpak build now supports --appdir which exposes the per-app
    directory in the user homedir. This is useful when testing
    builds.
  + The host fontconfig caches are exposed to the sandbox, next to
    the fonts in /run/host. This will (pending fontconfig work)
    allow sharing host fontconfig caches, allowing much faster
    initial startup for flatpak apps.
  + flatpak install now supports --no-pull.
  + Added new extension property "locale-subset", which makes the
    extension point act like a locale extension (i.e. only install
    the subset configured by the locale).
  + flatpak remote-add --oci is disabled for now, as this is not up
    to date with the latest OCI work, and we don't want to break
    existing deployments if this has to change when this lands.
  + Parallel installation/updates are now safe because we take a
    filesystem lock whenever we prune the local ostree repo.
  + Flatpak run now works when important paths like $HOME, etc, are
    symlinks.
  + The ostree min-free-space property is is set to zero by default
    for the flatpak repos. This was causing a lot of problems for
    people, but the feature is still there if you manually enable
    it.
  + Updated translations.
  + Require ostree 2017.12.</changelog>
  <changelog author="aplazas@suse.com" date="1511784000">- Update to version 0.10.1:
  + New command "flatpak remote-info" shows information about
    applications in a remote. In particular the --log operation
    shows the history and can be used in combination with flatpak
    update --commit=XYZ to roll back to a previous version.
  + New command "flatpak search" which allows you to search the
    appstream data from the commandline.
  + flatpak update now updates appstream data for all configured
    remotes, which is important for search to work.
  + Allow automatic installation of gtk themes matching the active
    theme.
  + Handle the case when /etc/resolv.conf is a symlink.
  + /usr an /etc are now expose in /run/host in the app if the app
    has full filesystem access.
  + flatpak remote-add now works as a user when /var/lib/flatpak is
    empty, allowing flatpak to work on stateless systems.
  + Add support for flatpak build --log-session/system-bus, similar
    to what flatpak run already does.
  + flatpak build --readonly runs with the target directory
    (normally /app) mounted read-only.
  + Fall back to LD_LIBRARY_PATH if a runtime doesn't have
    /usr/bin/ldconfig.
  + Updated the support for OCI remotes. This is work in progress
    and still disabled by default though.
  + Updated translations.
- Add pkgconfig(appstream-glib) BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 0.10.2:
  + flatpak update now updates from both system and user
    installations by default.
  + flatpak update is less noisy when updating appstream info.
  + All the remote-* commands now by default automatically decide
    to use --user or --system based on the given remote name.
  + flatpak remote-ls with no remote lists the content of all
    remotes.
  + Fixed regression that made xdg-user-dirs and theme selection
    for kde apps break.
  + flatpak override with no argument now overrides globally, i.e.
    for all apps.
  + flatpak override now supports --nofilesystem properly. For
    example flatpak override --nofilesystem=~/.ssh hides the ssh
    dir for all apps, even those who have homedir access.
  + flatpak install now takes a --reinstall argument which
    uninstalls a previously installed version if necessary. This is
    very useful when you want to install a new version from a
    different source.
  + flatpak install now allows you to pass an absolute pathname as
    remote name, which will create a temporary remote and install
    from that. The remote will be removed when the app is
    uninstalled. This is very useful during development and
    testing.
  + Flatpak now creates CLI wrappers for all installed apps, so if
    you add /var/lib/flatpak/exports/bin or
    ~/.local/share/flatpak/exports/bin to your PATH you can easily
    start flatpak apps by their application id.</changelog>
  <changelog author="alarrosa@suse.com" date="1513944000">- Update to version 0.10.2.1:
  + Fixed crash when installing some flatpak bundle files
  + Fix installation of telegram
  + Fixed some warnings reported by coverity
  + Some leaks fixed
  + Fixed typo in error message</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 0.10.3:
  + Fix vulnerability in dbus proxy.
  + Fix incorrect error message in update --appstream.
  + Ignore unknown permission requests.
  + remote-info: Fix --show-metadata behavior.
  + common: Fix division by zero when  calculate progress.
  + common/dir: Add a missing OstreeAsyncProgress default key.
  + lib/installation: Fix install/update_full() subpaths
    annotation.
  + app: Fix "multiple installations" prompt.
  + common/dir: Use an actual function for autoptr support without
    P2P.
  + Update Polish translation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 0.10.4:
  * allow personality syscall in devel mode
  * configure: Fix copy_file_range detection
  * Add --disable-document-portal configure option
  * lib: Make gnome-software work with an empty /var/lib/flatpak
  * dir: Emit an error on non-root downgrade attempts
  * common/dir: Skip progress reporting while setting up extra-data
  * doc: Fix docs for --update-appstream
  * flatpak remote-ls -u: only consider apps from the current remote
  * extract_appstream: allow component IDs not to end in .desktop
  * common/dir: Fix a memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1520251200">- Do not build document portal anymore, rely on
  xdg-desktop-portal/-gtk instead. Add corresponding dependency.
- Build with --with-system-bubblewrap and Add corresponding
  build and runtime dependency.
- Remove --with-dwarf-header configure flag, it no longer exists.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532347200">- polkit_rules_usability.patch: Improve usability by allowing
  members of the group 'wheel' to bypass polkit authentication
  checks when locally logged in (bnc#984817). This adds a few
  polkit actions to the rules that are not covered by upstream,
  because they are set to 'yes' for active users by default.
  On SUSE we require 'auth_admin' for regular users, however.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542369600">- Make polkit_rules_usability.patch effective by adding a 60- prefix to the
  rules file. This will cause it to be executed before the
  polkit-default-privs are executed (bsc#984817).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1557921600">- Add CVE-2019-11460.patch to only compare the lowest 32 ioctl
  arg bits for TIOCSTI (boo#1133043, CVE-2019-11460,
  boo#1133041, CVE-2019-11461).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563796800">- Add CVE-2019-8308.patch to fix a potential /proc based sandbox
  escape by not exposing /proc when running apply_extra. The patch
  is backported from upstream to the 0.10.4 codebase (boo#1125431,
  CVE-2019-8308).</changelog>
</package>
<package pkgid="e42a451e0e3c43a4166d650bd98b6f644df3792a62a32b435f33f5733610f503" name="flatpak" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="lp150.8.1"/>
  <changelog author="aplazas@suse.com" date="1500638400">- Update to version 0.9.7:
  + app/repo: Factor out common GVariant operation.
  + build:
  - Include config.h using CPPFLAGS.
  - Check for system extensions before any other C compiling.
  - Only run each instance of gdbus-codegen once.
  - Re-run gdbus-codegen if the Makefile changes.
  + builder:
  - Allow building modules with no sources if buildsystem=simple.
  - Use build-args during cleanup.
  - Rearrange args to do_export() to make mandatory ones obvious.
  - When bundling git sources, reuse cache.
  + common:
  - Use bulk OstreeAsyncProgress API for setting keys.
  - Split out self and repo arguments for a static function.
  + common/dir:
  - Factor out common code for getting repo metadata.
  - Factor out common code to get and load the summary file.
  - Factor out body of update_remote_configuration_for_summary().
  + dbus-proxy:
  - Make miscellaneous globals static.
  - Don't clear dbus_address twice.
  + docs: Remove --version from flatpak-build docs.
  + flatpak_dir_read_latest: Return NULL, not FALSE on error.
  + tests:
  - Add TEST_SKIP_CLEANUP env var for skipping test cleanup.
  - Add base-64 GPG keys to libtest declarations.
  + .gitignore: Ignore all generated man pages.
  + One more try at not distributing gdbus-codegen-generated
    sources.
  + Update Ukrainian translation.
  + Fix example.
  + Add nullable annotations for progress callbacks.
  + Update pofiles.
- Changes from version 0.9.6:
  + builder:
  - Allow .pyc files without .py.
  - Add inherit-extensions features.
  - Better handling of default-branch.
  - Add ExtensionOf group to created extensions (Debug/Locale).
  + builder: Inherit parent version for inherited extension.
  + build-export: Canonicalize file permissions.
  + builder-options: Fix setting CPPFLAGS.
  + ci:
  - mv .redhat-ci.yml ? .papr.yml.
  - Rework to be based on FAH + priv container.
  - Build ostree from git master.
  + dir:
  - Fix a minor memory leak.
  - Ensure we return on pull error to avoid error-overwrites.
  - Ensure ~/.local/share/flatpak is 0700.
  + doc: Remove duplicate list entry from flatpak-remote.xml.
  + export: Record flatpak version in default commit version.
  + info: Make --show-metadata machine parseable.
  + install: Manually save summary[.sig] in cache repo.
  + ls-remote: Drop unused variable.
  + run: Fix use-after-free in case you were exporting the same
    path twice.
  + testlibrary: Call g_assert_no_error first.
  + tests:
  - Add tests for no world writable dirs &amp; no setuid files.
  - Increase timeouts waiting for file notification.
  + utils: Fix minor formatting issue in gtk-doc comment.
  + xdp-fuse: Add parentheses to clarify precedence in a
    conditional.
  + xdp-main: Fix a typo in a comparison.
  + Don't distribute gdbus-codegen-generated source in tarballs.
  + Update Czech translation.
  + Use new libostree APIs to reject world-writable/suid content.
  + Default to bare-user-only repo.
  + Unless forced via FLATPAK_OSTREE_REPO_MODE user bare-user for
    cache repo.
  + Force the cache repo to use the bare-user mode.
  + Re-create the cache repo if it is not bare-user.
  + Manually copy summary for update and appdata too.
  + Update pofiles.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576000">- Update to version 0.9.8:
  + Core:
  - Experimental support for peer2peer installation, enable with
  - -enable-p2p.
  - Add default language setting to flatpak config. Defaults to
    all locales for system installs and the users locale for
    per-user installs.
  - build-update-repo: Now always keeps the two latest deltas
    around to avoid race conditions with outstanding downloads at
    the time or running the update.
  - Support loading extra data from local lookaside cache.
  + Flatpak-builder:
  - Set terminal title to the currently building module
  - Added ability to specify http url for sources mirror with
  - -extra-sources-url.
  - --install-deps-from=REMOTE installs the dependencies needed
    for the manifest.
  - New option --delete-build-dirs to always delete build
    directories, even on a failed build.
  - New property "add-extension" makes it nicer to create
    extension points.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576001">- Drop flatpak-rpmlintrc: no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 0.9.10:
  + Fix regression in dbus proxy that causes some apps to not work
    in 0.9.9.
- Changes from version 0.9.9:
  + flatpak-builder was split out into its own module:
    https://github.com/flatpak/flatpak-builder
  + When downloading to a temporary directory for later install to
    the system repo we now write to /var/tmp instead of $HOME. This
    is more likely to be the same filesystem as /var/lib/flatpak,
    and thus will not run into issues with e.g. filesystem full.
  + We now get the default language list from AccountService if
    possible.
  + A regression that made --devel crash was fixed.
  + New feature for flatpakrefs, SuggestRemoteName=remotename will
    cause flatpak to ask if you want to create a generic (not app
    specific) remote for the repo url.
  + flatpak build now does not die with the parent by default, you
    have to pass --die-with-parent. This was done because
    die-with-parent uses PR_SET_PDEATHSIG which does not work well
    if the parent is threaded, like e.g. gnome-software is.
  + We now always re-set the personality in the sandboxed process
    in order to avoid inheriting weird settings.
  + We now share a single dbus proxy instance for all proxies for a
    sandbox. dbus-proxy now properly disallows old-style
    eavesdropping.
  + We now support accessibility by starting a customized dbus
    proxy for the a11y bus.
- Drop flatpak-builder sub-package, it is now it's own project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304001">- Update to version 0.9.11:
  + You can now show all outstanding updates with: flatpak
    remote-ls --updates.
  + The dbus filter "org.name.*" now means all subnames of
    org.name, not just the first level. This matches how dbus
    arg0namespace works, and how the comming dbus container support
    will work.
  + Fixed segfault on update.
  + Better commandline tab completion.
  + Flatpak now exposes host icons readonly as
    /run/host/share/icons to the sandbox.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505390400">- Update to version 0.9.12:
  + Fixed a regression in extra-data installation.
  + Don't expose the a11y bus in flatpak build.</changelog>
  <changelog author="fezhang@suse.com" date="1505390401">- Drop the SLE12 / Leap42 conditional definition for _userunitdir.</changelog>
  <changelog author="aplazas@suse.com" date="1509019200">- Update to version 0.10.0:
  + Added the flatpak config option which can set the language
    settings.
  + Fix issue where sometimes ld.so.conf were not generated.
  + /dev/mali0 is added to --device=dri.
  + Work around ostree static delta issues in some cases.
- Changes from version 0.9.99:
  + Requires ostree 2017.12 for important pull stability fix.
  + New libflatpak API: flatpak_dir_cleanup_undeployed_refs,
    flatpak_installation_prune_local_repo,
    flatpak_installation_remove_local_ref_sync,
    flatpak_installation_cleanup_local_refs_sync.
  + build: FLATPAK_ID and FLATPAK_ARCH are now set in the
    environment when building.
  + update: Don't fail the entire update if some remote fails to
    update its metadata.
  + run: /.flatpak-info now lists exact commits and extensions in
    use.
  + run: We now use a per-app ld.so.cache file whenn running. This
    should speed things up, and allows ldconfig to report the
    correct results.
  + The verbose mode was changed into two levels, use -vv to show
    the more detailed info, which currently only contains the full
    bubblewrap argument lists.
  + run: Some common problematic host environment variables are now
    unset in the sandbox (PYTHONPATH, PERLLIB, PERL5LIB and
    XCURSOR_PATH).
  + run: Fixed failure when a higher prio extensions depended on a
    lower prio one.
  + run: The extension ld path order is now: app extensions, app,
    runtime extension, runtime. This was previously incorrect in
    that the app could override app extensions.
  + Extensions are now not downloaded if a matching unmaintained
    extension is already installed.
  + Preemptive changes to handle new bubblewrap change which
    doesn't user /newroot.
  + document portal: Disable debug spew that was accidentally
    enabled.
  + build-finish: New --extension-priority option.
  + run: Fix regression in --persist in 0.9.98.
  + run: Use sealed memfds (instead of just temporary files) when
    passing data to bubblewrap.
  + Updated translations.
- Changes from version 0.9.98.2:
  + Fix permission denied when using the system-helper.
- Changes from version 0.9.98.1:
  + run: Fix homedir access if the app has --filesystem=host
    access.
  + build-update: Fix appstream update in case one arch didn't
    change.
  + Updated translations.
- Changes from version 0.9.98:
  + libflatpak now correctly finds metadata for subset
    installations (like locale data).
  + flatpak build now supports --appdir which exposes the per-app
    directory in the user homedir. This is useful when testing
    builds.
  + The host fontconfig caches are exposed to the sandbox, next to
    the fonts in /run/host. This will (pending fontconfig work)
    allow sharing host fontconfig caches, allowing much faster
    initial startup for flatpak apps.
  + flatpak install now supports --no-pull.
  + Added new extension property "locale-subset", which makes the
    extension point act like a locale extension (i.e. only install
    the subset configured by the locale).
  + flatpak remote-add --oci is disabled for now, as this is not up
    to date with the latest OCI work, and we don't want to break
    existing deployments if this has to change when this lands.
  + Parallel installation/updates are now safe because we take a
    filesystem lock whenever we prune the local ostree repo.
  + Flatpak run now works when important paths like $HOME, etc, are
    symlinks.
  + The ostree min-free-space property is is set to zero by default
    for the flatpak repos. This was causing a lot of problems for
    people, but the feature is still there if you manually enable
    it.
  + Updated translations.
  + Require ostree 2017.12.</changelog>
  <changelog author="aplazas@suse.com" date="1511784000">- Update to version 0.10.1:
  + New command "flatpak remote-info" shows information about
    applications in a remote. In particular the --log operation
    shows the history and can be used in combination with flatpak
    update --commit=XYZ to roll back to a previous version.
  + New command "flatpak search" which allows you to search the
    appstream data from the commandline.
  + flatpak update now updates appstream data for all configured
    remotes, which is important for search to work.
  + Allow automatic installation of gtk themes matching the active
    theme.
  + Handle the case when /etc/resolv.conf is a symlink.
  + /usr an /etc are now expose in /run/host in the app if the app
    has full filesystem access.
  + flatpak remote-add now works as a user when /var/lib/flatpak is
    empty, allowing flatpak to work on stateless systems.
  + Add support for flatpak build --log-session/system-bus, similar
    to what flatpak run already does.
  + flatpak build --readonly runs with the target directory
    (normally /app) mounted read-only.
  + Fall back to LD_LIBRARY_PATH if a runtime doesn't have
    /usr/bin/ldconfig.
  + Updated the support for OCI remotes. This is work in progress
    and still disabled by default though.
  + Updated translations.
- Add pkgconfig(appstream-glib) BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 0.10.2:
  + flatpak update now updates from both system and user
    installations by default.
  + flatpak update is less noisy when updating appstream info.
  + All the remote-* commands now by default automatically decide
    to use --user or --system based on the given remote name.
  + flatpak remote-ls with no remote lists the content of all
    remotes.
  + Fixed regression that made xdg-user-dirs and theme selection
    for kde apps break.
  + flatpak override with no argument now overrides globally, i.e.
    for all apps.
  + flatpak override now supports --nofilesystem properly. For
    example flatpak override --nofilesystem=~/.ssh hides the ssh
    dir for all apps, even those who have homedir access.
  + flatpak install now takes a --reinstall argument which
    uninstalls a previously installed version if necessary. This is
    very useful when you want to install a new version from a
    different source.
  + flatpak install now allows you to pass an absolute pathname as
    remote name, which will create a temporary remote and install
    from that. The remote will be removed when the app is
    uninstalled. This is very useful during development and
    testing.
  + Flatpak now creates CLI wrappers for all installed apps, so if
    you add /var/lib/flatpak/exports/bin or
    ~/.local/share/flatpak/exports/bin to your PATH you can easily
    start flatpak apps by their application id.</changelog>
  <changelog author="alarrosa@suse.com" date="1513944000">- Update to version 0.10.2.1:
  + Fixed crash when installing some flatpak bundle files
  + Fix installation of telegram
  + Fixed some warnings reported by coverity
  + Some leaks fixed
  + Fixed typo in error message</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 0.10.3:
  + Fix vulnerability in dbus proxy.
  + Fix incorrect error message in update --appstream.
  + Ignore unknown permission requests.
  + remote-info: Fix --show-metadata behavior.
  + common: Fix division by zero when  calculate progress.
  + common/dir: Add a missing OstreeAsyncProgress default key.
  + lib/installation: Fix install/update_full() subpaths
    annotation.
  + app: Fix "multiple installations" prompt.
  + common/dir: Use an actual function for autoptr support without
    P2P.
  + Update Polish translation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 0.10.4:
  * allow personality syscall in devel mode
  * configure: Fix copy_file_range detection
  * Add --disable-document-portal configure option
  * lib: Make gnome-software work with an empty /var/lib/flatpak
  * dir: Emit an error on non-root downgrade attempts
  * common/dir: Skip progress reporting while setting up extra-data
  * doc: Fix docs for --update-appstream
  * flatpak remote-ls -u: only consider apps from the current remote
  * extract_appstream: allow component IDs not to end in .desktop
  * common/dir: Fix a memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1520251200">- Do not build document portal anymore, rely on
  xdg-desktop-portal/-gtk instead. Add corresponding dependency.
- Build with --with-system-bubblewrap and Add corresponding
  build and runtime dependency.
- Remove --with-dwarf-header configure flag, it no longer exists.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532347200">- polkit_rules_usability.patch: Improve usability by allowing
  members of the group 'wheel' to bypass polkit authentication
  checks when locally logged in (bnc#984817). This adds a few
  polkit actions to the rules that are not covered by upstream,
  because they are set to 'yes' for active users by default.
  On SUSE we require 'auth_admin' for regular users, however.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542369600">- Make polkit_rules_usability.patch effective by adding a 60- prefix to the
  rules file. This will cause it to be executed before the
  polkit-default-privs are executed (bsc#984817).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1557921600">- Add CVE-2019-11460.patch to only compare the lowest 32 ioctl
  arg bits for TIOCSTI (boo#1133043, CVE-2019-11460,
  boo#1133041, CVE-2019-11461).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563796800">- Add CVE-2019-8308.patch to fix a potential /proc based sandbox
  escape by not exposing /proc when running apply_extra. The patch
  is backported from upstream to the 0.10.4 codebase (boo#1125431,
  CVE-2019-8308).</changelog>
</package>
<package pkgid="29206bf1d3b9617d775d25efa666086e350f83dd5690d4be6b5374c48fda4b39" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 0.9.5:
  + Fix installation of test-keyring2
  + Don't error out when updating metadata for disabled remotes
  + export: Store the app id in the X-Flatpak key
  + run: Handle file paths when forwarding uris
  + Automatically use a separate builddir with Meson
  + documents: paths in the apps dir ar always accessible
  + builder: Don't warn for unknown properties starting with x-
  + document portal: Fix race condition when unmounting old version
  + document store: Document as-needed functionality of AddFull
  + extra-data: Print exit status if apply_extra_data script fails
  + run: Add debug sprew for all bwrap arguments
  + build-update-repo: Remove unwanted deltas before updating
    summary
  + list: Don't list .Locale and .Debug by default (override with
  - a)
  + remote-ls: Don't show Locale/Debug and secondary arches by
    default.
  + list/remote-ls: Also ignore .Sources by default
  + Handle app ids with dashes when ignoring locale/debug.
  + dbus-portal: Fix return value type of filtered NameHasOwner
  + builder: Add --export-only feature
  + run: Allow regular files for --filesystem=xdg-config/path
  + run: Allow --filesystem=xdg-*/subdir:ro
  + build-commit-from: Don't copy old xa.ref in metadata
- Changes from version 0.9.4:
  + Improve display of partial extension sizes
  + flatpak-run.c:  valid locations, not types
  + Ensure commits are available when checking for extra-data
  + libglnx: Bump to latest master, use new file copy API
  + Document some environment variables (#754)
  + Revise the flatpak repo command slightly
  + repo command: use FlatpakTablePrinter
  + table printer: Introduce a cell struct
  + table printer: Support column alignment
  + repo: Improve formatting of size columns
  + table printer: Support column titles
  + table printer: Only show titles on ttys
  + repo: Set column titles
  + table printer: move to its own source files
  + Add an API to get the summary of a remote
  + Make flatpak remote-ls show more details
  + scripts: Fix flatpak-bisect log
  + Add the possibility of installing/updating without static
    deltas
  + Add a helper for formatted output
  + Use the new output helper
  + Add table printer api for number columns
  + table printer: Use localeconv for decimal point
  + repo: Use the new number column support
  + remote-ls: Improve the output
  + list: Improve output formatting
  + remotes: Improve output formatting
  + Improve info output
  + Fix compiler warnings
  + Don't use escape sequences unless on a tty
  + info: Preserve the previous output format
  + Update the man page a bit
  + info: Use flatpak_fancy_output
  + Add macros for common ANSI tty escape codes
  + info/list: Move subpath list to info
  + Fix man page typo
  + Don't crash if there's more titles than columns
  + Unset TMPDIR in the sandbox
  + Generate fd-passing arguments for document portal
  + Include the generated document portal code in common
  + Implement file forwarding for flatpak_run_app
  + Enable file forwarding in flatpak run
  + Document the --file-forwarding option
  + Handle %f when exporting desktop files
  + Handle %u as well for file forwarding
  + Enable file forwarding for %u as well
  + Handle document portal absence
  + Don't get the doc mount path twice
  + run: Handle forwarding uris better
  + run: Use flatpak_has_path_prefix instead of hand rolling
  + run: Properly handle canonicalization in file exports
  + run: Clean up the exports handling code
  + run: Only forward as document if the target app can't see the
    file
  + builder: Fix ldflags support
  + build: Fix fallout from the TMPDIR unset
  + remote-ls: Fix up the column titles
  + run: Handle the case where /tmp on the host is a symlink
  + Update to bubblewrap 0.1.8 for die-with-parent
  + build: Kill sandbox when flatpak build dies
  + Expose host /etc/hosts and /etc/host.conf
  + install: Make already-installed a warning, not an error
  + Move caches to ~/.cache
  + tests: Fix race condition in tmp webserver
  + Use clearer terminology in docs about extensions
  + info: Print some more information
  + Fix tests by setting XDG_CACHE_HOME
  + install: Handle no-static-delta in --user installs too
  + common: Remove unused flatpak_dir_install_or_update
  + remote-modify: Never update explicitly set values
  + common: Add flatpak_dir_update_remote_configuration_for_summary
  + common: Store the summary signature in the cache too
  + common: Drop verbose log of using cached summary
  + remote-modify: Don't modify if no arguments are specified
  + remote-modify: Implement --update-metadata as a system-helper
    method
  + transaction: Always update metadata for remotes on
    update/install
  + update: Split update into check_for_update and update
  + Optimize flatpak_variant_bsearch_str
  + Use flatpak_variant_bsearch_str to lookup in summary cache
  + Optimize flatpak_summary_match_subrefs
  + remote-add/modify: Break out gpg loading code to helper
  + update_remote_configuration_for_summary: Never use
    system-helper
  + Add support for adding new gpg keys via signed summary
  + install: Fix automatic metadata update
  + Support build-update-repo --redirect-url=
  + Add a missing return
  + Drop an unused variable
  + repo: Print out redirect url too
  + Make it possible to unset values in update-repo
  + Update docs for build-update-repo
  + Document is-set keys in repo config
  + Add a marker to rewritten desktop files
  + tests: Make it possible to create multiple test repos
  + tests: Allow overriding GPG args
  + tests: Add a second gpg keyring
  + tests: Add new test-repo.sh with initial GPG tests
  + tests: Add tests for --redirect-url and new GPG key
  + tests: run test-repo.sh with system repo too
  + repo: Print out gpg key hash too
  + Don't use gdbus-codegen autoptr generation
  + common: Break out the flatpak progress calculator to a helper
    method.
  + Improve error wording
  + Remove unused variables
  + Remove an unused autoptr definition
  + Add workaround to flatpak_repo_collect_sizes for uncommited
    objects
  + export: Add install/download size and metadata to commit
  + build-update-repo: Use the size/metadata info in the commit
    object
  + builder: Use mkdtemp for initial git/bzr checkout
  + builder: Allow specifying the git commit if the branch is a tag
  + fix clang warning
  + update-metadata: silently ignore for non-signed system-helper
    case
  + remote-add: Use the new system-helper for initial metadata
    update
  + remote-ls: Don't rely on active symlink value, use deploy data
  + deploy: Uncouple active link from checksum
  + deploy: Append the subdirs to the checkout dir
  + update: flatpak update --subpath= means all subpaths
  + update: If resused ostree repo fails, blow it away and create
    new
  + update: Fix update for partial commits with system-helper
  + deploy: Verify that xa.metadata in the commit matches the
    deployed file
  + install: Limit the exported file to a whitelist
  + Disable exported search providers by default
  + exports: Fix up exporting of dbus service files
  + Rewrite exported mimetype files
  + Document flatpakrepo format extensions
  + Document flatpakref format extensions
  + dir: Report progress more frequently
  + Require latest flatpak (2017.5)
  + builder: Take "buildsystem" into consideration for cache
    freshness
  + builder: Add a install-rule to allow customized install
  + run: Fix race condition in app identification
  + Improve progress report calculation
  + Use the nicer progress reporting for the CLI too
  + Require ostree 2017.6 for the new progress APIs
  + progress: Use the new atomic progress API
  + progress: Simplify the progress calculations
  + progress: Tweak metadata part of download
  + progress: Don't report ??? in the bar while estimating
  + Remove unused variable
  + Bump libglnx, port to new tmpfile API
  + Update to latest libglnx with tmpfile error fix
  + Update to a libglnx that has GLnxTmpfiles fixed
  + builder: Better debug output from the rofiles-fuse code
  + builder: More GLnxTmpfile fixes
  + OCI: Properly initialize all used progress fields
  + builder: Fix segfault if appstream-compose fails
  + complete: Don't read outside string
  + Add version property to all dbus interfaces
  + document-portal: Add AddFull() operation
  + document-portal: Bump version to 2 due to new AddFull method
  + builder: Make c/cxx/ldflags not override env
  + builder: Update doc for latest cflags vs env var change
  + builder: Add CPPFLAGS similar to the existing flags
  + Update to latest libglnx and use the new GLnxTmpFile API
  + Remove unused variable
  + Add some hints when icons are not found
  + Correct mountpoint handling
  + Small documentation improvements
  + common: Expose FlatpakExports
  + common: Add flatpak_find_current_ref helper
  + run: Use new flatpak_find_current_ref helper.
  + common: Add flatpak_context_load_for_app helper
  + document-portal: Lock just once in AddFull for many paths
  + document-portal: Add XDP_ADD_FLAGS_AS_NEEDED_BY_APP to AddFull
  + lib: Add flatpak_installation_update_appstream_full_sync with
    progress
  + Remove unused variables
  + lib: Fix update checking
  + builder: Add support for screenshot mirroring
  + Use the CLI progress for update --appstream too
  + export: Always set a xa.ref commit metadata
  + progress: Update at 300msec on the CLI
  + deploy: Ensure xa.ref, if set, is correct
  + Dist test-keyring2 dir
- Changes from version 0.9.3:
  + builder-manifest: Rename localized icon fields as well
  + build-update-repo: g_warning doesn't need newlines in the
    message
  + docs: Add flatpak make-current to the list of commands
  + doc: Align build commands with --help
  + docs: Add a / to all mentions of installations.d
  + doc: Add a manpage for the repo config format
  + docs: Add a man page for installation files
  + Fix --help output for --installation
  + doc: Include all man pages in html
  + appstream: Don't strip .desktop extension if thats the actual
    id
  + flatpak-builder: bundle module sources as runtime
  + Bundle sources: add support for bzr
  + Bundle sources: add support to bundle patches as well
  + Bundle sources: add flag --bundle-sources to control the
    bundling
  + Bundle sources: the path is always sources
  + Bundle sources: allow use case to mix local and online sources
  + Bundle sources: rename option to --extra-sources=DIR
  + Bundle sources: use git clone --shared for local sources
    checkout
  + Bundle sources: bundle the manifest
  + Bundle source: use C-style comments
  + Bundle sources: initialize app_dir_path later
  + Bundle sources, git_get_mirror_dir: able to pass NULL for
    is_local
  + Bundle sources, bzr: set error when repo can not be found
  + Bundle sources: bundling has to happen before the extracting
  + Improve html generation
  + Add some structure to the generated html
  + Fix a typo in a comment
  + run: Handle non-default WAYLAND_DISPLAY
  + Drop useless options from flatpak info
  + Avoid confusing behavior of flatpak info
  + Add more useful options to flatpak info
  + Add a --show-extensions option to flatpak info
  + Fix the testsuite
  + flatpak info: Show more information for extensions
  + flatpak info: Properly handle unmaintained extensions
  + Fix a compiler warning
  + builder-module: add "bootstrap.sh" to autogen_names
  + Add a repo command
  + Document flatpak repo command
  + Quiet compiler warnings
  + Don't fail the build if rofiles-fuse is not available
  + Make it a warning
  + docs: Fix a typo
  + Document build-extension
  + More metadata docs
  + build: Ensure we add the default dbus permissions
  + builder: handle module-relative paths for json includes
  + builder: Load source files from the directory of the module
  + build: Always set personality to linux32 when cross-building
  + builder: Print warnings for unknown properties
  + Report full version in http user agent
  + builder: Ignore --extra-data in flatpak-builder --run
  + docs: Mention that rename-icon should not have an extension
  + build-update-repo: Add internal function to create a single
    delta
  + build-update-repo: Spawn subprocesses when generating deltas
  + builder: Use module-relative paths for archive sources too
  + builder: Take build-commands into consideration for rebuild
  + docs: Typo fix: "flatpack-builder" -&gt; "flatpak-builder"
  + builder: Use flatpak_mkdir_p instead of query + mkdir
  + common: Add flatpak_build_file[_va] helper
  + builder: Add builder_context_find_in_sources_dirs
  + builder: Use context_find_in_sources_dirs to simplify code
  + Extend flatpak-builder test
  + builder: Make git patch apply verbose by default
  + Don't bundle inline (data:) URIs
  + builder: Drop the storing of local files to data: uris
  + fixup! common: Add flatpak_build_file[_va] helper
  + builder: Convert bundle sources to cached stage
  + builder: Change how we handle pre-existing git sources
  + builder: Update bzr bundling
  + export: Always make directories accessible
  + builder: Strip trailing whitespace in git submodule urls
  + builder: Add progress reporing while downloading
  + builder: Fix up unused variable warnings from clang
- Changes from version 0.9.2:
  + Fix typo
  + Revert "Fix typo"
  + builder: Remove all SDK extension from the platform
  + Re-fix typo
  + builder: Handle absolute paths in command
  + builder: Add --default-branch=BRANCH
  + build-export: Export all files with canonical permissions
  + document more metadata keys
  + Fix pofiles typo
  + Bump libglnx, use new glnx_throw(), fix callers
  + Import ostree's compiler warnings, fix up callers
  + Fix build if libdwarf dir missing
  + Correctly find system unmaintained extensions
  + Stop using ostree trivial-httpd
  + Drop -Werror for aggregate-returns
  + Add forgotten file
  + Removed a commented string
  + builder: Add a hint about --force-clean
  + test-webserver.sh: Remove accidental debug spew
  + tests: Don't leak SimpleHTTPServers
  + Add new API to the docs
  + OCI: Verify that loaded OCI blobs have the correct checksum
  + builder: Don't pass --require-version along to build
  + Add flatpak_oci_registry_get_uri
  + FlatpakDir: Break out helper
    flatpak_dir_lookup_ref_from_summary
  + oci: Break out get_digest_subpath helper function
  + OCI: fstat in local_open_file helper
  + OCI: Add flatpak_oci_registry_mirror_blob
  + OCI: Add flatpak_archive_read_open_fd_with_checksum
  + OCI: flatpak_pull_from_oci - verify manifest ref
  + OCI: Verify layer checksum while applying
  + OCI: Support OCI with system-helper by mirroring OCI repo
  + update: Don't check for update short-circuit if we're not
    pulling
  + OCI: Add flatpak_oci_sign_data
  + OCI: Add support for strict and mandatory json properties
  + OCI: Add json format for atomic-based signatures
  + OCI: Support signing build-bundld --oci output
  + OCI: Verify signatures
  + OCI: Fix signature checks on updates
  + OCI: Use gpg signatures in tests-oci.sh
  + utils: Prepare for libostree 2017.4 defining autocleanups
  + Split the manifest file docs off
  + CI: Add gpgme-devel to CI build environment
  + Fix ostree autoptr checks for git master
  + Fix unused variable errors reported by clang
  + builder: make appstream-compose failure fatal
  + dbus-proxy: Make Buffer refcounted
  + dbus-proxy: Fix use-after free in header parsing
  + dbus: proxy fix leak in get_arg0_string
  + dbus-proxy: Fix leak of get_arg0_string return value
  + dbus-proxy: Fix leak in setup phase
  + system-helper: Fix check for downgrade
  + update: Only allow downgrades if a commit is explicitly
    specified
  + Handle uris better when detecting .flatpak[repo,ref] suffix
  + Use ostree's BARE_USER_ONLY flag (#674)
  + Build with large file support
  + Use correct format string for guint64 on 32-bit
  + builder: Add disable-fsckobjects to git sources
  + builder: Add commit property to git source
  + builder: Support sdk-extensions also for apps
  + Updated translations.
- Add libqgpgme-devel BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Add flatpak-rpmlintrc as source while we wait for boo#1012961 to
  be resolved. Once this happens, feel free to nuke all traces of
  this change.</changelog>
  <changelog author="aplazas@suse.com" date="1500638402">- Update to version 0.9.7:
  + app/repo: Factor out common GVariant operation.
  + build:
  - Include config.h using CPPFLAGS.
  - Check for system extensions before any other C compiling.
  - Only run each instance of gdbus-codegen once.
  - Re-run gdbus-codegen if the Makefile changes.
  + builder:
  - Allow building modules with no sources if buildsystem=simple.
  - Use build-args during cleanup.
  - Rearrange args to do_export() to make mandatory ones obvious.
  - When bundling git sources, reuse cache.
  + common:
  - Use bulk OstreeAsyncProgress API for setting keys.
  - Split out self and repo arguments for a static function.
  + common/dir:
  - Factor out common code for getting repo metadata.
  - Factor out common code to get and load the summary file.
  - Factor out body of update_remote_configuration_for_summary().
  + dbus-proxy:
  - Make miscellaneous globals static.
  - Don't clear dbus_address twice.
  + docs: Remove --version from flatpak-build docs.
  + flatpak_dir_read_latest: Return NULL, not FALSE on error.
  + tests:
  - Add TEST_SKIP_CLEANUP env var for skipping test cleanup.
  - Add base-64 GPG keys to libtest declarations.
  + .gitignore: Ignore all generated man pages.
  + One more try at not distributing gdbus-codegen-generated
    sources.
  + Update Ukrainian translation.
  + Fix example.
  + Add nullable annotations for progress callbacks.
  + Update pofiles.
- Changes from version 0.9.6:
  + builder:
  - Allow .pyc files without .py.
  - Add inherit-extensions features.
  - Better handling of default-branch.
  - Add ExtensionOf group to created extensions (Debug/Locale).
  + builder: Inherit parent version for inherited extension.
  + build-export: Canonicalize file permissions.
  + builder-options: Fix setting CPPFLAGS.
  + ci:
  - mv .redhat-ci.yml ? .papr.yml.
  - Rework to be based on FAH + priv container.
  - Build ostree from git master.
  + dir:
  - Fix a minor memory leak.
  - Ensure we return on pull error to avoid error-overwrites.
  - Ensure ~/.local/share/flatpak is 0700.
  + doc: Remove duplicate list entry from flatpak-remote.xml.
  + export: Record flatpak version in default commit version.
  + info: Make --show-metadata machine parseable.
  + install: Manually save summary[.sig] in cache repo.
  + ls-remote: Drop unused variable.
  + run: Fix use-after-free in case you were exporting the same
    path twice.
  + testlibrary: Call g_assert_no_error first.
  + tests:
  - Add tests for no world writable dirs &amp; no setuid files.
  - Increase timeouts waiting for file notification.
  + utils: Fix minor formatting issue in gtk-doc comment.
  + xdp-fuse: Add parentheses to clarify precedence in a
    conditional.
  + xdp-main: Fix a typo in a comparison.
  + Don't distribute gdbus-codegen-generated source in tarballs.
  + Update Czech translation.
  + Use new libostree APIs to reject world-writable/suid content.
  + Default to bare-user-only repo.
  + Unless forced via FLATPAK_OSTREE_REPO_MODE user bare-user for
    cache repo.
  + Force the cache repo to use the bare-user mode.
  + Re-create the cache repo if it is not bare-user.
  + Manually copy summary for update and appdata too.
  + Update pofiles.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576000">- Update to version 0.9.8:
  + Core:
  - Experimental support for peer2peer installation, enable with
  - -enable-p2p.
  - Add default language setting to flatpak config. Defaults to
    all locales for system installs and the users locale for
    per-user installs.
  - build-update-repo: Now always keeps the two latest deltas
    around to avoid race conditions with outstanding downloads at
    the time or running the update.
  - Support loading extra data from local lookaside cache.
  + Flatpak-builder:
  - Set terminal title to the currently building module
  - Added ability to specify http url for sources mirror with
  - -extra-sources-url.
  - --install-deps-from=REMOTE installs the dependencies needed
    for the manifest.
  - New option --delete-build-dirs to always delete build
    directories, even on a failed build.
  - New property "add-extension" makes it nicer to create
    extension points.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576001">- Drop flatpak-rpmlintrc: no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 0.9.10:
  + Fix regression in dbus proxy that causes some apps to not work
    in 0.9.9.
- Changes from version 0.9.9:
  + flatpak-builder was split out into its own module:
    https://github.com/flatpak/flatpak-builder
  + When downloading to a temporary directory for later install to
    the system repo we now write to /var/tmp instead of $HOME. This
    is more likely to be the same filesystem as /var/lib/flatpak,
    and thus will not run into issues with e.g. filesystem full.
  + We now get the default language list from AccountService if
    possible.
  + A regression that made --devel crash was fixed.
  + New feature for flatpakrefs, SuggestRemoteName=remotename will
    cause flatpak to ask if you want to create a generic (not app
    specific) remote for the repo url.
  + flatpak build now does not die with the parent by default, you
    have to pass --die-with-parent. This was done because
    die-with-parent uses PR_SET_PDEATHSIG which does not work well
    if the parent is threaded, like e.g. gnome-software is.
  + We now always re-set the personality in the sandboxed process
    in order to avoid inheriting weird settings.
  + We now share a single dbus proxy instance for all proxies for a
    sandbox. dbus-proxy now properly disallows old-style
    eavesdropping.
  + We now support accessibility by starting a customized dbus
    proxy for the a11y bus.
- Drop flatpak-builder sub-package, it is now it's own project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304001">- Update to version 0.9.11:
  + You can now show all outstanding updates with: flatpak
    remote-ls --updates.
  + The dbus filter "org.name.*" now means all subnames of
    org.name, not just the first level. This matches how dbus
    arg0namespace works, and how the comming dbus container support
    will work.
  + Fixed segfault on update.
  + Better commandline tab completion.
  + Flatpak now exposes host icons readonly as
    /run/host/share/icons to the sandbox.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505390400">- Update to version 0.9.12:
  + Fixed a regression in extra-data installation.
  + Don't expose the a11y bus in flatpak build.</changelog>
  <changelog author="fezhang@suse.com" date="1505390401">- Drop the SLE12 / Leap42 conditional definition for _userunitdir.</changelog>
  <changelog author="aplazas@suse.com" date="1509019200">- Update to version 0.10.0:
  + Added the flatpak config option which can set the language
    settings.
  + Fix issue where sometimes ld.so.conf were not generated.
  + /dev/mali0 is added to --device=dri.
  + Work around ostree static delta issues in some cases.
- Changes from version 0.9.99:
  + Requires ostree 2017.12 for important pull stability fix.
  + New libflatpak API: flatpak_dir_cleanup_undeployed_refs,
    flatpak_installation_prune_local_repo,
    flatpak_installation_remove_local_ref_sync,
    flatpak_installation_cleanup_local_refs_sync.
  + build: FLATPAK_ID and FLATPAK_ARCH are now set in the
    environment when building.
  + update: Don't fail the entire update if some remote fails to
    update its metadata.
  + run: /.flatpak-info now lists exact commits and extensions in
    use.
  + run: We now use a per-app ld.so.cache file whenn running. This
    should speed things up, and allows ldconfig to report the
    correct results.
  + The verbose mode was changed into two levels, use -vv to show
    the more detailed info, which currently only contains the full
    bubblewrap argument lists.
  + run: Some common problematic host environment variables are now
    unset in the sandbox (PYTHONPATH, PERLLIB, PERL5LIB and
    XCURSOR_PATH).
  + run: Fixed failure when a higher prio extensions depended on a
    lower prio one.
  + run: The extension ld path order is now: app extensions, app,
    runtime extension, runtime. This was previously incorrect in
    that the app could override app extensions.
  + Extensions are now not downloaded if a matching unmaintained
    extension is already installed.
  + Preemptive changes to handle new bubblewrap change which
    doesn't user /newroot.
  + document portal: Disable debug spew that was accidentally
    enabled.
  + build-finish: New --extension-priority option.
  + run: Fix regression in --persist in 0.9.98.
  + run: Use sealed memfds (instead of just temporary files) when
    passing data to bubblewrap.
  + Updated translations.
- Changes from version 0.9.98.2:
  + Fix permission denied when using the system-helper.
- Changes from version 0.9.98.1:
  + run: Fix homedir access if the app has --filesystem=host
    access.
  + build-update: Fix appstream update in case one arch didn't
    change.
  + Updated translations.
- Changes from version 0.9.98:
  + libflatpak now correctly finds metadata for subset
    installations (like locale data).
  + flatpak build now supports --appdir which exposes the per-app
    directory in the user homedir. This is useful when testing
    builds.
  + The host fontconfig caches are exposed to the sandbox, next to
    the fonts in /run/host. This will (pending fontconfig work)
    allow sharing host fontconfig caches, allowing much faster
    initial startup for flatpak apps.
  + flatpak install now supports --no-pull.
  + Added new extension property "locale-subset", which makes the
    extension point act like a locale extension (i.e. only install
    the subset configured by the locale).
  + flatpak remote-add --oci is disabled for now, as this is not up
    to date with the latest OCI work, and we don't want to break
    existing deployments if this has to change when this lands.
  + Parallel installation/updates are now safe because we take a
    filesystem lock whenever we prune the local ostree repo.
  + Flatpak run now works when important paths like $HOME, etc, are
    symlinks.
  + The ostree min-free-space property is is set to zero by default
    for the flatpak repos. This was causing a lot of problems for
    people, but the feature is still there if you manually enable
    it.
  + Updated translations.
  + Require ostree 2017.12.</changelog>
  <changelog author="aplazas@suse.com" date="1511784000">- Update to version 0.10.1:
  + New command "flatpak remote-info" shows information about
    applications in a remote. In particular the --log operation
    shows the history and can be used in combination with flatpak
    update --commit=XYZ to roll back to a previous version.
  + New command "flatpak search" which allows you to search the
    appstream data from the commandline.
  + flatpak update now updates appstream data for all configured
    remotes, which is important for search to work.
  + Allow automatic installation of gtk themes matching the active
    theme.
  + Handle the case when /etc/resolv.conf is a symlink.
  + /usr an /etc are now expose in /run/host in the app if the app
    has full filesystem access.
  + flatpak remote-add now works as a user when /var/lib/flatpak is
    empty, allowing flatpak to work on stateless systems.
  + Add support for flatpak build --log-session/system-bus, similar
    to what flatpak run already does.
  + flatpak build --readonly runs with the target directory
    (normally /app) mounted read-only.
  + Fall back to LD_LIBRARY_PATH if a runtime doesn't have
    /usr/bin/ldconfig.
  + Updated the support for OCI remotes. This is work in progress
    and still disabled by default though.
  + Updated translations.
- Add pkgconfig(appstream-glib) BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 0.10.2:
  + flatpak update now updates from both system and user
    installations by default.
  + flatpak update is less noisy when updating appstream info.
  + All the remote-* commands now by default automatically decide
    to use --user or --system based on the given remote name.
  + flatpak remote-ls with no remote lists the content of all
    remotes.
  + Fixed regression that made xdg-user-dirs and theme selection
    for kde apps break.
  + flatpak override with no argument now overrides globally, i.e.
    for all apps.
  + flatpak override now supports --nofilesystem properly. For
    example flatpak override --nofilesystem=~/.ssh hides the ssh
    dir for all apps, even those who have homedir access.
  + flatpak install now takes a --reinstall argument which
    uninstalls a previously installed version if necessary. This is
    very useful when you want to install a new version from a
    different source.
  + flatpak install now allows you to pass an absolute pathname as
    remote name, which will create a temporary remote and install
    from that. The remote will be removed when the app is
    uninstalled. This is very useful during development and
    testing.
  + Flatpak now creates CLI wrappers for all installed apps, so if
    you add /var/lib/flatpak/exports/bin or
    ~/.local/share/flatpak/exports/bin to your PATH you can easily
    start flatpak apps by their application id.</changelog>
  <changelog author="alarrosa@suse.com" date="1513944000">- Update to version 0.10.2.1:
  + Fixed crash when installing some flatpak bundle files
  + Fix installation of telegram
  + Fixed some warnings reported by coverity
  + Some leaks fixed
  + Fixed typo in error message</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 0.10.3:
  + Fix vulnerability in dbus proxy.
  + Fix incorrect error message in update --appstream.
  + Ignore unknown permission requests.
  + remote-info: Fix --show-metadata behavior.
  + common: Fix division by zero when  calculate progress.
  + common/dir: Add a missing OstreeAsyncProgress default key.
  + lib/installation: Fix install/update_full() subpaths
    annotation.
  + app: Fix "multiple installations" prompt.
  + common/dir: Use an actual function for autoptr support without
    P2P.
  + Update Polish translation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 0.10.4:
  * allow personality syscall in devel mode
  * configure: Fix copy_file_range detection
  * Add --disable-document-portal configure option
  * lib: Make gnome-software work with an empty /var/lib/flatpak
  * dir: Emit an error on non-root downgrade attempts
  * common/dir: Skip progress reporting while setting up extra-data
  * doc: Fix docs for --update-appstream
  * flatpak remote-ls -u: only consider apps from the current remote
  * extract_appstream: allow component IDs not to end in .desktop
  * common/dir: Fix a memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1520251200">- Do not build document portal anymore, rely on
  xdg-desktop-portal/-gtk instead. Add corresponding dependency.
- Build with --with-system-bubblewrap and Add corresponding
  build and runtime dependency.
- Remove --with-dwarf-header configure flag, it no longer exists.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532347200">- polkit_rules_usability.patch: Improve usability by allowing
  members of the group 'wheel' to bypass polkit authentication
  checks when locally logged in (bnc#984817). This adds a few
  polkit actions to the rules that are not covered by upstream,
  because they are set to 'yes' for active users by default.
  On SUSE we require 'auth_admin' for regular users, however.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542369600">- Make polkit_rules_usability.patch effective by adding a 60- prefix to the
  rules file. This will cause it to be executed before the
  polkit-default-privs are executed (bsc#984817).</changelog>
</package>
<package pkgid="5dc76ac880da402b9497146a7eac76189dfbe15a851ad4c7ad63af1a843be958" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="lp150.8.1"/>
  <changelog author="aplazas@suse.com" date="1500638400">- Update to version 0.9.7:
  + app/repo: Factor out common GVariant operation.
  + build:
  - Include config.h using CPPFLAGS.
  - Check for system extensions before any other C compiling.
  - Only run each instance of gdbus-codegen once.
  - Re-run gdbus-codegen if the Makefile changes.
  + builder:
  - Allow building modules with no sources if buildsystem=simple.
  - Use build-args during cleanup.
  - Rearrange args to do_export() to make mandatory ones obvious.
  - When bundling git sources, reuse cache.
  + common:
  - Use bulk OstreeAsyncProgress API for setting keys.
  - Split out self and repo arguments for a static function.
  + common/dir:
  - Factor out common code for getting repo metadata.
  - Factor out common code to get and load the summary file.
  - Factor out body of update_remote_configuration_for_summary().
  + dbus-proxy:
  - Make miscellaneous globals static.
  - Don't clear dbus_address twice.
  + docs: Remove --version from flatpak-build docs.
  + flatpak_dir_read_latest: Return NULL, not FALSE on error.
  + tests:
  - Add TEST_SKIP_CLEANUP env var for skipping test cleanup.
  - Add base-64 GPG keys to libtest declarations.
  + .gitignore: Ignore all generated man pages.
  + One more try at not distributing gdbus-codegen-generated
    sources.
  + Update Ukrainian translation.
  + Fix example.
  + Add nullable annotations for progress callbacks.
  + Update pofiles.
- Changes from version 0.9.6:
  + builder:
  - Allow .pyc files without .py.
  - Add inherit-extensions features.
  - Better handling of default-branch.
  - Add ExtensionOf group to created extensions (Debug/Locale).
  + builder: Inherit parent version for inherited extension.
  + build-export: Canonicalize file permissions.
  + builder-options: Fix setting CPPFLAGS.
  + ci:
  - mv .redhat-ci.yml ? .papr.yml.
  - Rework to be based on FAH + priv container.
  - Build ostree from git master.
  + dir:
  - Fix a minor memory leak.
  - Ensure we return on pull error to avoid error-overwrites.
  - Ensure ~/.local/share/flatpak is 0700.
  + doc: Remove duplicate list entry from flatpak-remote.xml.
  + export: Record flatpak version in default commit version.
  + info: Make --show-metadata machine parseable.
  + install: Manually save summary[.sig] in cache repo.
  + ls-remote: Drop unused variable.
  + run: Fix use-after-free in case you were exporting the same
    path twice.
  + testlibrary: Call g_assert_no_error first.
  + tests:
  - Add tests for no world writable dirs &amp; no setuid files.
  - Increase timeouts waiting for file notification.
  + utils: Fix minor formatting issue in gtk-doc comment.
  + xdp-fuse: Add parentheses to clarify precedence in a
    conditional.
  + xdp-main: Fix a typo in a comparison.
  + Don't distribute gdbus-codegen-generated source in tarballs.
  + Update Czech translation.
  + Use new libostree APIs to reject world-writable/suid content.
  + Default to bare-user-only repo.
  + Unless forced via FLATPAK_OSTREE_REPO_MODE user bare-user for
    cache repo.
  + Force the cache repo to use the bare-user mode.
  + Re-create the cache repo if it is not bare-user.
  + Manually copy summary for update and appdata too.
  + Update pofiles.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576000">- Update to version 0.9.8:
  + Core:
  - Experimental support for peer2peer installation, enable with
  - -enable-p2p.
  - Add default language setting to flatpak config. Defaults to
    all locales for system installs and the users locale for
    per-user installs.
  - build-update-repo: Now always keeps the two latest deltas
    around to avoid race conditions with outstanding downloads at
    the time or running the update.
  - Support loading extra data from local lookaside cache.
  + Flatpak-builder:
  - Set terminal title to the currently building module
  - Added ability to specify http url for sources mirror with
  - -extra-sources-url.
  - --install-deps-from=REMOTE installs the dependencies needed
    for the manifest.
  - New option --delete-build-dirs to always delete build
    directories, even on a failed build.
  - New property "add-extension" makes it nicer to create
    extension points.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503576001">- Drop flatpak-rpmlintrc: no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 0.9.10:
  + Fix regression in dbus proxy that causes some apps to not work
    in 0.9.9.
- Changes from version 0.9.9:
  + flatpak-builder was split out into its own module:
    https://github.com/flatpak/flatpak-builder
  + When downloading to a temporary directory for later install to
    the system repo we now write to /var/tmp instead of $HOME. This
    is more likely to be the same filesystem as /var/lib/flatpak,
    and thus will not run into issues with e.g. filesystem full.
  + We now get the default language list from AccountService if
    possible.
  + A regression that made --devel crash was fixed.
  + New feature for flatpakrefs, SuggestRemoteName=remotename will
    cause flatpak to ask if you want to create a generic (not app
    specific) remote for the repo url.
  + flatpak build now does not die with the parent by default, you
    have to pass --die-with-parent. This was done because
    die-with-parent uses PR_SET_PDEATHSIG which does not work well
    if the parent is threaded, like e.g. gnome-software is.
  + We now always re-set the personality in the sandboxed process
    in order to avoid inheriting weird settings.
  + We now share a single dbus proxy instance for all proxies for a
    sandbox. dbus-proxy now properly disallows old-style
    eavesdropping.
  + We now support accessibility by starting a customized dbus
    proxy for the a11y bus.
- Drop flatpak-builder sub-package, it is now it's own project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304001">- Update to version 0.9.11:
  + You can now show all outstanding updates with: flatpak
    remote-ls --updates.
  + The dbus filter "org.name.*" now means all subnames of
    org.name, not just the first level. This matches how dbus
    arg0namespace works, and how the comming dbus container support
    will work.
  + Fixed segfault on update.
  + Better commandline tab completion.
  + Flatpak now exposes host icons readonly as
    /run/host/share/icons to the sandbox.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505390400">- Update to version 0.9.12:
  + Fixed a regression in extra-data installation.
  + Don't expose the a11y bus in flatpak build.</changelog>
  <changelog author="fezhang@suse.com" date="1505390401">- Drop the SLE12 / Leap42 conditional definition for _userunitdir.</changelog>
  <changelog author="aplazas@suse.com" date="1509019200">- Update to version 0.10.0:
  + Added the flatpak config option which can set the language
    settings.
  + Fix issue where sometimes ld.so.conf were not generated.
  + /dev/mali0 is added to --device=dri.
  + Work around ostree static delta issues in some cases.
- Changes from version 0.9.99:
  + Requires ostree 2017.12 for important pull stability fix.
  + New libflatpak API: flatpak_dir_cleanup_undeployed_refs,
    flatpak_installation_prune_local_repo,
    flatpak_installation_remove_local_ref_sync,
    flatpak_installation_cleanup_local_refs_sync.
  + build: FLATPAK_ID and FLATPAK_ARCH are now set in the
    environment when building.
  + update: Don't fail the entire update if some remote fails to
    update its metadata.
  + run: /.flatpak-info now lists exact commits and extensions in
    use.
  + run: We now use a per-app ld.so.cache file whenn running. This
    should speed things up, and allows ldconfig to report the
    correct results.
  + The verbose mode was changed into two levels, use -vv to show
    the more detailed info, which currently only contains the full
    bubblewrap argument lists.
  + run: Some common problematic host environment variables are now
    unset in the sandbox (PYTHONPATH, PERLLIB, PERL5LIB and
    XCURSOR_PATH).
  + run: Fixed failure when a higher prio extensions depended on a
    lower prio one.
  + run: The extension ld path order is now: app extensions, app,
    runtime extension, runtime. This was previously incorrect in
    that the app could override app extensions.
  + Extensions are now not downloaded if a matching unmaintained
    extension is already installed.
  + Preemptive changes to handle new bubblewrap change which
    doesn't user /newroot.
  + document portal: Disable debug spew that was accidentally
    enabled.
  + build-finish: New --extension-priority option.
  + run: Fix regression in --persist in 0.9.98.
  + run: Use sealed memfds (instead of just temporary files) when
    passing data to bubblewrap.
  + Updated translations.
- Changes from version 0.9.98.2:
  + Fix permission denied when using the system-helper.
- Changes from version 0.9.98.1:
  + run: Fix homedir access if the app has --filesystem=host
    access.
  + build-update: Fix appstream update in case one arch didn't
    change.
  + Updated translations.
- Changes from version 0.9.98:
  + libflatpak now correctly finds metadata for subset
    installations (like locale data).
  + flatpak build now supports --appdir which exposes the per-app
    directory in the user homedir. This is useful when testing
    builds.
  + The host fontconfig caches are exposed to the sandbox, next to
    the fonts in /run/host. This will (pending fontconfig work)
    allow sharing host fontconfig caches, allowing much faster
    initial startup for flatpak apps.
  + flatpak install now supports --no-pull.
  + Added new extension property "locale-subset", which makes the
    extension point act like a locale extension (i.e. only install
    the subset configured by the locale).
  + flatpak remote-add --oci is disabled for now, as this is not up
    to date with the latest OCI work, and we don't want to break
    existing deployments if this has to change when this lands.
  + Parallel installation/updates are now safe because we take a
    filesystem lock whenever we prune the local ostree repo.
  + Flatpak run now works when important paths like $HOME, etc, are
    symlinks.
  + The ostree min-free-space property is is set to zero by default
    for the flatpak repos. This was causing a lot of problems for
    people, but the feature is still there if you manually enable
    it.
  + Updated translations.
  + Require ostree 2017.12.</changelog>
  <changelog author="aplazas@suse.com" date="1511784000">- Update to version 0.10.1:
  + New command "flatpak remote-info" shows information about
    applications in a remote. In particular the --log operation
    shows the history and can be used in combination with flatpak
    update --commit=XYZ to roll back to a previous version.
  + New command "flatpak search" which allows you to search the
    appstream data from the commandline.
  + flatpak update now updates appstream data for all configured
    remotes, which is important for search to work.
  + Allow automatic installation of gtk themes matching the active
    theme.
  + Handle the case when /etc/resolv.conf is a symlink.
  + /usr an /etc are now expose in /run/host in the app if the app
    has full filesystem access.
  + flatpak remote-add now works as a user when /var/lib/flatpak is
    empty, allowing flatpak to work on stateless systems.
  + Add support for flatpak build --log-session/system-bus, similar
    to what flatpak run already does.
  + flatpak build --readonly runs with the target directory
    (normally /app) mounted read-only.
  + Fall back to LD_LIBRARY_PATH if a runtime doesn't have
    /usr/bin/ldconfig.
  + Updated the support for OCI remotes. This is work in progress
    and still disabled by default though.
  + Updated translations.
- Add pkgconfig(appstream-glib) BuildRequires: New dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 0.10.2:
  + flatpak update now updates from both system and user
    installations by default.
  + flatpak update is less noisy when updating appstream info.
  + All the remote-* commands now by default automatically decide
    to use --user or --system based on the given remote name.
  + flatpak remote-ls with no remote lists the content of all
    remotes.
  + Fixed regression that made xdg-user-dirs and theme selection
    for kde apps break.
  + flatpak override with no argument now overrides globally, i.e.
    for all apps.
  + flatpak override now supports --nofilesystem properly. For
    example flatpak override --nofilesystem=~/.ssh hides the ssh
    dir for all apps, even those who have homedir access.
  + flatpak install now takes a --reinstall argument which
    uninstalls a previously installed version if necessary. This is
    very useful when you want to install a new version from a
    different source.
  + flatpak install now allows you to pass an absolute pathname as
    remote name, which will create a temporary remote and install
    from that. The remote will be removed when the app is
    uninstalled. This is very useful during development and
    testing.
  + Flatpak now creates CLI wrappers for all installed apps, so if
    you add /var/lib/flatpak/exports/bin or
    ~/.local/share/flatpak/exports/bin to your PATH you can easily
    start flatpak apps by their application id.</changelog>
  <changelog author="alarrosa@suse.com" date="1513944000">- Update to version 0.10.2.1:
  + Fixed crash when installing some flatpak bundle files
  + Fix installation of telegram
  + Fixed some warnings reported by coverity
  + Some leaks fixed
  + Fixed typo in error message</changelog>
  <changelog author="dimstar@opensuse.org" date="1517832000">- Update to version 0.10.3:
  + Fix vulnerability in dbus proxy.
  + Fix incorrect error message in update --appstream.
  + Ignore unknown permission requests.
  + remote-info: Fix --show-metadata behavior.
  + common: Fix division by zero when  calculate progress.
  + common/dir: Add a missing OstreeAsyncProgress default key.
  + lib/installation: Fix install/update_full() subpaths
    annotation.
  + app: Fix "multiple installations" prompt.
  + common/dir: Use an actual function for autoptr support without
    P2P.
  + Update Polish translation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 0.10.4:
  * allow personality syscall in devel mode
  * configure: Fix copy_file_range detection
  * Add --disable-document-portal configure option
  * lib: Make gnome-software work with an empty /var/lib/flatpak
  * dir: Emit an error on non-root downgrade attempts
  * common/dir: Skip progress reporting while setting up extra-data
  * doc: Fix docs for --update-appstream
  * flatpak remote-ls -u: only consider apps from the current remote
  * extract_appstream: allow component IDs not to end in .desktop
  * common/dir: Fix a memory leak</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1520251200">- Do not build document portal anymore, rely on
  xdg-desktop-portal/-gtk instead. Add corresponding dependency.
- Build with --with-system-bubblewrap and Add corresponding
  build and runtime dependency.
- Remove --with-dwarf-header configure flag, it no longer exists.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532347200">- polkit_rules_usability.patch: Improve usability by allowing
  members of the group 'wheel' to bypass polkit authentication
  checks when locally logged in (bnc#984817). This adds a few
  polkit actions to the rules that are not covered by upstream,
  because they are set to 'yes' for active users by default.
  On SUSE we require 'auth_admin' for regular users, however.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542369600">- Make polkit_rules_usability.patch effective by adding a 60- prefix to the
  rules file. This will cause it to be executed before the
  polkit-default-privs are executed (bsc#984817).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1557921600">- Add CVE-2019-11460.patch to only compare the lowest 32 ioctl
  arg bits for TIOCSTI (boo#1133043, CVE-2019-11460,
  boo#1133041, CVE-2019-11461).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563796800">- Add CVE-2019-8308.patch to fix a potential /proc based sandbox
  escape by not exposing /proc when running apply_extra. The patch
  is backported from upstream to the 0.10.4 codebase (boo#1125431,
  CVE-2019-8308).</changelog>
</package>
<package pkgid="27fce02f3afccf1eb4aa71a4ea5db8d0a808d926d1bdbb3ae410c78bde3da299" name="fmt" arch="src">
  <version epoch="0" ver="5.3.0" rel="lp150.2.1"/>
  <changelog author="munix9@googlemail.com" date="1541764800">- initial package for version 5.2.1</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1544097600">- Added baselibs.conf as source</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Do without em dashes in summaries.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1547294400">- Update to version 5.3.0:
  * Introduced experimental chrono formatting support
  * Added experimental support for emphasis
  (bold, italic, underline, strikethrough), colored output to a
  file stream, and improved colored formatting API
  * Added support for 4-bit terminal colors
  * Made std::string_view work as a format string
  * Added wide string support to compile-time format string checks
  * Made colored print functions work with wide strings
  * Introduced experimental Unicode support
  * Removed undocumented basic_fixed_buffer which has been
  superseded by the iterator-based API
  * Disallowed repeated leading zeros in an argument ID
  * Deprecated fmt::visit, parse_context, and wparse_context.
  Use fmt::visit_format_arg, format_parse_context, and
  wformat_parse_context instead.
- Removed upstream merged fix-fmt_pc.patch</changelog>
</package>
<package pkgid="b51f613c010ef88535497bd113617f9fa74e3e1c80ea70e65b2c65134676afc0" name="fmt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="lp150.2.1"/>
  <changelog author="munix9@googlemail.com" date="1541764800">- initial package for version 5.2.1</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1544097600">- Added baselibs.conf as source</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Do without em dashes in summaries.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1547294400">- Update to version 5.3.0:
  * Introduced experimental chrono formatting support
  * Added experimental support for emphasis
  (bold, italic, underline, strikethrough), colored output to a
  file stream, and improved colored formatting API
  * Added support for 4-bit terminal colors
  * Made std::string_view work as a format string
  * Added wide string support to compile-time format string checks
  * Made colored print functions work with wide strings
  * Introduced experimental Unicode support
  * Removed undocumented basic_fixed_buffer which has been
  superseded by the iterator-based API
  * Disallowed repeated leading zeros in an argument ID
  * Deprecated fmt::visit, parse_context, and wparse_context.
  Use fmt::visit_format_arg, format_parse_context, and
  wformat_parse_context instead.
- Removed upstream merged fix-fmt_pc.patch</changelog>
</package>
<package pkgid="aab219670b63c0e00afd7bc6581e1924a216d55f044abd576e4a4c16e65393c4" name="fping" arch="src">
  <version epoch="0" ver="4.0" rel="lp150.3.3.1"/>
  <changelog author="lrupp@suse.de" date="1202472000">- convert the Changelog to Unix
- add COPYING, remove INSTALL from docudir
- use macros
- build parallel</changelog>
  <changelog author="puzel@novell.com" date="1258545600">- add ipv6 support (bnc#555691)</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="puzel@suse.com" date="1328702400">- update to fping-3.0
  * rewritten main loop for improved performance
  * -T parameter (select timeout) now obsolete
  * Maintenance taken over from unresponsive previous maintainer
  * New homepage: www.fping.org
- drop fping-2.4b2-fixwarnings.patch (obsolete)</changelog>
  <changelog author="zaitor@opensuse.org" date="1337515200">- Update to version 3.1:
  + -g option (generate): exclude network and broadcast address
    for cidr ranges.
  + do not explicitely check if running as root, to make it
    possible to install fping with linux capabilities instead of
    making it setuid (setcap cap_net_raw+ep fping).
  + ANSI C (C89) compiler now a requirement.
  + Portability fixes.
  + Reorganized source directory.
  + Bugfix: fix timeout issue on Solaris.
  + Man-page fixes.
  + Added -H option to specify number of hops.
  + Output usage information to stdout when called with -h</changelog>
  <changelog author="wojtek@suse.cz" date="1339156800">-Update to 3.2
  * Improve documentation for -g option (G.W. Haywood)
  * Performance optimization for big select timeouts (#10, Andrey
  * Bondarenko)
  * Fix restart of select call after interrupt signal (#8, Boian
  * Bonev)
  * Fix infinite loop caused by linked list corruption (#11,
  * Boian Bonev)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1345464000">- update to 3.3:
  * Do not output icmp errors with -q (#1)
  * Add --enable-ipv4 and --enable-ipv6 options to configure
  * Fix removing of unreachable hosts when doing loop (#13 #23)
  * Fix -A for fping6 (#14)
  * Fix "options inet6" breaking IPv4 name resolution (#17)
  * Output statistics to stdout instead of stderr (#9)
  * Set default data size to 56 bytes on all architectures (#18)
  * Convert man-page source to POD for easier maintenance
  * Fix error message on DNS error for IPv6 hosts (#27)
  * Fix -n flag in fping6 (#28)</changelog>
  <changelog author="puzel@suse.com" date="1350388800">- update to 3.4
  * Revert "Output statistics to stdout instead of stderr", because
    it breaks tools assuming the output goes to stderr</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359633600">- Enable missing ipv6 support
- tweak out CFLAGS.</changelog>
  <changelog author="zaitor@opensuse.org" date="1376827200">- Update to version 3.5:
  * Fix sprint_tm buffer size crash.
  * Addded -D flag to print timestamps.
  * Fix fping6 build on OS X 10.8.
  * Fix compatibility issue with FreeBSD (#39).
  * Fping.spec: fix setuid permissions and provides fping6.
  * Re-create configure script with autoconf 2.69 for aarch64
    support (#45).</changelog>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="f58657fcb0794c8cb5409f5b7aa0bd932a3b2c97a9a06de212b141cc52d778d4" name="fping" arch="x86_64">
  <version epoch="0" ver="4.0" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1394280000">- Update to version 3.9:
  + Fix random output on socket error (#56).
  + Support ppc64le architecture by including alpha libtool
    version.
  + Fix compilation problem on FreeBSD (#57).
  + Initial test suite and continous intergration (with
    travis-ci.org / coveralls.io).
  + Don't output usage information on error.
- Changes from version 3.8:
  + Fix segmentation fault introduced in version 3.7 with loop mode
    (#55).
- Changes from version 3.7:
  + Allow running as non-root on Mac OS X by using non-privileged
    ICMP (#7).
  + Remove unnecessary IPv6 socket options.
  + Fix again compatibility issue with FreeBSD.
  + Fix fping hanging forever on permanent sendto failure.
  + Fix duplicate echo reply packets causing early stop in count
    mode (#53).
- Changes from version 3.6:
  + Fix loop issue after 65536 pings (#12).
  + Minimum ping data size is now 0.
  + Removed setsockopt IPV6_CHECKSUM, which shouldn't be set and
    breaks compiling on Solaris.
  + Fix wrong min RTT value with -Q option (#51).
- Drop export CFLAGS="%optflags -D_GNU_SOURCE -fwhole-program", it
  breaks the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1399204800">- Update to version 3.10:
  + Fix confusing error message with -g and IPv6 addresses (#58).
  + Allow option '-f' also for non-root (since setuid privileges
    are dropped).
  + Do not retry twice DNS lookup on DNS lookup problem.
  + Remove support for NIS groups.
  + Better document -B backoff-factor and when it can be used (#33)
  + More tests added.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444910400">- Update to version 3.12:
  + Bugfix: Fix fping6 -R (#84).
- Changes from version 3.11:
  + Feature:
  - New option -R to use random bytes instead of NULLs (#72).
  - Small documentation and performance improvements.
  + Bugfix: Fix double entries with fping -u and unreachable hosts.
  + Internal: Use sockaddr_storage and simplify code, so that we
    can one day support both IPv4 and IPv6 with the same binary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445428800">- Update to version 3.13:
  + Bugfix: Fix ICMP errors sometimes causing crashes with
    fping &gt;= 3.11.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1488283200">- Update to version 3.16:
  * (feature) Support kernel-timestamping of received packets (#46)
  * (feature) Simplify restrictions: only -i &gt;= 1 and -p &gt;= 10 are
    enforced now
  * (bugfix) Fix option -m to return all IPs of a hostname
  * (bugfix) Fix option -H (ttl) for IPv6
  * (bugfix) Fix option -M (don't fragment) for IPv6
  * (bugfix) Fix option -O (ToS) for IPv6
  * (bugfix) Fix compatibility issue with AIX (#69, @blentzgh)
  * (bugfix) Fix option -q not suppressing some ICMP error messages (#83)
  * (bugfix) Fix option -M expecting an argument, when it shouldn't
  * (bugfix) Fix minor issues found by Coverity Scan
- Update to version 3.15:
  * (bugfix) Fix compiler errors on platforms other than Linux (related
    to the new -M option, #109)
  * Test suite fixes for macOS
- Update to version 3.14:
  * (feature) Ignore network and broadcast for cidrs /31 and /32
    (#102, Martin Topholm)
  * (feature) New option '-M' to set the "Don't Fragment" flag
    (#91, Don Bowman)
  * (feature) New option '-N' to output statistics for netdata
    (see: http://my-netdata.io/, #105, Costa Tsaousis)
  * (feature) New option '-o' to calculate total outage time (#90, @jgerbeck)
  * (bugfix) Exit code should be 2 when the hostname can't be resolved
    (fixes #98, reported by @green-fox)
  * (bugfix)  Fix issue compliling on RHEL/Centos 7 (#95, @jbackman)
  * (bugfix) Lower -i limit to 1 instead of 10
  * (bugfix) Improve interval preciseness of -Q reporting
  * (bugfix) Fix occasional false positive in -Q reporting (#97)
  * (bugfix) Solaris 10 portability fix (#107, Peter Bray)</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1494244800">- Update to version 4.0
  * feature: Auto-adjust timeout for -c/-C/-l mode to value of -p
  * feature: Enforce -t timeout on reply packets, by discarding late
    packets (#32)
  * feature: Option -d/--rdns now always does a rdns-lookup, even for
    names, as '-n' was doing until now
  * feature: Keep original name if a hostname is given with -n/--name
  * feature: New option -6 to force IPv6
  * feature: New option -4 to force IPv4
  * feature: IPv6 enabled by default
  * feature: Long option names for all options
  * feature: Unified 'fping' and 'fping6' into one binary (#80)
  * feature: fping and fping6 are now unified into one binary.
  * bugfix: -i/-p restrictions disabled by default
    (enable with --enable-safe-limits)
  * bugfix: Default interval -i changed from 25ms to 10ms
  * bugfix: Fix compatibility issue with GNU Hurd
  * bugfix: A C99 compiler is now required
  * bugfix: Option parsing with optparse
  * bugfix: New changelog file format</changelog>
  <changelog author="jengelh@inai.de" date="1494504000">- Do away with %__ macro indirections.</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Cleanup a bit with spec-cleaner basically just to use new make_install
  macro</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- fping now has cap_net_raw, fix build in Factory (bsc#1047921)</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1558008000">- add fping-4.0-fix_ipv6-disabled.patch to fix fping on servers
  with disabled IPv6 [bsc#1133988]</changelog>
</package>
<package pkgid="da299547a705adfd4772ab4d477ec08524246145834d7baa2803cd16aec8d1f7" name="freeradius-server" arch="src">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="9a0b1f923e92e9e128e48e9d918fd6498deba61926138b3a292d43c75e37a173" name="freeradius-server" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="c29cdac2a6262a9ef2441a598823fc5c7706e66d091f7e947a4d2c1a03383f5f" name="freeradius-server-devel" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="5bf5d50b95b03e37459991bd5d34d44bd1d8d5b795a3f7efbe390fd36d5a544d" name="freeradius-server-doc" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="4b269303e53aa9d58c7d745f4dfbb21bd750f2e354d9eaf6f4d3a8c3efd1d195" name="freeradius-server-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="78b8020a393ce1a2f7c815f801dbd5ab3d1242c053d6bab3b52b0facd71d1984" name="freeradius-server-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="bb4067c3fe0056eb46bd7e1ba0119344bffdb15f3c1f72bd8385ca30239da57b" name="freeradius-server-libs" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="32315605d8ce9d91b5b4ae217b5a6844c5f25aa364b7ef461f5c0a76751acd82" name="freeradius-server-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="f6cd2e2b252f7f4eb00a0f34602e0d21960a4f9a8a4223e726d99fb6a18a29aa" name="freeradius-server-perl" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="53d1d95952c879713d6a32c26f5a119da8dcc4414ca87c596023b1c07654f9ab" name="freeradius-server-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="52866d1f6466c1a718c6cbb17af91486ce4fbd1634713dd20a4f1de24a2e1fc8" name="freeradius-server-python" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="ef5d661217200ff699c86e663280145cede6b61bbb83f6ed564ce96d20d1d618" name="freeradius-server-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="4ee15a940959871df1bd61a7d55e51b3705b7c1c5364ffc35c70289798eb2415" name="freeradius-server-utils" arch="x86_64">
  <version epoch="0" ver="3.0.16" rel="lp150.2.3.1"/>
  <changelog author="jkeil@suse.de" date="1438689600">- Fix bsc#935573: Insufficent CRL application for intermediate certificates
  * CVE-2015-4680
  * freeradius-server-CVE-2015-4680.patch based on
    https://github.com/FreeRADIUS/freeradius-server/commit/a03814af310bb3bee74ea012546d99c48b0ea5c3</changelog>
  <changelog author="jkeil@suse.de" date="1438689601">- Remove gpg signature file
  * The gpg signature checking is broken and doesn't work</changelog>
  <changelog author="jkeil@suse.de" date="1438948800">- Fix boo#912714: freeradius can't use ntlm_auth
  * Create winbind group
  * Add radiusd to winbind group</changelog>
  <changelog author="michael@stroeder.com" date="1444046400">- update to 3.0.10
  * Changes of version 3.0.10
    + Feature improvements
  - Do more optimization of unlang policies. This makes run-time
    a bit faster.
  - Re-name most of the functions in src/lib. Third-party module
    authors will have to do the same.
  - More documentation on contributing and how to write modules.
  - Update radiusd.service for systemd.
  - Open IPv6 proxy socket if the server is listening on IPV6
    auth / acct / coa packets.
  - Create debian packages for DHCP. Fixes #1125.
  - Add more tests for "update" section parsing.
  - Update "man" pages.
  - Update attributes for Alcatel 7750
  - Add dictionary for Boingo Wi-Fi
  - Add support for DHCP lease queries.
    See raddb/sites-available/dhcp
  - On HUP, check all modules for config files which have
    changed. And only re-load those modules.
  - Allow FreeRADIUS-Response-Delay(-USec) to be set for RADIUS
    packets. Patch from Herwin Weststrate.
  - Documentation fixes from Alan Buxey and Matthew Newton.
  - Update "logrotate" script.
  - Added more RFCs to doc/rfc for new standards implemented by
    FreeRADIUS.
  - Don't crash when doing "radmin -e "help hup". Patch from
    Matthew Newton.
  - The dictionary parser now does more sanity checks, which
    prevents run-time problems with invalid attributes.
  - Update debian packages. Patches from Christopher Hoskin.
  - Many other debian packaging fixes from Matthew Netwon and
    Herwin Weststrate.
  - Add "session-state" to Perl. Patch from Herwin Weststrate.
    + Bug Fixes
  - Fix rlm_files so that there are no collisions when loading
    10's of 1000's of users.
  - Fix radclient to use our internal v4/v6 parsing functions.
    v6 addresses with ports now work correctly.
  - Fix sending/receiving packet messages to wrap v6 addresses
    in square brackets '[]'.
  - Check for sasl/sasl.h when building rlm_ldap, and disable
    SASL functionality if unavailable.
  - Fix issue which caused a non \0 terminated buffer to be
    assigned to attributes if the value being assigned contained
    an invalid escape sequence.
  - Fix deadlock when reconnecting connections in the connection
    pool.
  - Fix potential overrun in functions that used fr_utf8_char
    with a non nul terminated buffer.
  - Fix decoding issue for Tunnel-Password type attributes which
    were very long. Found by Denis Andzakovic.
  - Fix radclient issue with TCP sockets on FreeBSD.
  - The server now creates ${run_dir} and ${logdir} directories
    in daemon mode, when running as "root".
  - Handle tags when using maps. Fixes #1191.
  - Fix crash when CoA packets time out.
  - Fix parse error in rediswho
  - Fix regex support in SQL radcheck the "users" file and
    radsniff.
  - Register listen xlat earlier, so that it's available when
    the virtual servers are being parsed.
  - Parse Ascend-Data-Filter when given as "0x..."
  - Print Ascend-Data-Filter correctly. Add test cases for both.
  - Allow old-style clients again. They will be disallowed for
    3.1.0 and following.
  - Complain instead of crash when "else" and "elsif" are in the
    wrong place.
  - Clean up memory more aggressively. This lowers the maximum
    memory used, most typically for TLS based EAP methods.
  - Prevent the server from unlinking the control socket of an
    already running instance.
  - Fallback to using the configured OCSP URL if one exists, and
    no URL is provided in the certificate.
  - Return CoA-NAK if proxying CoA fails. Based on patch from
    Jorge Pereira.
  - Lower peak memory usage by decreasing size of internal
    memory pools.
  - The control socket is now left in place if a second copy of
    the server is accidentally started.
  - Allow virtual attributes in "switch", "case", etc. Fixes
    [#1240] and #1265.
  - Many spell check / typo fixes in comments and example
    configuration files.
  - Better handle multiple DHCP listeners.
  - Don't print secrets for old-style realms. Fixes #1267.
  - Don't fall through in empty "case" statements. Fixes #1274.
  - Update EAP-TTLS so that MPPE keys are correctly calculated
    with TLSv1.2.
  - Always delete MS-MPPE-* from the TTLS inner tunnel. This
    allows TTLS / EAP-MSCHAPv2 to work. Fixes #1206.
  - Fix off by one error that caused some MSCHAP-Error messages
    to be sent without the password change version (V=3) and the
    textual message component (M=).
  - Always include C= V= and M= in MSCHAPv2 errors. RFC 2759
    does not say that any of these fields are optional, and not
    including V= caused errors with wpa_supplicant.
  - Do not include M= in MSCHAPv1 errors. It's not supported.</changelog>
  <changelog author="jkeil@suse.de" date="1445860800">- fix bsc#951404
  * Rebuild of freeradius-server package fails
  * fix source url
  - ftp://ftp.freeradius.org/pub/freeradius/
    + ftp://ftp.freeradius.org/pub/freeradius/old/</changelog>
  <changelog author="michael@stroeder.com" date="1453723200">- removed installation of experimental module rlm_sqlhpwippool.so
- update to 3.0.11 (fate#320481, bsc#961479, CVE-2015-8763,
  bsc#935573, CVE-2015-4680)
  * Changes of version 3.0.11
    + Feature improvements
  - "unlang" comparisons of IP addresses to IP prefixes are now
    detected, and types automatically cast.
  - Allow shorthand form of ipv4prefix values e.g. 127/8.
  - Add "auto_chain" to raddb/mods-available/eap, tls subsection.
    This allows the disabling of OpenSSL auto-chaining of
    certificates. Which might be wrong.
  - Added printing of coa and disconnect stats (radmin).
  - radclient defaults to expecting Access-Accept responses to
    Status-Server.
  - Updated dictionary.lancom, dictionary.starent.
  - Portability fixes for Solaris.
  - More errors from ntlm_auth gets passed to MS-CHAP.
  - Update abfab-tr-idp virtual server.
  - Added "filter_password" in policy.d/filter. This removes
    embedded zero bytes in User-Password, for compatibility with
    broken clients.
  - The server now issues a WARNING message if duplicate
    configuration items are found.
  - TLS can skip the "verify" section if OCSP returns OK. See
    raddb/mods-available/eap, "skip_if_ocsp_ok".
  - Set TLS-OCSP-Cert-Valid = yes / no / skipped, which is the
    result from the OCSP check.
  - Interoperate with AD and "LmCompatibiltyLevel = 5", by
    always setting WBC_MSV1_0_ALLOW_MSVCHAPV2 for native winbind
    in rlm_mschap.
  - TTLS and PEAP now require "virtual_server" to be a real
    server.
  - Print WARNING when TTLS or PEAP identities are spoofed or
    not properly anonymized. See RFC 7542 for requirements.
  - Various rlm_python fixes from Herwin Weststrate.
  - Allow setting Response-Packet-Type in "Post-Proxy-Type Fail",
    which is useful when the home server does not respond.
  - elasticsearch updates from Matthew Newton
    + Bug Fixes
  - Fix issue where field nas_type would not be accessible via
    the %{client:} xlat, for clients loaded from SQL.
  - Fix compatiblity issues with OpenSSL 1.0.2. Ignore calls to
    msg_callback with 'pseudo' content types.
  - Data type "ipv4prefix" is parsed correctly.
  - Use correct talloc context in rlm_exec. Fixes #1338.
  - Complain in unlang if "else" is used with no previous "if"
    or "elsif".
  - Send accounting status packets to the accounting port.
    Fixes #1364.
  - Print out CFLAGS when doing "radiusd -Xxv"
  - Fixed bug with coa/acct stats value #1339. Based on patch
    from Jorge Pereira.
  - Fixes for LEAP proxying. Don't use LEAP!
  - Fix issue with "directory already exists" seen when doing
    "make install".
  - Fixed bug with radmin related to the option "stats detail
    &lt;filename&gt;"
  - Complain if the detail file reader does not have permission
    to read the "detail.work" file. Fixes #1398
  - Fixed SoH. Attributes were not being copied to the virtual
    server.
  - Used a wrong list to global statistics in "stats".
  - Create EAP-PWD identity correctly. Prevents segfaults.
  - Dynamically validate authentication types for PEAP and
    EAP-MSCHAPv2.
  - Fix includes in installed headers.
  - OpenSSL 1.0.1f and 1.0.1g do NOT calculate TLS 1.2 keys
    correctly. See raddb/mods-available/eap, "disable_tlsv1_2"
  - Allow password change to work for MS-CHAP. This requires
    'r=0', because password changes are not retries.
  - Fix home server fail-over for home servers using TCP and/or
    RadSec.
  - Special characters in expanded regexes are now escaped e.g.
    User-Name containing '.', and comparing /%{User-Name}/, the
    '.' will now be escaped. See src/tests/keywords/regex-escape.
  - Use correct authentication vector when sending Access-Reject
    replies for RadSec.
  - Set FreeRADIUS-Proxied-To in TTLS again. You should use the
    "inner-tunnel" virtual server, instead of relying on this
    attribute.
  - Fix debugging constants in rlm_perl. Patch from Herwin
    Weststrate.
  - Add samba-dev / samba4-dev to debian builds so that
    rlm_mschap can automatically use the new winbind API.
  - Automatically skip zero-length attributes when sending
    packets, instead of erroring out.</changelog>
  <changelog author="adam.majer@suse.de" date="1472817600">- use %{with} macro for conditional inclusions instead of hardcoding
  version numbers
- improved package descriptions
- fixed builds on SLE12 and SLE11SP4</changelog>
  <changelog author="michael@stroeder.com" date="1475150400">- update to 3.0.12 - still fate#320481
  The focus of this release is stability.
  * Feature improvements
    + Add support for =~ and !~ in update sections. See "man unlang"
    + Add dictionary.checkpoint.
    + Simultaneous-Use prints out more information.
    + Print WARNING in debug mode when packets may be truncated.
    + Added expansions %{home_server:state} and
    %{home_server_pool:state}, which show the state of the
    server / pool.
    + Mark rlm_sql_freetds as stable.
    + Make rlm_perl less fragile. Patch from Herwin Weststrate.
    + Allow extended attributes to have "encrypt=2"
    + Update dictionary.aruba.
    + Add support for EAP-FAST. This is an isolated feature which
    does not affect anything else.
    + Update OpenSSL vulnerability list. Use a version of OpenSSL
    released after September 20, 2016.
    + EAP certificate verification is now done when "verify" is
    enabled and "ocsp" is disabled.
    + New dhcpclient and rlm_rad_counter man pages.
    + Minor abfab and moonshot additions.
    + Pass CFLAGS through from environment in RPM builds. Allows
    more custom builds.
    + Build with Heimdal in addtion to libkrb5.
  * Bug Fixes
    + Use correct typedef for older versions of sqlite.
    + Update mssql schema to add priority
    + don't complain on /dev/urandom in ldap
    + fix == operator in update sections
    + Don't create DHCP strings with many trailing zeros.
    + Allow MS-CHAP change passwords instead of complaining on
    large buffer.
    + Allow assignment or equality operator on SQL.
    + Update aclocal tests for FreeBSD 10.
    + Remove occasional hang in rlm_linelog.
    + Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
    + A few minor bugfixes caught in v3.1.x cleanup, and
    back-ported to v3.0.x.
    + do_not_respond again works in post-proxy
    + Allow realm "~^.*$" {} and User-Name with no realm.
    + Fix leak when creating unknown attributes
    + Fix Debian / logrotate.
    + Make OpenSSL error functions thread-safe.
    + Fix crash with rlm_sql and updating SQL-User-Name.
    + Debian build updates.
    + Allow regular expression comparisons in radclient.
    + Fix memory leak on unknown attributes in detail file reader.
    + Update example paths in "man" pages when installing them
    + Build fixes for rlm_mschap. Fixes #1489.
    + BSD build fixes. Patch from issue #1583.
    + Be more careful about /lib/ when building. Fixes #1585.
    + Correct ifdef placement error. Fixes #1572.
    + Allow for more files in internal "exfile" API So it will be
    possible to open more than 64 "detail" files at the same
    time.
    + Remove support for statically built EAP modules. Fixes #1591.
    + Many fixes to rlm_python from Guillaume Pannatier.
    + Use correct week adjustment in SQLcounter. Fixes #1608
    + Minor fixes to allow compilation without DHCP, VMPS, or TCP.
    + Fix checks for module / config file change on HUP.
    + Compile regex comparisons when sent via "debug condition".
    + Update filenames in documentation and examples.
    + Don't crash if SQL connection becomes unavailable.
    + Disallow originate_coa when proxy_requests = no.
    + Free rad_perlconf_hv in correct perl context.
    + Multiple fixes for Debian builds. #1510, among others.
    + Set OpenSSL FIPS compatibility flag when necessary.
    + Pulled fixes for the build system over from other branches.
    + Fix OCSP for RADIUS over TLS.
    + Fix skip_if_ocsp_ok behavior.
    + Better fixes for systems without closefrom() but which have
    /proc.
    + Minor build fixes back-ported from v4.0.x.
    + build --whout-ascend-binary. Fixes #1761.
    + Be more aggressive about not opening new connections in
    debug mode after CTRL-C. Address #1604.</changelog>
  <changelog author="adam.majer@suse.de" date="1479470400">- Add upstream keyring
- 2 new modules: rlm_sql_freetds and rlm_eap_fast</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes (bsc#1049086) for
  issues found via fuzzing by Guido Vranken
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064.
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1555416000">- CVE-2019-11235.patch: fixes authentication bypass vulnerability
  in the EAP-PWD module via invalid curve attack or a reflection
  attack vector. (CVE-2019-11235, CVE-2019-11234, bsc#1132549,
  bsc#1132664)</changelog>
</package>
<package pkgid="54a682237078d85c74fd2684abe9fa6fc014f1d8cb432ed9225177cbf7973aff" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.2.3.1"/>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
</package>
<package pkgid="ddda9a4bf1dc39dcca2a07ca78cd2ff4b078d7ae9fe2428d7b65719b5dfcbe9d" name="freerdp" arch="src">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.7.1"/>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
</package>
<package pkgid="d5c43fe0fdf906a623411e5de0e289d2aae5ec3b730bcc2810889108eca3a997" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.7.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
</package>
<package pkgid="84fdc19e0462546ad2d5d71895c3aa897e0681ddfa5ccb0f1817a80b88f77ec5" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.2.3.1"/>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
</package>
<package pkgid="3a27e269444cd66030c2ed588bd89e67e37c5b4fc2de6405d491913339e6eb17" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.7.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
</package>
<package pkgid="f056749d1abfeb09764c7c122ab807b35b57960ad4949d876e858085df7fd326" name="freerdp-server" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.2.3.1"/>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
</package>
<package pkgid="1884e3f7829b470eed1eab10a957f672bd89c9de7917fdd717f10399742f9290" name="freerdp-server" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.7.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
</package>
<package pkgid="84ba807e8d9e226639d5c7cc27ac9670cf0dfedf34b4e74c93e13245a643778f" name="freerdp-wayland" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.2.3.1"/>
  <changelog author="dliang@suse.com" date="1402574400">- Add freerdp-CVE-2014-0250.patch to fix bnc#880317
  solves CVE-2014-0250, backport from upstream</changelog>
  <changelog author="fezhang@suse.com" date="1403524800">- Add freerdp-CVE-2014-0791.patch to fix bnc#857491
  backported from upstream commit f1d6afc</changelog>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
</package>
<package pkgid="f04536755ef98d78b3739f6a184c859836b08dd1a509a52532698017d325ffce" name="freerdp-wayland" arch="x86_64">
  <version epoch="0" ver="2.0.0~rc4" rel="lp150.7.1"/>
  <changelog author="fezhang@suse.com" date="1462363200">- Update to version 2.0.0, git master branch id a7ca42e
  (FATE#319661), no upstream changelog available.
  * Warning: This is a git snapshot regarded as technical preview
    by upstream.
  * Warning: For xfreerdp, new /long-option commandline interfaces
    have replaced the old --long-option interfaces. Existing user
    scripts need to migrate to the new interfaces to avoid
    breakages.
    For more details, see:
    https://github.com/FreeRDP/FreeRDP/wiki/CommandLineInterface
  * Add Network Level Ahthentication support.
  * Add Windows Portable Runtime. For more details, see:
    http://www.freerdp.com/2012/05/24/winpr-windows-portable-runtime
  * Obsolete libfreerdp-1_0-plugins.
- Drop FindALSA.cmake: deprecated
- Drop freerdp_branch-1.0.x_fix-kpdivide-issue831.patch:
  fixed upstream, implemention now in include/freerdp/scancode.h.
- Drop freerdp-CVE-2014-0250.patch (bnc#880317):
  fixed upstream 532c420.
- Drop freerdp-CVE-2014-0791.patch (bnc#857491):
  fixed upstream f1d6afc.
- Drop freerdp-fix-FindPCSC-macro.patch:
  fixed upstream 9148af3.
- Drop freerdp-handle-null-device-name.patch (bnc#785437):
  deprecated, related implementation dropped.
  was: freerdp-fix-pulse-no-device-name.patch</changelog>
  <changelog author="fezhang@suse.com" date="1463486400">- Update to GNOME 3.20.2 FATE#318572
- Add obs git integration.
- Update to version 2.0.0git.1463131968.4e66df7:
  + Fixed memory leaks.
  + wfreerdp: fix name build without client interface
  + libfreerdp-codec: fix xcrush decompression, revert remote
    control fix
  + KB3153731: May 2016 DST update for Azerbaijan, Chile, Haiti and
    Morocco
  + libfreerdp-codec: make proper xcrush context reset fix</changelog>
  <changelog author="jengelh@inai.de" date="1463572800">- Kill off __DATE__ from built sources.</changelog>
  <changelog author="dimstar@opensuse.org" date="1477483200">- Update to version 2.0.0~git.1477034991.043243f:
  * fixed kerberos authentication
  * shadow/rdpsnd: Fix race condition in rdpsnd channel server.
    The output buffer and format parameters are not protected.
  * wfreerdp: fix invalid VerifyCertificate callback
  * rdpsnd/server: decrease audio latency and make it configurable.
  * Add an environment variables section to the man
  * protocol violation: rdp_read_extended_info_packet
  * Added support for OpenH264 1.6
  * freerdp: fix sending of TLS alert on NLA failure, add better
    handling of server-side NLA in shadow server
  * freerdp: add configurable NTLM SAM file option for
    server-side NLA
  * freerdp: make modifications to NLA server-side fixes according
    to PR comments
  * Fixed a windows 8.1 issue.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1484654400">- Add 3472.patch until upstream #3472 isssue is fixed and PR merged
  this fix boo#1004108</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- Forcefully enable PIE in CFLAGS as the automatism did not work.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1497182400">- Redo history by using changelog url
- Update to version 2.0.0~git.1497095982.1dbd2d28d:
  See https://github.com/freerdp/freeRDP/compare/043243f...1dbd2d28d
  for full details.
- Packaging :
  + Move to xz tarball in _service
  + Remove 3472.patch merged upstream
- Update to version 2.0.0~git.1496304402.c42ccb508:
  See https://github.com/freerdp/freeRDP/compare/043243f...c42ccb508
  for changes.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267200">- Switched to official RC0
- Create wayland client package and libuwac0 package
- Create separate libwinpr2 to be used in other packages
- enabled gstreamer (currently disabled for tumbleweed)
- enabled kerberos authentication
- Update to official RC0
  Fix the following issues identified by the CISCO TALOS project:
  * TALOS-2017-0336 CVE-2017-2834 boo#1050714
  * TALOS-2017-0337 CVE-2017-2835 boo#1050712
  * TALOS-2017-0338 CVE-2017-2836 boo#1050699
  * TALOS-2017-0339 CVE-2017-2837 boo#1050704
  * TALOS-2017-0340 CVE-2017-2838 boo#1050708
  * TALOS-2017-0341 CVE-2017-2839 boo#1050711</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1504267201">- Fixed download location</changelog>
  <changelog author="jengelh@inai.de" date="1504526400">- Remove extraneous Obsoletes for packages that never existed
  in openSUSE:Factory or X11:RemoteDesktop.
- Rename libuwac0-devel to uwac0-devel and libwinpr-devel to
  winpr-devel, as that seems to be their upstream name which
  packages are encouraged to stick to.
- Remove duplicated pkgconfig requires (these are autodetected).</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1512043200">- Updated to 2.0.0-rc1
  Noteworthy features and improvements:
  * support for FIPS mode was added (option +fipsmode)
  * initial client side kerberos support (run cmake with WITH_GSSAPI)
  * support for ssh-agent redirection (as rdp channel)
  * the man page(s) and /help were updated an improved
  * add support for ICU for unicode conversion (-DWITH_ICU=ON)
  * client add option to force password prompt before connection (/from-stdin[:force])
  * extend /size to allow width or height percentages (#gh/FreeRDP/FreeRDP/4146)
  * add support for "password is pin"
  * clipboard is now enabled per default (use -clipboard to disable)
  Fixed github issues (excerpt):
  * #gh/FreeRDP/FreeRDP/4281: Added option to prefer IPv6 over IPv4
  * #gh/FreeRDP/FreeRDP/3890: Point to OpenSSL doc for private CA
  * #gh/FreeRDP/FreeRDP/3378: support 31 static channels as described in the spec
  * #gh/FreeRDP/FreeRDP/4253: Rfx decode tile width.
  * #gh/FreeRDP/FreeRDP/3267: fix parsing of drivestoredirect
  * #gh/FreeRDP/FreeRDP/4257: Proper error checks for /kbd argument
  * #gh/FreeRDP/FreeRDP/4249: Corruption due to recursive parser
  * #gh/FreeRDP/FreeRDP/4111: 15bpp color handling for brush.
  * #gh/FreeRDP/FreeRDP/3509: Added Ctrl+Alt+Enter description
  * #gh/FreeRDP/FreeRDP/3211: Return freerdp error from main.
  * #gh/FreeRDP/FreeRDP/3513: add better description for drive redirection
  * #gh/FreeRDP/FreeRDP/4199: ConvertFindDataAToW string length
  * #gh/FreeRDP/FreeRDP/4135: client/x11: fix colors on big endian
  * #gh/FreeRDP/FreeRDP/4089: fix h264 context leak when DeleteSurface
  * #gh/FreeRDP/FreeRDP/4117: possible segfault
  * #gh/FreeRDP/FreeRDP/4091: fix a regression with remote program</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1515672000">- Users can connect only once wo windows sessions due to
  [#]gh/FreeRDP/FreeRDP/4348
  Therefore WITH_GSSAPI has been disabled until that issue has been
  solved</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520856000">- Do not use xorg-x11-devel, instead buildrequire individual
  x components.
- Only attempt to ge rid of __DATE__ and __TIME__ if
  SOURCE_DATE_EPOCH is not set.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1521115200">- Added no_connection_to_windows_10_17101.patch to fix
  Windows-connection-problem after Windows march 2018 updates.
  This fix is related to boo#1085416</changelog>
  <changelog author="bruno@ioda-net.ch" date="1524571200">- Fix boo#1090677 activate pulse optional component</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1526299200">- removed SLE11 condition
- removed no_connection_to_windows_10_17101.patch
- removed -DBUILTIN_CHANNELS=OFF switch
- explicitly set -DCHANNEL_GEOMETRY=ON
- Disable the new X264 and OPENH264 codecs because openSUSE does
  not provide them
- upgrade to version 2.0.0-rc2
  See: https://github.com/FreeRDP/FreeRDP/milestone/8
  Noteworthy features and improvements:
  * IMPORTANT: add support CredSSP v6 - this fixes KB4088776 see #4449, #4488
  * basic support for the "Video Optimized Remoting Virtual Channel
    Extension" (MS-RDPEVOR) was added
  * many smart card related fixes and cleanups #4312
  * fix ccache support
  * add support for memory and thread sanitizer
  * support for dynamic resloution changes was added in xfreerdp #4313
  * support for gateway access token (command line option /gat) was added
  * initial support for travis-ci.org was added
  * SSE optimization version of RGB to AVC444 frame split was added
  * build: -msse2/-msse3 are not enabled globally anymore
  Fixed github issues (excerpt):
  * #4227 Convert settings-&gt;Password to binary blob
  * #4231 freerdp-2.0.0_rc0: 5 tests failed out of 184 on ppc
  * #4276 Big endian fixes
  * #4291 xfreerdp ?Segmentation fault? when connecting to freerdp-shadow-cli
  * #4293 [X11] shadow server memory corruption with /monitors:2 #4293
  * #4296 drive redirection - raise an error if the directory can't be found
  * #4306 Cannot connect to shadow server with NLA auth:
    SEC_E_OUT_OF_SEQUENCE (boo#1085416, boo#1087240, boo#1104918,
    CVE-2018-0886)
  * #4457 Fix /size: /w: /h: with /monitors: (Fix custom sizes)
  * #4527 pre-connection blob (pcb) support in .rdp files
  * #4552 Fix Windows 10 cursors drawing as black
  * smartcard related: #3521, #3431, #3474, #3488, #775, #1424</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1533729600">- upgrade to version 2.0.0-rc3
  See: https://github.com/FreeRDP/FreeRDP/milestone/9?closed=1
  * Improved and cleaned up the command line interface
  * Fixed automount issues
  * Fixed several audio and microphone related issues
  * Implemented AAC and MP3 codecs
  * Added Wave2 support
  * Addedd dynamic resolution with full screen toggle support
  * Improved redirection handling and certificate issues
  * Improved automatic reconnects
  * Improced connection error handling
  * Fixed invalid pointer, double-free, integer underflow,
    buffer overflows issues as well as other memory leaks
  * fixed X11 Right-Ctrl ungrab feature
  * winpr: Updates time zone data to April 2018
  * added libressl compatibility</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1542715200">- upgrade to version 2.0.0-rc4 (FATE#326739)
  * Fix the following issues:
  - CVE-2018-8784, boo#1116708
  - CVE-2018-8785, boo#1117967
  - CVE-2018-8786, boo#1117966
  - CVE-2018-8787, boo#1117964
  - CVE-2018-8788, boo#1117963
  - CVE-2018-8789, boo#1117965
  - CVE-2018-1000852, boo#1120507
  * Security and stability improvements, including boo#1103557 and boo#1112028
  * Refactored ntlm_av_pairs API
  * gateway: multiple fixes and improvements
  * client/X11: support for rail (remote app) icons was added
  * the licensing code was re-worked: Per-device licenses are now saved on the
    client and used on re-connect: WARNING: this is a change in FreeRDP
    behavior regarding licensing
    WARNING: this is a change in FreeRDP behavior regarding licensing. If the old
    behavior is required, or no licenses should be saved use the
    new command line option +old-license (gh#/FreeRDP/FreeRDP#4979)
  * improve order handling -  only orders that were enabled
    during capability exchange are accepted.
    WARNING and NOTE: some servers do improperly send orders that weren't negotiated,
    for such cases the new command line option /relax-order-checks was added to
    disable the strict order checking. If connecting to xrdp the options
    /relax-order-checks *and* +glyph-cache are required. (gh#/FreeRDP/FreeRDP#4926)
  * /smartcard has now support for substring filters (gh#/FreeRDP/FreeRDP#4840)
    for details see https://github.com/FreeRDP/FreeRDP/wiki/smartcard-logon
  * add new command line option /smartcard-logon to allow
    smartcard login (currently only with RDP security)
  * add support to set tls security level (for openssl &gt;= 1.1.0)
  - default level is set to 1
  - the new command line option /tls-seclevel:[LEVEL] allows to set
    a different level if required
  * new command line option: /window-position to allow positioning
    the window on startup
  * client/X11: set window title before mapping
  * rdpsnd/audin (mostly server side) add support for audio re-sampling using soxr or ffmpeg</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1555502400">- Add Requires: lib%{name}%{major_version} = %{version}-%{release}:
  freerdp should depend on the same release of libfreerdp2
  (boo#1129193)</changelog>
</package>
<package pkgid="a341e83c3e8c91fffb8a2d203b1be14ab62201a8b41416f211cb5c4191372f4b" name="ft2demos" arch="src">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="6af0a76cd6fea8eb0c033a61495ab9440bd5fc3811807d374481b6aada28822e" name="ft2demos" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="ca9c4f3f321e05dda7161d01911992caa10241fd1e6aad2ac64e782e578276be" name="ftbench" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="64507bc6ff2e2d1b7be8e20aa982e25402e2e7ece33446f7033528dd92ff0b7d" name="ftdiff" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="ff70a7951a306d82059640f8aa155f4bf8c3ed557895784fb5a11e3c7e6205e0" name="ftdump" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="196972e2e3d9ebc68167d4cee43c6b2f9896435c132940038746ab58807a2420" name="ftgamma" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="c164c54f97c2cd74687f03e4d77deb9a7ae6df1f151af5c48c1925f944c79e5e" name="ftgrid" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="7b4b32d62b168e3674c9d3bfc8c316a4b83bb243f19c5ac4fb191e4cd0d67e00" name="ftinspect" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="502fcd75f208a47583e6fc8105f40b6634e2b08d9bed347dd9da45af18ddf774" name="ftlint" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="79036f7e55e4ce9da0c8462a66d9e27a37078de98edba3a82edab8dffedc9f45" name="ftmulti" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="89ccce0a4715ef62807e1722aade730c384d727b6cde49657101a0f9081d2e74" name="ftstring" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="2aaf9b908d56a52295df1ff3a152ab48f6ef0c19f792ef3324baa30920220c80" name="ftvalid" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="1ef7295fe7d4ce473e97ab63bd287a39fa37c9a2045228fa77eb72b153aba8d6" name="ftview" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp150.3.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1418040000">- Update to version 2.5.4
  * IMPORTANT BUG FIXES
  - A variant of vulnerability CVE-2014-2240 was identified
    (cf.  http://savannah.nongnu.org/bugs/?43661) and fixed
    in  the new CFF driver.  All users should upgrade.
  - The new auto-hinter code using HarfBuzz crashed for some
    invalid fonts.
  - Many fixes to better protect against malformed input.
  * IMPORTANT CHANGES
  - Full auto-hinter support of the Devanagari script.
  - Experimental auto-hinter support of the Telugu script.
  - CFF stem darkening behaviour can now be controlled at
    build time using the eight macros
    CFF_CONFIG_OPTION_DARKENING_PARAMETER_{X,Y}{1,2,3,4}    .
  - Some fields in the `FT_Bitmap'  structure have been changed
    from signed to unsigned type, which better reflects
    the actual usage. It is also an additional means to
    protect against malformed input. This change doesn't break
    the ABI; however, it might cause compiler warnings.
  * MISCELLANEOUS
  - Improvements to  the auto-hinter's algorithm to recognize
    stems and local extrema.
  - Function `FT_Get_SubGlyph_Info' always returned an error
    even in case of success.
  - Version  2.5.1 introduced major bugs in the cjk part of
    the auto-hinter, which are now fixed.
  - The `FT_Sfnt_Tag' enumeration values have been changed to
    uppercase,  e.g.  `FT_SFNT_HEAD'. The lowercase variants
    are deprecated. This is for orthogonality with all other
    enumeration (and enumeration-like) values in FreeType.
  - `cmake' now supports builds of FreeType as an OS X framework
    and for iOS.
  - Improved project files for vc2010,
    introducing a property file
  - The documentation generator for the API reference has been
    updated to produce  better HTML code (with proper  CSS).
    At the same time, the documentation got a better structure.
  - The FT_LOAD_BITMAP_CROP flag is obsolete; it is not used
    by any driver.
  - The TrueType DELTAP[123] bytecode instructions now work in
    subpixel hinting mode as described in the ClearType
    whitepaper (i.e., for touched points in the
    non-subpixel direction).
  - Many small improvements to the internal arithmetic routines.
- Rebase don-t-mark-libpng-as-required-library.patch,
  bugzilla-308961-cmex-workaround.patch, freetype2-subpixel.patch,
  freetype2-bitmap-foundry.patch and overflow.patch
- Add freetype2-2.5.3-fix-pcf.patch from upstream to resolve
  http://savannah.nongnu.org/bugs/?43774, "Freetype 2.5.4 does not
  load ungzipped PCF fonts"</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1420286400">- Update to version 2.5.5
  * IMPORTANT BUG FIXES
  - Handling of  uncompressed PCF files works again (bug
    introduced in version 2.5.4).
- Drop freetype2-2.5.3-fix-pcf.patch, merged upstream</changelog>
  <changelog author="nadvornik@suse.com" date="1424433600">- fixed vulnerabilities (bnc#916847, bnc#916856, bnc#916857,
  bnc#916858, bnc#916859, bnc#916860, bnc#916861, bnc#916862,
  bnc#916863, bnc#916864, bnc#916865, bnc#916867, bnc#916868,
  bnc#916870, bnc#916871, bnc#916872, bnc#916873, bnc#916874,
  bnc#916879, bnc#916881)
  - CVE-2014-9656.patch
  - CVE-2014-9657.patch
  - CVE-2014-9658.patch
  - CVE-2014-9659.patch
  - CVE-2014-9660.patch
  - CVE-2014-9661.patch
  - CVE-2014-9662.patch
  - CVE-2014-9663.patch
  - CVE-2014-9664.patch
  - CVE-2014-9665.patch
  - CVE-2014-9666.patch
  - CVE-2014-9667.patch
  - CVE-2014-9668.patch
  - CVE-2014-9669.patch
  - CVE-2014-9670.patch
  - CVE-2014-9671.patch
  - CVE-2014-9672.patch
  - CVE-2014-9673.patch
  - CVE-2014-9674.patch
  - CVE-2014-9675.patch</changelog>
  <changelog author="fstrba@suse.com" date="1428667200">- Run spec-cleaner on the spec file.</changelog>
  <changelog author="fstrba@suse.com" date="1433332800">- Modified patch:
  * CVE-2014-9671.patch
  - Adapt the code to correspond to the current git master of
    freetype2 (fixes bsc#933247)</changelog>
  <changelog author="fstrba@suse.com" date="1433851200">- Merge with the version 2.5.5 from openSUSE:Factory
- Removed patches:
  * CVE-2014-9656.patch
  * CVE-2014-9657.patch
  * CVE-2014-9658.patch
  * CVE-2014-9659.patch
  * CVE-2014-9660.patch
  * CVE-2014-9661.patch
  * CVE-2014-9662.patch
  * CVE-2014-9663.patch
  * CVE-2014-9664.patch
  * CVE-2014-9665.patch
  * CVE-2014-9666.patch
  * CVE-2014-9667.patch
  * CVE-2014-9668.patch
  * CVE-2014-9669.patch
  * CVE-2014-9670.patch
  * CVE-2014-9671.patch
  * CVE-2014-9672.patch
  * CVE-2014-9673.patch
  * CVE-2014-9674.patch
  * CVE-2014-9675.patch
  - Integrated in the 2.5.5 release
- Modified patches:
  * don-t-mark-libpng-as-required-library.patch
  * bugzilla-308961-cmex-workaround.patch
  * freetype2-subpixel.patch
  * freetype2-bitmap-foundry.patch
  * overflow.patch
  - Adapt to the new version of sources</changelog>
  <changelog author="idonmez@suse.com" date="1434024000">- Update to version 2.6
  * ftgrid can now display GX and MM fonts.
  * Anti-aliasing rendering  modes can now be  selected (with keys
    F5 and F6).
  * The display of point numbers can be toggled with key `D'.
  * ftdump now display information on MM and GX variation axes.
  * ftmulti can now handle up  to six MM  or GX axes.
- Refresh overflow.patch</changelog>
  <changelog author="baiduzhyi.devel@gmail.com" date="1443960000">- Update to version 2.6.1.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1445601600">- no longer conflict dtc, flattened device tree tools are named
  to no longer clash with ft2demos binaries since dtc 1.4</changelog>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * The ftstring  demo program  now supports  sub-pixel rendering;
    use key l to cycle through the LCD modes.
  * The ftstring  demo program now supports  colour rendering; use
    the space key to cycle through various colour combinations.
  * The graphical demo programs now use a default gamma value of 1.8
    (instead of 1.2).</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * The `ftgamma' demo  program has been modernized;  the gamma grid
    display has been moved from `ftview' to this program.
  * It is now possible to  cycle through the available LCD filtering
    modes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Update to version 2.6.4:
  + Sync with freetype 2.6.4.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  + Sync with freetype 2.7</changelog>
  <changelog author="idonmez@suse.com" date="1474372800">- Also build ftinspect</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1
  + The `ftmulti' demo program can now switch engines with key `H'.
  + The `ftstring' demo program can now show some built-in,
    non-latin sample strings (to be selected with the TAB key).
  + The `ftview' demo program can now switch between a font's
    charmaps using the TAB key.
- Remove ftinspect-library.patch, merged upstream.</changelog>
  <changelog author="fstrba@suse.com" date="1491220800">- Package the tools separately to avoid unnecessary dependencies
  on X11 and/or Qt5 (bsc#1031678)</changelog>
  <changelog author="idonmez@suse.com" date="1494849600">- A mode to display  light auto-hinting with sub-pixel positioning
  has been added to `ftdiff'.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * The ftgrid demo program can now toggle the display of grid lines
    with the G key.
  * The ftgrid demo program can toggle a different set of colors
    (suitable to color-blind people) with the C key.
  * The ftgrid demo program now supports the -e command line option
    to select a cmap.
  * The ftdump demo program has a new command line option -t to
    output the SFNT table list.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * The `ftbench' demo program has a new test for opening a new
    face and loading some glyphs.
  * The `ftbench' demo program has a new option `-j' to specify
    the last glyph index to be used in the tests.
  * The `ftgrid' demo program has a new option `-n' to suppress
    display of named instances of variation fonts.
  * The `ttdebug' demo program can now show a stack trace (key `K')
    and switch between hexadecimal and decimal display of integers
    (key `I').</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1550923200">- Remove "Supplements: fonts-config" to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(boo#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues.</changelog>
</package>
<package pkgid="5c27f7eb19e81a6ebaa3b40cd5ff2f4cb5cdc32b3dd26be88fe17345978964ff" name="fuse" arch="src">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="716624c91c5e6225b58e976d30e0969249285ee72f27c04f637b2f3ddaae6204" name="fuse" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="93377d092146a96c7f5cbcff66804a812dc59f988a8ce99b0413f6e8aab88dda" name="fuse-devel" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="51a8f91373299122690b9d213fc7ede25befcc2a89eabea601c028021757abc3" name="fuse-devel-static" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="eb1193a6c610e4b2039141607a68c8775d26fb166e1f44a331e1da20babc6231" name="fuse-doc" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="lp150.2.3.1"/>
  <changelog author="mszeredi@suse.cz" date="1327492800">- use %set_permissions instead of %run_permissions in specfile</changelog>
  <changelog author="puzel@suse.com" date="1335096000">- update to 2.9.0
  - Add "zero copy" support for kernel 2.6.35 or newer
  - Make maximum background requests tunable on kernel 2.6.32 or
    newer
  - Require --no-canonicalize in (u)mount (util-linux version 2.18
    or newer) to fix security problems with fusermount
  - Use dynamically sized hash tables in high level library
  - Memory use of filesystem daemon can shrink more easily
  - Add "auto_unmount" option
  - Add "remember" option
  - Add man pages for fusermount, mount.fuse and ulockmgr_server
  - API changes:
  - Introduce "store" and "retrieve" for accessing kernel
    buffers on kernel 2.6.36 or newer
  - Introduce abstract buffer for zero copy operations
  - Allow path calculation to be omitted on certain operations
  - Allow batching forget requests
  - Add "flock" method
  - Add support for ioctl on directories
  - Add delete notification
- drop fuse-pc-remove-libdir-from-Libs.diff (upstream)</changelog>
  <changelog author="rschweikert@suse.com" date="1335441600">- place binaries in /usr tree (UsrMerge project)</changelog>
  <changelog author="mszeredi@suse.cz" date="1337169600">- Fix -pthread in fuse.pc [bnc#761117]</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Trim list of FUSE fses from description (it's literally endless)
  and text inappropraite for subpackages</changelog>
  <changelog author="coolo@suse.com" date="1341230400">- avoid autoreconf to avoid breaking on updates of auto* tools</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
  <changelog author="archie@dellroad.org" date="1362398400">- Update to version 2.9.2
  - Add support for fallocate() (kernel &gt;= 3.5)
  - Bug fixes
- Remove fix-pthread-in-fuse.pc.patch; now included in upstream
- Don't patch generated files such as configure and Makefile.in;
  instead, regenerate them using makeconf.sh from SVN repository</changelog>
  <changelog author="idonmez@suse.com" date="1362744000">- Use autoreconf directly instead of makeconf.sh</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- fix build for SLE_11</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="df9bb0ef2cfc2fda642696ea98216987d7099d13fd38f52d6e34859d8c382c0f" name="fuse-exfat" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="lp150.2.3.1"/>
  <changelog author="zawertun@gmail.com" date="1307361600">- Update to version 0.9.5:
  + Fixed erasing of the root directory cluster when creating a new FS with mkexfatfs. This bug could cause mkexfatfs to produce invalid FS.
  + Utilities are not linked with libfuse anymore.
  + Ensure that the path being opened is either a device or a regular file.</changelog>
  <changelog author="zawertun@gmail.com" date="1326801600">- Update to version 0.9.6:
  + Fixed write performance regression introduced in 0.9.4.
  + Mount in read-only mode if the device is write-protected.
  + Set ctime to mtime to ensure we don't break programs that rely on ctime
    (e.g. rsync considered that all files are outdated) [Eldad Zack].
  + Indicate that FS in not clean when it was not cleanly unmounted.
  + Utilities are now compatible with GNU/Hurd.
  + Fixed several memory leaks that could occur on error handling paths.
  + Improved handling of corrupted file systems.</changelog>
  <changelog author="zawertun@gmail.com" date="1336219200">- Update to version 0.9.7:
  + Out-of-the-box FreeBSD support (via ublio library).
  + Fixed "missing EOD entry" error (could happen while reading
    directory that consists of several clusters).
  + Fixed interpretation of minutes field in files timestamps
    (minutes could be displayed incorrectly).
  + Fixed mtime seconds field initialization for newly created file
    (mtime could be 1 sec less than creation time).
  + SConscript now respects CC, CCFLAGS and LDFLAGS environment
    variables.</changelog>
  <changelog author="zawertun@gmail.com" date="1348142400">- Update to version 0.9.8:
  + The mkfs utility can now create huge file systems (up to several
    exabytes).
  + Fixed handling of characters beyond Basic Multilingual Plane.
  + Echo messages to syslog only if stderr is not connected to a
    terminal.</changelog>
  <changelog author="zawertun@gmail.css" date="1358078400">- %{optflags} passed as the value for CCFLAGS and CPPFLAGS</changelog>
  <changelog author="zawertun@gmail.com" date="1358769600">- Update to version 1.0.0:
  + Fixed crash when renaming a file within a single directory and
    a new name differs only in case.
  + Fixed clusters allocation: a cluster beyond valid clusters
    range
    could be allocated.
  + Fixed crash when a volume is unmounted while some files are
    open.
  + SConscript now respects AR and RANLIB environment variables.
  + Improved error handling.
  + Enabled big_writes. This improves write speed (larger block
    size means less switches between kernel- and user-space).
  + Do BLKROGET ioctl to make sure the device is not read-only:
    after "blockdev --setro" kernel still allows to open the device
    in read-write mode but fails writes.</changelog>
  <changelog author="zawertun@gmail.com" date="1358856000">- Added link from man page mount.exfat-fuse.8 to mount.exfat.8</changelog>
  <changelog author="zawertun@gmail.com" date="1358856001">- Execute %postun script part only after package uninstallation</changelog>
  <changelog author="zawertun@gmail.com" date="1364299200">- Update to version 1.0.1:
  + Fixed unexpected removal of a directory if it is moved into
    itself.
  + Fixed "Operation not permitted" error on reading an empty file.</changelog>
  <changelog author="subchaser1@gmail.com" date="1368360000">- Fixed an error "unknown filesystem type 'exfat'" for the
  openSUSE 12.3</changelog>
  <changelog author="zawertun@gmail.com" date="1404820800">- Update to version 1.1.0:
  + Relicensed the project from GPLv3+ to GPLv2+.
  + OpenBSD support [Helg Bredow].
  + Improved I/O errors handling.
  + Implemented fsync() and fsyncdir().
  + Fixed crash on Mac OS X 10.5 caused by non-standard use of
    realpath(). Also fixed TrueCrypt disks unmounting.
  + Avoid extra erase on writes to the end of a file. This should
    improve linear write speed.
  + Allow arbitrary changing of lower 9 bits of mode. Allow
    owner/group changing to the same owner/group. This fixes rsync.
  + Fixed buffers overflows when handling lengthy file names.
  + Fixed "real size does not equal to size" error on volumes with
    pagefile.sys.
  + Fixed negative IUsed in "df -i" output.</changelog>
  <changelog author="lars@linux-schulserver.de" date="1408449600">- recommend exfat-utils
- specfile cleanup using spec-cleaner
- fix URL
- add Changelog and COPYING to doc files</changelog>
  <changelog author="dsterba@suse.cz" date="1441108800">- Update to version 1.2.0:
  * Switched from SCons to autotools.
  * Added musl libc support [Brendan Heading].
  * Worked around "FS is larger than device" error for memory cards
    formatted by Panasonic Lumix cameras.
  * Worked around "unknown entry type 0xe1" error for memory cards
    formatted by2 Sony cameras.
- spec: change upstream url, cleanup</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1443787200">- Update to version 1.2.1:
  + Fixed compatibility with Zalman VE-200: now newly created
    directories do not have archive bit set.
  + Fixed heap corruption: malformed FS can use invalid sector or
    cluster size.
  + Fixed hang on mount: malformed FS can have cyclic references in
    the clusters.</changelog>
  <changelog author="mpluskal@suse.com" date="1449835200">- Update to 1.2.2
  * Improved reliability in case of a sudden unplug: FS will be in
  a clean state after closing all files and performing sync(1).
  * Fixed compilation on Debian GNU/kFreeBSD and GNU/Hurd
  platforms.
  * Updated mount.exfat-fuse man page.</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 1.2.3
  * Fixed clusters loss when file renaming replaces target.</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Provide symlinks to /sbin (see boo#965476)</changelog>
  <changelog author="dap.darkness@gmail.com" date="1465128000">- Update to 1.2.4:
  * Fixed wrong files names hashes.
  * Man pages are now installed by default.
  * Commas and backslashes in device names are now escaped.</changelog>
  <changelog author="asarai@suse.com" date="1503144000">- Update to 1.2.7.
  * Fixed handling of two last clusters: operations with files that occupy these clusters could fail.
  * Fixed crash when started with stdin, stdout or stderr closed.
  [1.2.6]
  * Operations with directories (except initial listing) now make less read/write system calls.
  * Fixed handling of files with optional tail entries (0xe0-0xff): videoclip files created by Sony cameras were missing.
  * Write operations now correctly return ENOSPC (instead of EIO) when there is no free disk space left.
  * Fixed max file name length: it's 255 16-bit code units (not 256).
  [1.2.5]
  * Added an option for dumpexfat to show file fragments [Daniel Drake].
  * Fixed crash when directory starts with an invalid cluster.
  * Daylight saving time in now properly reflected in file timestamps.</changelog>
  <changelog author="astieger@suse.com" date="1544443200">- fuse-exfat 1.2.8:
  * Fixed new files or directories creation in the root directory:
    ensure there are no 0x00 entries before valid ones; otherwise
    Windows can corrupt them boo#1118871</changelog>
</package>
<package pkgid="b480c81452fc55e44fc9a4cf7fb74d5046d169a8d41e2a4951d4e3cd4a3fd505" name="fvwm2" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1262001600">- Remove gnome-libs-devel, gtk-devel, gtkdoc, imlib-config,
  imlib-devel BuildRequires.
- Add xorg-x11-devel BuildRequires.
- Pass --disable-gtk to configure.
- Remove gtk subpackage: it's optional, and doesn't look that good.
- This is for fate#308601: remove gtk/gnome 1.x stack.</changelog>
  <changelog author="ro@suse.de" date="1270382400">- fix build with libpng14 (replace long deprecated functions)</changelog>
  <changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
  <changelog author="coolo@novell.com" date="1299844800">- use of %find_lang is a MUST</changelog>
  <changelog author="pgajdos@suse.com" date="1314878400">- build with --no-copy-dt-needed-entries
  * no-copy-dt-needed-entries.patch</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- remove uncommented patch</changelog>
  <changelog author="vcizek@suse.com" date="1325592000">- update to 2.6.3
  dropped libpng patch
  New features over 2.5.26:
  * Support libpng 1.4 and 1.5.0's slightly newer APIs
  * New extended variable $[w.visiblename]
  * Style matching now honours the window's visible name
  * New style InitialMapCommand allows to execute any command when
    a window is mapped first.
  * New option to PrintInfo, "bindings" which prints out all of the
    Key, PointerKey, Mouse and Stroke bindings which fvwm knows about.
  * New differentiated options for SnapAttraction when snapping
    against screen edges:
  * New option to the BugOpts command
  * New BugOpts option QtDragnDropWorkaround to work around an oddity
    in handling drag-n-drop events to Qt applications.
  * New MenuStyle "UniqueHotkeyActivatesImmediate" and its negation
    "!UniqueHotkeyActivatesImmediate" to retain the menu until the
    user presses one of the menu keybindings to enact that change in
    the case where there's only one item defined in the menu at the
    specified hotkey.
  * New Style commands
  * New Resize argument to direction
  * Couple of changes to the Move command:
  * The EWMH working area is now honoured by default.
  * To move a window ignoring the working area, the option "ewmhiwa"
    can be used, similar to how the Maximize command works.
  * New expansion placeholder $[pointer.screen] to return the screen
    number the pointer is on.</changelog>
  <changelog author="werner@suse.de" date="1328616000">- update to 2.6.4
  new features:
  - FvwmIconMan no longer allows for itself to be transient
  - New command InfoStore -- to store key/value pairs of information
    to relieve the burden of the SetEnv command.
  - Speed-up improvements for fvwm-menu-desktop when generating XDG
    menus by removing unnecessary stat(2) calls.
  - BusyCursor and CursorStyle have been set to make the cursor look
    like a dot during Read/PipeRead commands, by default.
  Bug fixes:
  - FvwmRearrange now understands the "ewmhiwa" option when placing
    windows.
  - Client gravity for subwindows is honoured for reparenting
    windows, such as with XEmbed, when changing the parent's
    geometry.
  - Conditional command processing of !Layer n
    has now been fixed.
  - Fixed handling of swallowed windows for transient FvwmButtons'.
  - fvwm-menu-desktop now looks in /usr/share/applications for KDE
    legacy mode.
  - fvwm-config no longer accepts "--is-stable", "--is-released",
    "--is-final".</changelog>
  <changelog author="werner@suse.de" date="1364644800">- Add two missing build requires: librsvg-devel and libxslt-tools</changelog>
  <changelog author="werner@suse.de" date="1374148800">- Update to 2.6.5 + snpashot 2012/10/11
  - NEWS: Added FvwmForm Separators,
    fvwm-desktop-menu fixes.
  - libs/Bindings.c (AddBinding):
  - fvwm/builtins.c (FkeysymToKeycode):
  - fvwm/events.c (__handle_key):
    Add detection of XKeycodeToKeysym as deprecated, and provide a wrapper
    for it by way of fvwm_KeycodeToKeysym() to call the newer
    XkbKeycodeToKeysum() where needed.
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Fix compilation errors.
  - fvwm/menu.c ( __scan_for_pixmap):
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Add fvwm_msg() for hints about failed image load.
  - fvwm/events.c (HandlePropertyNotify):
    Fix XSizeHints problem with FVWM not correctly allowing resizing of
    windows when the hints are toggled with respect to FVWM processing
    XA_WM_NORMAL_HINTS.
  - fvwm/placement.c ( __pl_position_get_pos_simple):
    When using "UnderMouse" for PositionPlacement, ensure we honor the EWMH
    working area by default if it's in use.
  - fvwm/fvwm.c (InstallSignals):
    Unblock signals when installing them.
    When signals are registered, ensure they're unblocked so as not to queue
    them up.
  - fvwm/infostore.c (get_metainfo_length):
  + fvwm/infostore.c (new_metainfo):
  + fvwm/infostore.c (insert_metainfo):
  + fvwm/style.c (style_parse_one_style_option):
    Make C90 compliant.
- Add patch fvwm-snapshot.patch for snpashot 2012/10/11
- Add patch fvwm-rsvg.patch to avoid internal rsvg-cairo.h included twice
- Add source bin/fvwm-menu-desktop-config.fpl as missed in 2012/10/11
- Modify patch fvwm-2.5.26-gcc-warnings.patch as fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1374667200">- Add patch fvwm-2.6.5-eventcrash.patch which should avoid that not
  set icon names will be freed  (bnc#778347)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412078400">- fvwm-no-date-time.patch Do not include __DATE__ and __TIME__
  in binaries.
- Drop usage of xorg-x11-devel. pick only the needed packages.</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Rename config file to not have underscore at begining</changelog>
  <changelog author="mvetter@suse.com" date="1457006400">- Clean up with spec-cleaner
- Remove 'system.fvwm2rc_' seems not to be used
- Fix module 'Command' see (boo#966650)</changelog>
  <changelog author="werner@suse.de" date="1470139200">- Update to 2.6.6
  * fvwm features:
  - Support for Russian from Ivan Gayevskiy.
  - EnvMatch supports infostore variables.
  - The option "forget" to the Maximize command allows to
    unmaximize a window without changing its size and position.
  - Windows shaded to a corner (NW, NE, SW, SE) are reduced to a
    small square.
  - New option "!raise" to the WarpToWindow command.
  - The new extended variables $[wa.x], $[wa.y], $[wa.width],
    $[wa.height] can be used to get the geometry of the EWMH
    working area, and $[dwa.x], $[dwa.y], $[dwa.width],
    $[dwa.height] can be used to get the geometry of the EWMH
    dynamic working area.
  - The Resize commands accept "wa" or "da" as a suffix of the
    width or height value.  If present, the value is a percentage
    of the width or height of the EWMH working area or the EWMH
    dynamic working area.
  - Fvwm is much more resilient against applications that flood the
    window manager with repeated events.
  * New module features:
  - FvwmForm supports separator lines.
  - New FvwmIconMan options:
    IconAndSelectButton
    IconAndSelectColorset
  * Bug fixes:
  - Provide a wrapper for the deprecation of XKeycodeToKeysym and
    use XkbKeycodeToKeysym() where appropriate.
  - fvwm-menu-desktop is re-written and provides better support of
    the XDG menu specification.
  - Fix fvwm-menu-desktop keyError bug.  Use "others" if no desktop
    environment found.
  - FvwmIconMan had problems displaying the hilight colour on some
    systems (64 bit issue?).
  - Globally active windows cannot take the focus if the style
    forbids programs to take focus themselves (style
    !FPFocusByProgram).
  - Windows no longer jump from one position to the other which
    could happen in some cases with SnapAttraction.  Windows now
    snap to the closest window (or screen edge).
  - Removing bindings had several strange side effects that are
    fixed now (removing too many bindings; old bindings showing up
    again after another is removed; possibly other effects).
  - Windows sometimes did not get expose events (i.e. did not
    redraw properly) if they were uncovered by moving a window
    above them.  This has been fixed.
  - FvwmConsole now causes much less network traffic.
  - Suppress bogus events sent to the modules when a window is
    resized with the mouse.
  - Properly handle the has_ref_window_moved flag for ResizeMove and
    ResizeMoveMaximize.
  - Removed some unnecessary redraws in FvwmPager.
  - The option "NoDeskLimitY" option of the GotoPage command did
    not work.
  - Negative coordinates in the "rectangle" option to the Menu
    commend did not work correctly.  This has been fixed.
  - Removes a slight graphics problem whith the ResizeMaximize
    command being invoked from a window button menu.
  - When an attempt to reparent a client window (i.e. decorate
    it) fails, fvwm no longer throws away all events but only the
    events for that window.
  - The ChangeButton command of FvwmButtons used to strip
    whitespace from the beginning and end of button titles and
    image paths.  This is no longer done.
- Remove patches now upstream
  fvwm-2.6.5-eventcrash.patch
  fvwm-rsvg.patch
  fvwm-snapshot.patch
- Add upstream patch
  fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
    Expose: don't flush accumulated events</changelog>
  <changelog author="mvetter@suse.com" date="1471521600">- boo#877539 - wrong path in system.fvwm2rc:
  * Fix wallpaper path for 'init' and 'restart' commands.
  * Require default branding wallpaper package.</changelog>
  <changelog author="werner@suse.de" date="1486468800">- Update to 2.6.7 (06-Nov-2016)
  - dropped fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
  * New fvwm features:
    A new default configuration which is available when fvwm
    doesn't detect a configuration file to load.
    A new conditional command "Desk n" can restrict matching
    windows to a specific desk.
    A new conditional command "Screen n" to restrict matching
    windows on a given Xinerama screen.
    New expansion variable "w.screen" to ascertain the Xineram
    screen number a window is on.
    New command "InfoStoreClear" to remove all items in the
    InfoStore.
  * Removed features:
    The old and unmaintained debian/ and rpm/ directories have
    been removed; use the maintainers' copies where available.
    VMS support has been removed.
    GTK1.x support has been removed.
    GNOME-specific window hints (pre-EWMH) have been removed.
    Some fvwm modules have been removed:
    FvwmDragWell (no replacement)
    FvwmGTK (no replacement)
    FvwmSave (no replacement)
    FvwmSaveDesk (no replacement)
    FvwmScroll (no replacement)
    FvwmTabs (no replacement, never worked anyway)
    FvwmTaskBar (use FvwmButtons)
    FvwmTheme (in core of fvwm as colorsets)
    FvwmWharf (use FvwmButtons)
    FvwmWinList (use WindowList command)
    FvwmWindowMenu (use WindowList command)
    FvwmIconBox (use the IconBox style instead)
  * New module features:
    FvwmButtons learned a new option "Colorset" to its
    ChangeButton command.
  * fvwm-menu-desktop updated:
    Renamed default menu to XDGMenu and changed the name
    of the FvwmForm to FvwmForm-XDGMenu-Config to not conflict
    with someone already using FvwmMenu.
    fvwm-menu-desktop will now load defaults from the
    FvwmForm-XDGMenu-Config data file.
    Improved dynamic menus by regenerating them on-the-fly.
    Added new options: --regen-cmd, --dynamic, and more.
  * Bug fixes:
    A bug introduced in 2.6.6 could cause applications with
    negative coordinates to be placed at strange positions. This
    affected for example acroread when switching to fullscreen
    mode. This has been fixed.
    FvwmButtons "Silent" option for dynamic ChangeButton commands
    no longer loops infinitely.</changelog>
  <changelog author="jengelh@inai.de" date="1486728000">- Update summary</changelog>
  <changelog author="mvetter@suse.com" date="1526644800">- boo#1080494: Add update-alternative configuration
- Run spec-cleaner</changelog>
</package>
<package pkgid="4351b36f4f6c90ae63038ce4287fe7674c22db63f315278b0c224181a8493a31" name="fwts" arch="x86_64">
  <version epoch="0" ver="18.11.00" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 16.12.0 (boo#1017763):
  * ACPICA: Update to version 20161117
  * klog.json: Add a few more kernel errors to the database
  * opal: pci_info: Add OPAL PCI Info validation
  * opal: mem_info: Add OPAL MEM Info validation
  * opal: cpu_info: Add OPAL CPU Info validation
  * securebootcert: add variable AuditMode checking
  * securebootcert: add variable DeployedMode checking
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1485604800">- Update to version 17.01.00:
  * ACPICA: Update to version 20161222
  * klog.json: Add kernel errors to the database
  * opal: pci_info: minor code style clean-ups</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 17.02.00:
  * ACPICA: Update to version 20170119
  * acpi: s3: Add new --s3-resume-hook option
  * Add README_JSON.txt for FWTS
  * klog.json: Add some more kernel messages to klog data base
  * klog.json: Add some EFI driver kernel messages to klog database
  * klog.json: Add some EFI quirk driver kernel messages to klog database
  * klog.json: Add some more EFI driver kernel messages to klog database
  * klog.json: Add some miscellaneous messages to klog database
  * Integrate PPC for FWTS-LIVE Frontend
  * fwts_framework: handle -? option differently from -h
- Rebase fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1490356800">- Update to version 17.03.00:
  * ACPICA: Update to version 20170224
  * sbbr: Add "--sbbr" flag to support running SBBR Tests.
  * acpi: iort: Add support for SMMUv3
  * lots of bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1496577600">- Update to version 17.05.00:
  * Support SMBIOS 3.1.1 tests
  * dmi: dmicheck: check new offset in spec 3.11
  * dmi: dmicheck: check reserved bits of Type 7 offset 0x5
  * dmi: dmicheck: check reserved bits of Type 7 offset 0xd
  * dmi: dmicheck: add a function to verify reserved bits
  * dmi: dmicheck: add a helper function to check word min/max value
  * dmi: dmicheck: check pci(e) slot and segment, bus and dev/func
  * dmi: dmicheck: check reserved bits of offset 0x5 in type 13
  * dmi: dmicheck: add a helper function to check a reserved offset
  * dmi: dmicheck: check reserved bits in type 15 &amp; type 17
  * dmi: dmicheck: check reserved fields in type 22, 23, 30, 32, 38 and 39
  * dmi: dmicheck: add 64-bit integer to dmi_reserved_bits_check
  * dmi: dmicheck: add checks for new type 43
  * dmi: dmicheck: check reserved bits in Type 0
  * fwts/opal: Power management DT Validation tests.
  * fwts/opal: Reserved memory DT validation tests.
  * Add snapcraft rules to build a fwts snap</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 17.06.00:
  * ACPICA: Update to version 20170531
  * olog: olog.json: Update OPAL skiboot errors to check on olog
    scan
  * bios: mtrr: print out actual default type of MTRR
  * lib: fwts_alloc: only parse mem info once we have a valid line
    read in
  * lib: fwts_safe_mem: add SIGBUS handling
  * lib: fwts_alloc: re-work the memory parsing again
  * acpi: method use correct format specifier for uint32_t type
  * bios: mtrr: fix compile error in ubuntu trusty
  * opal: fix tests dependency on libfdt
  * bios: mtrr: fix overlaped MTRR (LP: #1694710)</changelog>
  <changelog author="mpluskal@suse.com" date="1503921600">- Update to version 17.07.00 (boo#1055891):
  * acpi: bgrt: update according to acpi 6.1 errata
  * acpi: method: update _PSD and _TSD tests according to ACPI 6.1
    errata
  * acpi: rsdp: revision 1 must have length 20 according to ACPI
    6.1 errata
  * acpi: method: Add _CPC revision 3 according to ACPI 6.2
  * acpi: hest: add new type 11 introduced in ACPI 6.2
  * acpi: srat: add new type 4 according to ACPI 6.2
  * acpi: method: update _GCP according to ACPI 6.2
  * acpi: hest: add notification type 11 according to ACPI 6.2
  * acpi: fadt: update minor version to 2 for ACPI 6.2
  * acpi: hest: add checks for GHES_ASSIST flag value in ACPI 6.2
  * acpi: wsmt: add wsmt test according to ACPI 6.2
  * ACPICA: Update to version 20170629
  * acpi: tpm2: Add additional start method values
  * acpi: iort: Add PMCG support</changelog>
  <changelog author="mpluskal@suse.com" date="1506081600">- Update to version 17.08.00:
  * ACPICA: Update to version 20170728
  * New ACPI tests defined by ACPI 6.2:
    + acpi: sdei: add ACPI SDEI test (mantis 1714)
    + acpi: pcct: refactor subspace to individual functions
    + acpi: pcct: update PCCT table to ACPI 6.2 (mantis 1659 &amp;
    1755)
    + acpi: dppt: add ACPI DPPT test (mantis 1795)
    + acpi: pptt: add ACPI PPTT test
    + acpi: hmat: add ACPI HMAT test (mantis 1705)
    + acpi: method: add _LSI test according to ACPI 6.2 (mantis
    1721)
    + acpi: madt: Add support for ACPI 6.2
  * New tests for SBBR:
    + acpi: fadt: add SBBR compliance tests
    + acpi: madt: add SBBR compliance tests
    + acpi: spcr: add SBBR compliance tests
    + acpi: xsdt: add SBBR compliance tests
    + acpi: dbg2: add SBBR compliance tests
    + acpi: gtdt: add SBBR compliance tests
    + acpi: acpitables: add SBBR compliance tests
    + dmi: dmicheck: add SBBR compliance tests
    + acpi: method: add SBBR compliance tests
    + acpi: rsdp: add SBBR compliance tests
    + acpi: sbbr: sync up with new SBBR tests
  * dmicheck: fix dmi_reserved_bits_check function when size is 64
  * acpi: pmtt: fix typo from pmmt to pmtt
  * acpi: rasf: add ACPI RASF test
  * acpi: remove "Linux-ready Firmware Developer Kit" from license
    header of files not derived from the LFDK
  * opal: fix build error on Ubuntu 12.04 i386 with gcc 4.6.3
  * lib: fwts_safe_mem: remove need to copy into a buffer
  * acpi: bert: add safe memory read check on mmap'd memory
  * acpi: hpet: add safe memory read check on mmap'd memory
  * acpi: mcfg: add safe memory read check on mmap'd PCI config
    memory
  * acpi: pcc: add safe memory read check on mmap'd PCC header
  * bios: pciirq: add safe memory read check on mmap'd pci irq
    region
  * bios: pnp: add safe memory read check on mmap'd memory region
  * dmi: dmicheck: fix incorrect safe memory read check on DMI
    mmap'd region
  * uefi: csm: add safe memory read check on mmap'd interrupt and
    option ROM regions
  * fwts_safe_mem: workaround longjmp clobber warnings
  * lib: fwts_smbios: use fwts_safe_memcpy to read SMBIOS entry
  * lib: fwts_acpi_tables: re-work fwts_acpi_get_rsdp, less memory
    copies
  * lib: fwts_safe_mem: really force reads
  * lib: fwts_acpi_tables: unmap mem, fixes memory leak
  * acpi: xsdt: fix build error on 32 bit systems
  * acpica: fwts_acpica: fix linker issues on Fedora (LP: #1712572)
  * acpi: method: Fix error message.
- Refresh fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 17.09.00:
  * ACPICA: Update to version 20170831
  * dmi: dmicheck: Add BMC Interface Type definitions from IPMI
    spec
  * lib: fwts_acpi_tables: add a new function to check Reserved
    field
  * lib: fwts_acpi_tables: add a new function to check reserved
    bits
  * efi_runtime: add resetsystem runtime service
- Refresh fwts-no-compiletime.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510747200">- Update to version 17.09.02:
  * No changelog provided</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 17.11.00:
  * acpi: devices: add a new test for acpi ec device
  * acpi: devices: add a new test for ACPI AC adapter device
  * acpi: devices: add a new test for ACPI battery device
  * acpi: devices: add a new test for smart battery device
  * acpi: devices: add new tests for power and sleep button devices
  * acpi: madt: check GICD's system vector according to mantis 1819
    (ACPI 6.2a)
  * acp: nfit: add platform capability according to manit 1831
    (ACPI 6.2a)
  * lib: add new large resource data type for _CRS methods
  * acpi: sdev: add ACPI SDEV test (mantis 1632)
  * acpi: dppt: add ACPI PDTT test (mantis 1576)
  * acpi: devices: add new tests for lid device
  * acpi: devices: add new tests for ambient light sensor device
  * acpi: devices: add new tests for time and alarm device
  * acpi: devices: add new tests for wireless power calibration
    device
  * acpi: add tests for _SRT control method
  * auto-packager: mkpackage.sh: add bionic
  * fwts: add bash command-line completion
  * Add ACPI 1.0 RSDP test to make sure RSDT field isn't null
  * ACPICA: Update to version 20171110
  * uefi: uefidump: add dumping for BluetoothLE device path
  * uefi: uefidump: add dumping for DNS device path
  * uefi: uefibootpath: add test for BluetoothLE device path
  * uefi: uefibootpath: add test for DNS device path</changelog>
  <changelog author="mpluskal@suse.com" date="1516881600">- Update to version 18.01.00:
  * ACPICA: Update to version 20180105
  * acpi: LPIT: check for monotonically increasing UID
  * fwts-test: sync up with changes in lpit test
  * Treewide: update copyright year to 2018
  * fwts-test: arg-help: sync up with copyright year changes
  * acpica: fix linking issues when building non ACPI builds
  * lib: fwts-battery: use PRIu32 format specifier, fixes cppcheck
    warning
  * acpi: acpidump: move declaration to before statements, add blank
    lines
  * lib: fwts_safe_mem: don't perform void * pointer arithmetic,
    fix 32 bit end
  * lib: fwts_alloc: move 'pos' to a deeper scope, minor style
    change
  * opal: reserve_mem: remove redundant initialization of pointer p
  * opal: reserve_mem: remove unused variable 'i' and move scope of
    variable 'value'
  * sbbr: rsdp: remove redundant initialization of boolean
    'signature_pass'
  * acpi: madt: move scope of boolean 'passed'
  * acpi: pptt: move scope of index variable 'i'.
  * acpi: rasf: move scope of index variable 'i'
  * sbbr: acpitables: clean up code, move scope of some variables
  * acpi: erst: cast size to uint64_t to clean up static analysis
    warning
  * uefi: uefidump: clean up some static analysis warnings
  * securebootcert: add checking read-only for the AuditMode and
    DeployedMode
  * securebootcert: move to UNSAFE category
- Changes for version 17.12.00:
  * ACPICA: Update to version 20171215
  * Fixed Bugs
  * acpi: tpm2: update spec url
  * trival: make read only const strings static
  * dmicheck: sbbr: make some SMBIOS structs optional
  * acpi: dbg2: sbbr: allow PL011 UART as a valid subtype
  * acpi: spcr: sbbr: IOAPIC is valid interrupt type
  * acpi: sbbr: relax a few test pass conditions
  * acpi: bert: remove confusing warning
  * acpi: madt: only inspect Local APIC/x2APIC/SAPIC tables if
    enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 18.02.00:
  * ACPICA: Update to version 20180209
  * uefirtvariable: add test for
    EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS attribute
  * acpi: acpiinfo: add acpi 6 to acpiinfo test
  * acpi: method: check one element in _TSD only for acpi 6.2+
  * acpi: spcr: update interface types based on DBG2
  * acpi: method: allow _WAK to return an integer
  * mkpackage.README: change urgency level to medium
  * lib: fwts_log: remove redundant initialization of ptr1
  * acpi: wmi: remove redundant initialization of 'info'
  * lib: fwts_log: remove redundant initialization of 'field'
  * lib: fwts_pipeio: remove variable status
  * lib: fwts_acpi_tables: remove redundant initialization to
    'result'
  * README: Add dependencies per Platform
  * auto-packager: mkpackage.sh: remove zesty
  * uefirtvariable: modify both authenticated attributes setting
    test
  * acpi: fadt: Fix FACS checking
  * acpi: iort: Update revision checking</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 18.03.00:
  * ACPICA: Update to version 20180313
  * dmi: dmicheck: add chassis type for Type 3
  * klog.json: change severity for AE_ALREADY_EXISTS errors
  * olog:olog.json: Update OPAL skiboot errors to check on olog
    scan
  * uefirtauthvar: remove test with
    EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS</changelog>
  <changelog author="mpluskal@suse.com" date="1526644800">- Update to version 18.05.00:
  * fan: add cooling_device# to error messages
  * doc: adding acpitests, uefitests and sbbr options to man page
  * acpi: syntaxcheck: change it from batch to batch-experimental
  * fwts_framework: add an "ifv" option for Independent Firmware Vendor
  * dmicheck: skip checks of DMI default values for IFV
  * acpi: method: add test for _CLS control method
  * lib: create helper functions for device identification objects
  * acpi: devices: add common objects
  * fwts-frontend-text: add a recommended option for IFV (IBV)
  * fwts-frontend-text: add an option for ARM SBBR
  * auto-packager: mkpackage.sh: add cosmic
  * ACPICA: Update to version 20180427
  * ACPICA: Update to version 20180508
  * README: Add libpci-dev dependency ppc64el
  * cpufreq: Add support to read boost frequencies</changelog>
  <changelog author="mpluskal@suse.com" date="1529323200">- Update to version 18.05.01:
  * No changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Update to version 18.06.02:
  * ACPICA: Update to version 20180531
  * acpi: fadt: allow first reserved field to be 1
  * update_version.sh: also update version in snapcraft.yaml
  * snapcraft.yaml: add in missing stage packages
  * lib: fwts_set: fix API for fwts_set, add fwts_set_int
  * lib: add small helpers top get/set /sys/power/pm_debug_messages
  * acpi: s3: force enable /sys/power/pm_debug_messages
  * acpi: s4: also check for file based swap files
  * acpi: s4: force enable /sys/power/pm_debug_messages
  * acpi: s3power: force enable /sys/power/pm_debug_messages
  * acpi: hpet: fix getting invalid vendor ID and clock period
  * acpica: fix linking issues when building non ACPI builds
  * fwts_uefi: Fixing tiny typos in the uefi driver
  * mtrr: fix incorrect type detection</changelog>
  <changelog author="mpluskal@suse.com" date="1531224000">- Don't build with -Werror (fixes build with gcc8)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535716800">- Update to version 18.08.00:
  * ACPICA: Update to version 20180810
  * uefi: uefivarinfo: add to UNSAFE category
  * acpi: gtdt: add checking the valid base physical address
  * dmicheck: update Processor Upgrade field in Type 4
  * dmicheck: update connection and port types in Type 8
  * dmicheck: update Usage and Characteristics 2 fields in Type 9
  * dmicheck: update memory type and add nvdimm fields for Type 17
  * coreboot/clog/clog.c: add clog test
- Refresh patch fwts-no-compiletime.patch
- Fix typo in changelog</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1542283200">- Update to version 18.11.00 (boo#1116172):
  * dmicheck: checks (Extended) Maximum Capacity for type 16
  * snapcraft: add libbsd-dev to build-packages
  * efi_runtime: re-enable the resetsystem runtime interface
  * olog:olog.json: Update OPAL skiboot errors to check on olog scan
  * acpi: button: check fixed hardware &amp; control method power buttons
  * kernelscan: add -k option to specify klog json filename
  * src/lib: add module probing helper functions
  * lib: fwts_efi_module: use the new module loading helper functions
  * lib/fwts_cpu: use new use the new module loading helper functions</changelog>
</package>
<package pkgid="24122bb591362525d8852658978cce7e48adabfd30337e0f332c1a1a006abd23" name="fwupdate" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="a6932071046d1eabc86ac7bfc4b9e571d7d04bd5d008b3fb3552b93c60071f8f" name="fwupdate-devel" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="6cb3daf9aca140688cad48fdcce0f0d844176623add66d292c4bfe70c97ab87c" name="fwupdate-efi" arch="x86_64">
  <version epoch="0" ver="9+git21.gcd8f7d7" rel="lp150.5.3.1"/>
  <changelog author="glin@suse.com" date="1456920000">- initial import 0.5 (FATE#319345)
- Add fwupdate-suse-build.patch to change the destination of the
  EFI files and remove the po files</changelog>
  <changelog author="glin@suse.com" date="1459166400">- Add the missing Group</changelog>
  <changelog author="coolo@suse.com" date="1462536000">- own bash-completion directory as no longer provided by
  util-linux (boo#977259)</changelog>
  <changelog author="jengelh@inai.de" date="1462708800">- Drop unnecessary specfile elements.
  fwupdate seems not required for libfwup, remove the requirement.
- Correct requires of fwupdate-devel
- Use source URLs</changelog>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="glin@suse.com" date="1540814400">- Add fwupdate-bsc1113008-dont-add-headers-to-fmp-capsules.patch
  to avoid adding headers to FMP capsules (bsc#1113008)
- Add fwupdate-skip-fwupdate-verbose.patch to keep the debug
  variable
- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
</package>
<package pkgid="8d7837a1ec340aa57dcd801225bc863e54122f0f1c677e8958b5008e90ab3a84" name="g3utils" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="5012dc77467e75f8fc7d1a20ac8b14346587faf7d87e691e7f45b01d76bff2ba" name="gajim" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="0c8778c96020e7df6a10abbd6bd61d59550d4a77f5802b9cf1881c4241240eca" name="gajim" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.6.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1537790400">- Add some missing dependencies (boo#1109355).</changelog>
</package>
<package pkgid="d64d77d67a6e28904f93fb849620d4cff4334ed7b989082473b235984807d869" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="f4a6f086f1c5e04c65b9b2ae9703d56bc20d93e2614aa21debe561e582edf90f" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.6.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1537790400">- Add some missing dependencies (boo#1109355).</changelog>
</package>
<package pkgid="0e54d457c09225d645ff5b5e7cb6c4e210eb034fe3021cea1ad747d95563d3e3" name="gcc-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="df04156c63699f4b513721f2a706aebac016689fefa5b8fb4618396c03de8f2a" name="gcc" arch="src">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="f86bb5f9cf62aa3254f18e93959dcfd1b0dddc849b596d23913502c90a057687" name="gcc" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="7d6b58990e3840d1bc529b1bb5f180e90d75e573d7f747cb85d348ed841a2427" name="gcc-PIE" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="c1bc6eb799764d72f169a0cbef8fd5f9762cfbcee9d4f7665d1fcf9a228a15fd" name="gcc-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="4302bbb8edd2a72bca1379cd8741cc4bc3293f792e3a04117e4823f2319cf136" name="gcc-ada" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="573e054163eede57bedf1b18626c3b78ad896563ac855f0cdffdccf8ad19acdc" name="gcc-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="dfeede264b9326a01de3688a767088342730cc892e48fe1986b7b274ec5c07be" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="056e9b06d9bdb6880ce802b408956c795cfd759179f7c4d3bd3d3e6fa4bbae9d" name="gcc-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="9e2573d8417bb1975da92a386b741fca78a74b2a1c1e2ccaab61cba288eaeefb" name="gcc-fortran" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="cdee022ba71b173307112b81e493466bd6caaa3f84145bb416f09fd05c37a34f" name="gcc-go-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="5130180f2a0ff4873f197850a56aa259d0c6004445e754676270da573cee70fc" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="e459a3f8d72c5b1c78af001bff0991b92e04cf0d8636e4b6dd6bbe3249268a8c" name="gcc-info" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="1f95987bbb4b819b3137f116299a739343900501c73954a9a1650af3d9e57066" name="gcc-locale" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="f50383ca66786a6228d4ead720d3e58406034c61fbf23a9b8a00111862e5989c" name="gcc-obj-c++" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="4bfbec58ef8c4fa54218cd9780117c5ad448e0e2aa0dd0dfb420e7af59e85d18" name="gcc-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="22bd1681d44a54f4c619cb006e459065acf64834bb1cc4ecdb7f5c47ee31321c" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.2.3.1"/>
  <changelog author="rguenther@suse.com" date="1407153600">- Add libstdc++-devel-32bit and libstdc++-devel-64bit packages.
  [bnc#890226]</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
</package>
<package pkgid="47a458d086badf83d06b4e7eb08d16eca50cd68713cfc058ccafc88b385c5f1c" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="b703f8c9785f530ee34b1586ec058fa9f8a4212addb974a6580c77cd6eb719cd" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="8c38a33edfb7a22373f7c0f6fb332cd94f961b5b4d9cd1c2c9d7484156e1c4d8" name="gcc7-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="8d92817369e2c1ad8b1301923e14146d6b301e7c3f0bc541dc556f5af3268897" name="gcc7" arch="src">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="46fd1673ac2a0ed323d792723b1a48e11bb9a760fc1b4275f8ef24deaac3dd0a" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="8c0d7722f4fb732610cf7c50328c62e1adb0aef5f6fe324174c02904b43cb54a" name="gcc7" arch="src">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="dde1d63471dcacfea284b96b304029fa642b3828f1c21eb54a1d5b7b716b69e0" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="1d1c889de8bac68916730025e015e8daf37a44dc48a4b00e35f277a1d864665c" name="gcc7" arch="src">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="2416228092325fc46d9a37cb1c8f634c0ca6ed4ada687e132d11163b3c66b969" name="gcc7" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="06887befa0ffa63d69cf9c2956bb2d33b6cc721a71519d34f5520a0e09575375" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="729d8d4ba56b1f64786ae36175db1af4aa5e569b461bd48a707dacbf69839245" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="168b9d4f6fc8ab32034937b5172e80c295b9015d5da3e5a6a880be43ea4943ef" name="gcc7-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="3b7c363b4b27ddb0b9770e985ded1899e3ba1ef5983e07cf4b58cc2dfc18186e" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="f82eb57695d675627a2dcc470f3eac883635fad93b35e49455efa7663ce8b9fe" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="e15909d7b4aa7fdd48883be2c914bfa91715f6df8b93588cc8ea2320e8786310" name="gcc7-ada" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="e3c0f7f677178625ff6db1baa4a1beab020939822dbfbb5856780aca6f7a6fc7" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="f945c4799281c17786142904f4f0e33e216d666ebedb5224e5231f1fd0c6426c" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="022e83dc97d8fa5ccfe07d167e01a38567ab9ccd39a9b3883af400fb02cab69d" name="gcc7-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="f575ab247b64b36c1ec05ffeb43d33a92a927e701d81a5e3aa17e9372931be31" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="3d507243d136e836556f94f3fcef8f9dbba8cf19fa322fd4c5282fb4cbd20497" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="1e24c75d40f5a4b8126639c588ce0276b3918ee4e9ce06098bc6e022ec0c5bc3" name="gcc7-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="69a61fa2c5a0496ded4ac967d55dbcfd8ee1e435c9fdae1000a0f33f19d0302e" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="d8f486c7a0f389f9361582f11f022ff31e8ae1717b62bb9ba17266f5489bb162" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="c5e3a65c5b7987862cc473c8b11586ec0dc6261f90c5622b0b7c7f5a4b56c9ab" name="gcc7-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="39fa3b1e3b1ab9be20590215d20a1316a82bb5b1600087e743cdbdfe75043368" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="89c431e373b794cf40a9e4bfa9179e2e20e323ef4dc8bfce2f99cfb0a0da6396" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="dada3fa18b6dca4dd2c6d6b1897c0ecedee6a4df5b00c4596654f845008fccaf" name="gcc7-fortran" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="44b945096666fbe28af1dd32db83a71278622f4d650cee8c92c067856f1be4ef" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="65a3e915bd742adb7600165f97d42fcf4e8d3bcc5a836d744f7a5a0af8d4aa7e" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="dacbfbcf4b8c2fafa5fcf3eabcab651af184a0e518f8f05de79dc3b2528217c3" name="gcc7-go-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="4ad25747d7c4df9f4157cc0226c457ca8c1959e5dcb730c09d758d6e238c6d68" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="49dacbcece7aefa0adc4ccacc8747d653f08cdf3d1439463cbef07378bda6f61" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="436154596f9411366ce479f2b8d470b781caac35552c85882a30ed1bf6fd960c" name="gcc7-go" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="be8a552353ac5d5991a4ceb704d849d634c7fef5b8ee3930bdad40ab35c6e5c0" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="9664ca601cef4d3bfa54313ac3744889f7951924c3234136013544d431e555e9" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="5df6fa8ae83a429960b3e1624d26ae5f8fc161bebcc43d378f62e4e72dda4a63" name="gcc7-info" arch="noarch">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="ca9129d1ed804bfc7906e149eb529e064925ec0245756c456b750080e1c67f30" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="57a1f98ff9a5042f671389676fc721da2fd1ac931a24ad946cb0adeeca2bae78" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="300a6028a87c08fc593ac3381d34f9de413977e915a21f9d6333d6b344abb037" name="gcc7-locale" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="3bf9722a72478470a3c0841b7daf25112de04b2ae6bef5481ea0e002227ff073" name="gcc7-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="29d871affed86b6be28a56cf241ca37d4ee74e2e9899be8b18fc7b386d0f53d0" name="gcc7-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="94dbac8424276b6fe2f377c624410cc7a586df219b1399089b9259585b1eebff" name="gcc7-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="a4cd5d2756cea93edd6b575e3ebf622c05217f2cbec745396225843dc6ebeb2a" name="gcc7-obj-c++" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="081e646851b3c36bbac04049b2fcffe724c47b2ac2e8fc00397099271f82bc25" name="gcc7-obj-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="306fc59d37ba6089c2c652788999b75889bc762cbf402bc0cde590d9699e5ea7" name="gcc7-obj-c++" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="c4d4429f01c4c36ef62986d402fbc85426a6f67650abb0570a7e82141e46e7be" name="gcc7-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="6c211ff3a185cfe1f5350700539775501870ce6732bc87f940866d9ac2bbb633" name="gcc7-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="0719ee20cce0496fdd5211419662df7fbf539ba0db5af51cd8e2ab4e8f968191" name="gcc7-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="c9f8a065f6eb0c45f7f7ee73e3bc5a0bc15c0943ba976781884a258eebfe24c4" name="gcc7-objc" arch="x86_64">
  <version epoch="0" ver="7.4.0+r266845" rel="lp150.5.3"/>
  <changelog author="rguenther@suse.com" date="1515585600">- Do not install target parts of cross compilers into the sysroot
  but instead fixup manually (once required).</changelog>
  <changelog author="rguenther@suse.com" date="1516017600">- Handle new debug sources filelist variant debugsourcefiles.list.
- Prune libstdc++ includes for crosses.</changelog>
  <changelog author="rguenther@suse.com" date="1516104000">- Update to gcc-7-branch head (r256737)
  * Includes gcc7-pr81481.diff
  * Adds backport of retpoline support via -mindirect-branch=,
  - mfunction-return= and friends.  [bnc#1074621]</changelog>
  <changelog author="rguenther@suse.com" date="1516190400">- Update to GCC 7.3.0 RC1 (r256792).</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Move misplaced %endif</changelog>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
</package>
<package pkgid="0bb397da2768651b71bb4669c1fa38b60516facb958f4dbca714edd269a6344a" name="gcc7-objc" arch="x86_64">
  <version epoch="0" ver="7.4.1+r270528" rel="lp150.9.2"/>
  <changelog author="rguenther@suse.com" date="1516881600">- Update to GCC 7.3 release.</changelog>
  <changelog author="rguenther@suse.com" date="1517486400">- Use %{?_smp_mflags} everywhere.
- Update _constraints to bump physicalmemory and general simplification.</changelog>
  <changelog author="rguenther@suse.com" date="1519646400">- Update to gcc-7-branch head (r257981).
- Add conflicts to non-bootstrap variant for cross packages to silence
  repo-checker.
- Amend gcc48-remove-mpfr-2.4.0-requirement.patch to fix build on SLE11.</changelog>
  <changelog author="mliska@suse.cz" date="1519732800">- Update to gcc-7-branch head (r258025).
  * includes fix for chromium build failure.  [bnc#1083290]</changelog>
  <changelog author="rguenther@suse.com" date="1519905600">- Fix nvptx offload target compiler install so GCC can pick up
  required files.  Split out the newlib part into cross-nvptx-newlib7-devel
  and avoid conflicts with GCC 8 variant via Provides/Conflicts
  of cross-nvptx-newlib-devel.</changelog>
  <changelog author="rguenther@suse.com" date="1520424000">- Update to gcc-7-branch head (r258313).
  * includes spectre V2 mitigation patch for s390x.  [bnc#1083946]</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to gcc-7-branch head (r258812).
  * Picks fix to no longer enable -mpc-relative-literal-loads by default
    with --enable-fix-cortex-a53-843419.
- Enable --enable-fix-cortex-a53-843419 on aarch64.  [bnc#1084812]
  [bnc#1087930]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
</package>
<package pkgid="835866d4f642fd5f24008ff6c5f114393d2b336fb2c2fc5d63aa134339e411da" name="gcc7-objc" arch="x86_64">
  <version epoch="0" ver="7.4.1+r275405" rel="lp150.12.1"/>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update gcc7-bnc1087550.diff with fix from upstream that supports
  both ABIs for ios_base::failure.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update gcc7-bnc1087550.diff with latest changes.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1528372800">- Update to gcc-7-branch head (r261272).
  * Fixes support for 32bit ASAN with glibc 2.27+
  * Includes gcc7-bnc1087550.diff</changelog>
  <changelog author="rguenther@suse.com" date="1530273600">- Update to gcc-7-branch head (r262243).
  * Pulls fix for libcpp lexing bug on ppc64le manifesting during
    build with gcc8.  [bnc#1099119]
  * Pulls fix for forcing compile-time tuning even when building
    with -march=z13 on s390x.  [bnc#1099192]</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-7-branch head (r263609).
  * Includes fix for build with ISL 0.20.
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]</changelog>
  <changelog author="rguenther@suse.com" date="1544097600">- Update to GCC 7.4 release.
- Fix AVR configuration to not use __cxa_atexit or libstdc++ headers.
  Point to /usr/avr/sys-root/include as system header include directory.</changelog>
  <changelog author="rguenther@suse.com" date="1546862400">- Update gcc44-rename-info-files.patch to adjust gnat manual
  entries in the info directory.  [bnc#1114592]</changelog>
  <changelog author="rguenther@suse.com" date="1549627200">- Update to gcc-7-branch head (r268660).
  * Pulls fix for s390x FP load-and-test issue.  [bnc#1124644]
- Improve build reproducability by disabling address-space randomization
  during build.</changelog>
  <changelog author="rguenther@suse.com" date="1552564800">- Update to gcc-7-branch head (r269676).
  * Pulls fix for aarch64 FMA steering pass use-after-free.  [bsc#1128794]
  * Fixes ICE compiling tensorflow.  [bsc#1129389]
- Change URLs to use https.</changelog>
  <changelog author="rguenther@suse.com" date="1553774400">- Add gcc8-pr89752.patch to fix ICE compiling tensorflow on aarch64.
  [bsc#1129389]</changelog>
  <changelog author="rguenther@suse.com" date="1556107200">- Update to gcc-7-branch head (r270528).
  * Disables switch jump-tables when retpolines are used.
  [bsc#1131264, jsc#SLE-6738]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558526400">- Strip -flto from $optflags.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1560340800">- Add gcc7-flive-patching.patch patch.  [bsc#1071995, fate#323487]</changelog>
  <changelog author="rguenther@suse.com" date="1563451200">- Update to gcc-7-branch head (r273559).
  * Includes fix for vector shift miscompilation on s390.  [bsc#1141897]</changelog>
  <changelog author="rguenther@suse.com" date="1563796800">- Update to gcc-7-branch head (r273666).
  * Fixes build with -Werror=return-type.</changelog>
  <changelog author="rguenther@suse.com" date="1564056000">- Update to gcc-7-branch head (r273795).
  * Includes fix for LTO linker plugin heap overflow.
    (bsc#1142649, CVE-2019-14250)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565956800">- Remove bogus fixed include bits/statx.h from glibc 2.30.  [gcc#91085]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567684800">- Update to gcc-7-branch head (r275405).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)
  * Includes gcc8-pr89752.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
</package>
<package pkgid="f43f409bb2a50f8842d83bf6e735708a43c67615c539a72378d52a37523fc616" name="gcc8-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="0974471b78b5dca44e9b2f32bf762029081a38071f26f3171aef0e8d16bd2583" name="gcc8" arch="src">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="143e01cdda3102e7b86ba5bb1f2411fecb0e29c450f9404c2c2d05d9b4afacf8" name="gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="1170cfc4c4a1488fb131eae809a354ed418f16056b1711efb641c8f180bfaa3a" name="gcc8-ada-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="e8d6ad63ff5508181593bd6207b105a946ed7ee05086be9ab5638c197cc35451" name="gcc8-ada" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="1ebaebda877738386e65c0dad837e2f4fabd1b1b6f8fac5e35f36409776c4b25" name="gcc8-c++-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="e483b8b41f274875344c1a1a8ac5c0ed1a9f85307808bd45bd0926cd30dcf479" name="gcc8-c++" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="5491c21f738a718bab8dd97ba39c0cd2911ebf2a41b62010ac2a8e467dd867ce" name="gcc8-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="5c16123e8ff1e6756fcee5fda15da4523d907a950f44b08716e1ac9ba109a54f" name="gcc8-fortran" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="64f28d5d62e2725ad087bc312df5f6817012552403305fc3804f67ba0b24c139" name="gcc8-go-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="8b79aacefcff58fafb7581efdd3303f2b2d2e9bd0ce2e164775effc55357c17b" name="gcc8-go" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="e61d9d369742b1239e62c13b2d924dc9663920e6e6b268fdcf4e6bd213e37271" name="gcc8-info" arch="noarch">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="f77fc1584e89f82497cd119c13450e8fcfac897b076ae2e28e9c29661b75bb45" name="gcc8-locale" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="lp150.3.3"/>
  <changelog author="schwab@suse.de" date="1520251200">- Add riscv64 cross compiler</changelog>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
</package>
<package pkgid="40a87ab53daf114d933e3721bdbcdd8158e84bf0b82c6e450e8421bd2b78f51c" name="gcompris-qt" arch="src">
  <version epoch="0" ver="0.91" rel="lp150.5.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
   Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="569efe7f1a98b2ea2142f0f626722936ae9a4e758227ddc308c325d086985595" name="gcompris-qt" arch="x86_64">
  <version epoch="0" ver="0.91" rel="lp150.5.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
   Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="48db84efeff538836dacdc5aae40154693ef361af9a281978db092cf29f512f1" name="gcompris-qt-activities" arch="noarch">
  <version epoch="0" ver="0.91" rel="lp150.5.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
   Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="78d04d0db4e61ebcee8e48d6c54b42fd0a957dea352f10488113bfd48d96ff60" name="gcompris-qt-lang" arch="noarch">
  <version epoch="0" ver="0.91" rel="lp150.5.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
   Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="605321c556602da4227f5eca4f02d86ca11d081e3147e8cbf4f7128bebdc4d61" name="gcompris-qt-voices" arch="noarch">
  <version epoch="0" ver="0~20180517" rel="lp150.5.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="a3d21f0cbc1ae7bdaeb99374d70b4ba96597be823507fab9a8fc51d91497d08a" name="gcompris-qt-voices" arch="src">
  <version epoch="0" ver="0~20180517" rel="lp150.5.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="82409267708a9cedf1adce6c21348468973f0f1f3e6f54b3421af273c9c651d3" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.11.1"/>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="0c4f9227e4c92b52b461891a9af2aa699bc812e8fdf41eb65f6c5a56418ea12d" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.11.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="2a66460ed65077e760b9f5d0299ca7584abc48061c16bfbc7b6ab33d69162e76" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="40fe8b88e583d49c925f94e8d52b217d3456ea3fcf346eea6a46ea4bd9e5782f" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="1f0f78e0de495270447e6f3efad5bba23fedb31680f737858cec3c2fd98f156c" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.8.1"/>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
</package>
<package pkgid="503ab8b451713974ae4024538072b3ac8c6639250fdbd33ef1e57da2daa03d83" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.8.1"/>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
</package>
<package pkgid="727f478dcded09059f017ea5659475f83a1b04f01b3f6f6c67568d81fe3e2ec4" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.11.1"/>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- change order while installing splitted library [bsc#1136574]</changelog>
</package>
<package pkgid="9fca6063b307ec34d1124ae7d454884e4bacbd209ba64bc9c74607be9e051572" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="56cbc43f2ec90b1fad1175aca2e35b99aa3de4c44e2503d94298c4403d3b9e61" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.8.1"/>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1548936000">- security update
  * CVE-2019-6978 [bsc#1123522]
    + gd-CVE-2019-6978.patch
  * CVE-2019-6977 [bsc#1123361]
    + gd-CVE-2019-6977.patch</changelog>
</package>
<package pkgid="5425b409635757581cfec0e3360ee7d9f7eca6abb14ea8fef349d36355c89059" name="gdb" arch="src">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="087f3aed86981d87f595c6b647ffb1c3dcdf2562a24c6d03f40d1c556ba2dc44" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="83f357e66622fcc45ab873f97d1f4b3268daa333dd3d833c918478cdfc28c2a8" name="gdb" arch="src">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="1a7e16f7063bdf7c695473060c91e61c5e500212211ade27cd2a8decd3012744" name="gdb" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="8461b3eed63a7ba5c3b60f1bf36cdfe71e30512ca2920ab44abdfc6cdaa4698c" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="e92904b3f664c53b7e44b90a720106487575fbcaba9953a83f885affb64bf47d" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="a6e26dbf6b2ed1a1664cbde4f6005113b6e3ad25984fb34c0adc335f42f73bd0" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.3.1"/>
  <changelog author="matz@suse.com" date="1470657600">- Amend gdb-glibc-vdso-workaround.patch to ignore further
  vdso filenames on ppc64 and s390x.  [bnc#944105]</changelog>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
</package>
<package pkgid="eecb24a1b51c926f27db937d07095f31982219a957ae235572c2a147853b611b" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="8.2" rel="lp150.2.6.1"/>
  <changelog author="matz@suse.com" date="1472126400">- Add gdb-fix-bnc-994537.diff for ppc64le, fixing
  two testcases.  [bnc#994537]
- Add gdb-libiberty-demangler-fuzz.diff for fixing infinite
  recursion in demangler.  [bnc#987637]</changelog>
  <changelog author="schwab@suse.de" date="1479729600">- BuildRequire glibc-devel-static for 12.1 or later, and
  glibc-devel-static-32bit if biarch</changelog>
  <changelog author="schwab@suse.de" date="1480766400">- Enable ada testing on aarch64 for tumbleweed</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- Make dependency of gcc-java conditional.</changelog>
  <changelog author="matz@suse.com" date="1483963200">- Disable 32bit testing on openSUSE s390x.</changelog>
  <changelog author="matz@suse.com" date="1487160000">- Update to gdb 7.12.1
  * negative repeat count for x examines backwards
  * fortran: support structs/arrays with dynamically types fields
  * support MPX bound checking
  * support for the Rust language
  * 'catch syscall' now can catch groups of related syscalls
  * New (sub)commands:
  - skip {-file,-gfile,-function,-rfunction}: generic skip
    mechanism
  - maint {selftest,info line-table}
  - new-ui: create new user interface for GUI clients
  * (fast) tracepoints on s390x and ppc64le added to gdbserver
  * New target Andes NDS32
- Add rpmlint exception for historic libinproctrace place
- Remove obsolete patches:
  gdb-aarch64-v81-hwbreakpoints.diff
  gdb-bare-DW_TAG_lexical_block-1of2.patch
  gdb-bare-DW_TAG_lexical_block-2of2.patch
  gdb-fortran-stride-intel-1of6.patch
  gdb-fortran-stride-intel-2of6.patch
  gdb-fortran-stride-intel-3of6.patch
  gdb-fortran-stride-intel-4of6.patch
  gdb-fortran-stride-intel-5of6.patch
  gdb-fortran-stride-intel-6of6-nokfail.patch
  gdb-fortran-stride-intel-6of6.patch
  gdb-testsuite-dw2-undefined-ret-addr.patch
  gdb-vla-intel-04of23-fix.patch
  gdb-vla-intel-logical-not.patch
  gdb-vla-intel.patch
- Add patches from Fedora package:
  gdb-6.7-testsuite-stable-results.patch
  gdb-add-index-chmod.patch
  gdb-bison-old.patch
  gdb-container-rh-pkg.patch
  gdb-libexec-add-index.patch
  gdb-linux_perf-bundle.patch
  gdb-physname-pr11734-test.patch
  gdb-physname-pr12273-test.patch
  gdb-rhbz1007614-memleak-infpy_read_memory-test.patch
  gdb-rhbz1084404-ppc64-s390x-wrong-prologue-skip-O2-g-3of3.patch
  gdb-rhbz1149205-catch-syscall-after-fork-test.patch
  gdb-rhbz1156192-recursive-dlopen-test.patch
  gdb-rhbz1186476-internal-error-unqualified-name-re-set-test.patch
  gdb-rhbz1350436-type-printers-error.patch
  gdb-test-ivy-bridge.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-testsuite-morestack-gold.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch
  gdb-vla-intel-fortran-strides.patch
  gdb-vla-intel-fortran-vla-strings.patch
  gdb-vla-intel-tests.patch</changelog>
  <changelog author="rguenther@suse.com" date="1491220800">- Fix rpm condition to allow build on SLE10.
- Do not require glibc-devel-static-32bit on SLE12 which is not available
  there.</changelog>
  <changelog author="matz@suse.com" date="1493294400">- Rebase to gdb 7.99.90 (prerelease of gdb 8) [fate #319573]
- Updated libstdc++ pretty printers to
  gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2.
- Added patches from fedora:
  gdb-release-werror.patch
  gdb-rhbz1398387-tab-crash-test.patch
- Removed obsoleted patches:
  gdb-6.7-bz426600-DW_TAG_interface_type-test.patch
  gdb-bison-old.patch
  gdb-testsuite-casts.patch
  gdb-testsuite-m-static.patch
  gdb-upstream.patch
  gdb-testsuite-morestack-gold.patch
  gdb-fix-bnc-994537.diff
  gdb-libiberty-demangler-fuzz.diff</changelog>
  <changelog author="matz@suse.com" date="1496750400">- Rebase to gdb 8.0 release: [fate #319573]
  * support for DWARF5 (except its .debug_names)
  * support C++11 rvalue references
  * support PKU register (memory protection keys on future Intel CPUs)
  * python scripting:
  - start, stop and access running btrace
  - rvalue references in gdb.Type
  * record/replay x86_64 rdrand and rdseed
  * removed support for GCJ compiled java programs
  * user commands accept more than 10 arguments
  * "eval" expands user-defined command arguments
  * new options:
    set/show disassembler-options (on arm, ppc s390)
- Removed obsoleted patches:
  gdb-release-werror.patch</changelog>
  <changelog author="matz@suse.com" date="1505304000">- Disable guile extensions for new distros, the gdb support
  is incompatible with guile 2.2.</changelog>
  <changelog author="matz@suse.com" date="1506945600">- Rebase to 8.0.1 release (fixing PR21886, PR22046)
- Updated libstdc++ pretty printers to
- Replace gdb-libstdc++-v3-python-6.3.1-20170212.tar.bz2 with
  gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2 .
- Add patches for s390x z14 feates [fate #321514, fate #322272]
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Adjust some patches:
  gdb-ppc-power7-test.patch
  gdb-rhbz795424-bitpos-20of25.patch
  gdb-rhbz795424-bitpos-21of25.patch
  gdb-vla-intel-fortran-vla-strings.patch
- Add some patches from Fedora:
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1507118400">- Link gdb against a bundled libipt (processor trace
  library) on x86_64 and i686 for improved tracing support
  on Intel CPUs.  [bnc#985550]
  Adds v1.6.1.tar.gz and patches
  v1.5-libipt-static.patch and v1.6.1-implicit-fallthrough.patch.</changelog>
  <changelog author="matz@suse.com" date="1507550400">- Remove %clean section.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- switch to Python 3 for Tumbleweed 1320 and up</changelog>
  <changelog author="schwab@suse.de" date="1510747200">- Support --without=testsuite and disable testsuite for qemu-linux-user
  builds</changelog>
  <changelog author="matz@suse.com" date="1520596800">- Rebase to 8.1 release:
  * ptype/o prints offsets and sizes of members (like pahole)
  * tab-completion improved: quoting function names is not generally
    necessary anymore, completion offers for breakpoint don't include
    data symbol
  * enable/disable breakpoints now accept ranges: 'disable 1.3-5'
  * new commands:
  - set/show cwd: working directory of debuggee
  - set/show compile-gcc: program to use for 'compile' command
  - starti: start program and stop at first instruction
  - TUI single-key commands: 'i' for stepi and 'o' for nexti
  * --readnever option disables any reading of debug info (for dumping)
  * s390: guarded storage register access for z14
  * gcore option -a dumps all memory mapping
  * C++ breakpoints: 'b foo' will now set a breakpoint on all functions
    and methods named 'foo' no matter the scope.  Use -qualified if you
    don't want that
  * python scripting: new events gdb.new_inferior, gdb.inferior_deleted
    and gdb.new_thread; new command rbreak (breakpoint accepting regexps)
  * gdbserver can be passed environment parameters to remote debuggee
- Added patches from Fedora:
  gdb-ppc64-stwux-tautological-compare.patch
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch
  gdb-vla-intel-fix-print-char-array.patch
- Removed unused gdb-libstdc++-v3-python-7.1.1-20170526.tar.bz2
- Removed obsolete upstream patches:
  gdb-s390x-1b63490.patch
  gdb-s390x-289e23a.patch
  gdb-s390x-8fe09d7.patch
  gdb-s390x-96235dc.patch
  gdb-s390x-ad33963.patch
- Removed obsolete Fedora patches:
  gdb-6.3-rh-dummykfail-20041202.patch
  gdb-6.6-threads-static-test.patch
  gdb-add-index-chmod.patch
  gdb-glibc-vdso-workaround.patch
  gdb-rhbz1420304-s390x-01of35.patch
  gdb-rhbz1420304-s390x-02of35.patch
  gdb-rhbz1420304-s390x-03of35.patch
  gdb-rhbz1420304-s390x-04of35.patch
  gdb-rhbz1420304-s390x-05of35.patch
  gdb-rhbz1420304-s390x-06of35.patch
  gdb-rhbz1420304-s390x-07of35.patch
  gdb-rhbz1420304-s390x-08of35.patch
  gdb-rhbz1420304-s390x-09of35.patch
  gdb-rhbz1420304-s390x-10of35.patch
  gdb-rhbz1420304-s390x-11of35.patch
  gdb-rhbz1420304-s390x-12of35.patch
  gdb-rhbz1420304-s390x-13of35.patch
  gdb-rhbz1420304-s390x-14of35.patch
  gdb-rhbz1420304-s390x-15of35.patch
  gdb-rhbz1420304-s390x-16of35.patch
  gdb-rhbz1420304-s390x-17of35.patch
  gdb-rhbz1420304-s390x-18of35.patch
  gdb-rhbz1420304-s390x-19of35.patch
  gdb-rhbz1420304-s390x-20of35.patch
  gdb-rhbz1420304-s390x-21of35.patch
  gdb-rhbz1420304-s390x-22of35.patch
  gdb-rhbz1420304-s390x-23of35.patch
  gdb-rhbz1420304-s390x-24of35.patch
  gdb-rhbz1420304-s390x-25of35.patch
  gdb-rhbz1420304-s390x-26of35.patch
  gdb-rhbz1420304-s390x-27of35.patch
  gdb-rhbz1420304-s390x-28of35.patch
  gdb-rhbz1420304-s390x-29of35.patch
  gdb-rhbz1420304-s390x-30of35.patch
  gdb-rhbz1420304-s390x-31of35.patch
  gdb-rhbz1420304-s390x-32of35.patch
  gdb-rhbz1420304-s390x-33of35.patch
  gdb-rhbz1420304-s390x-34of35.patch
  gdb-rhbz1420304-s390x-35of35.patch
  gdb-tls-1of2.patch
  gdb-tls-2of2.patch
  gdb-upstream.patch</changelog>
  <changelog author="matz@suse.com" date="1522152000">- Add some -Wno-error flags for gcc-8 compatibility.</changelog>
  <changelog author="tchvatal@suse.com" date="1533902400">- Apply patch from fedora to build with python3.7:
  * gdb-fix-python37-breakage.patch</changelog>
  <changelog author="matz@suse.com" date="1536667200">- Rebase to 8.2 release (as in fedora 29 @ c720d998):
  * 'symbol-file' and 'add-symbol-file' accept -o to add relative
    offset to all sections
  * pager accepts 'c' response to disable it for rest of command
  * accept _Alignof and alignof in C resp. C++ expressions
  * new target riscv*-*-elf
  * python API extensions: gdb.Type.align, gdb.execute deals
    with multi-line gdb commands, gdb.convenience_variable and
    gdb.set_convenience_variable to access convenience variables,
  * aarch64: properly support hardware watchpoints on unaligned
    addresses (needs kernel &gt;= 4.10)
- Add gdb-fix-s390-build.diff for a Wformat error on s390.
- Support access to new POWER8 registers [fate#325178, fate#326120]
  Add patches gdb-rhbz1187581-power8-regs-1of7.patch,
  gdb-rhbz1187581-power8-regs-2of7.patch,
  gdb-rhbz1187581-power8-regs-3of7.patch,
  gdb-rhbz1187581-power8-regs-4of7.patch,
  gdb-rhbz1187581-power8-regs-5of7.patch,
  gdb-rhbz1187581-power8-regs-6of7.patch,
  gdb-rhbz1187581-power8-regs-7of7.patch .
- Support ipv6 for gdbserver connections:
  Add patches gdb-rhbz881849-ipv6-1of3.patch,
  gdb-rhbz881849-ipv6-2of3.patch,
  gdb-rhbz881849-ipv6-3of3.patch .
- Update to intel processor trace library 2.0 (from 1.6.1):
  Add v2.0.tar.gz, remove v1.6.1.tar.gz
  Remove obsolete v1.6.1-implicit-fallthrough.patch .
- Remove obsolete patches:
  gdb-fix-python37-breakage.patch,
  gdb-pahole-python2.patch .
- Added patches from Fedora:
  gdb-rhbz1491128-batch-mode-exit-status-1of2.patch,
  gdb-rhbz1491128-batch-mode-exit-status-2of2.patch,
  gdb-rhbz1553104-s390x-arch12-test.patch,
  gdb-use-pulongest-aarch64-linux-tdep.patch .
- Removed obsolete patches from Fedora:
  gdb-6.6-bz235197-fork-detach-info.patch,
  gdb-6.8-attach-signalled-detach-stopped.patch,
  gdb-gdb-add-index-script.patch,
  gdb-ppc64-stwux-tautological-compare.patch,
  gdb-rhbz1540559-gdbaddindex-glibcdebug-regression.patch,
  gdb-stale-frame_info.patch .
- Most other patches rebased.</changelog>
  <changelog author="tdevries@suse.com" date="1541592000">- Fix crash when reading core [bsc #1109013]
  * Add gdb-fix-crash-when-reading-core.patch
    https://sourceware.org/ml/gdb-cvs/2018-11/msg00022.html</changelog>
</package>
<package pkgid="e6355141ac8e5295ae2705b013eab2333656f25135fb4e8efaa84a1760a8c866" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
</package>
<package pkgid="9a9eb79bd92f98e1877f5545ad87f5f0d862b618d98292fd26f90f2d4b65820a" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
</package>
<package pkgid="fad8474725e7e78a3fde7f5c9b191281ad7cf699b95b18334600b11d90014c3e" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.16.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="686b453b553d1badbb566957bbb531b69233fa7b73759b5d2bc2660598c5c359" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.16.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="82f443a5bd180a9b3b83bf31c1b53c14cf28305c43a1eb9cf4e6ab34dbaf6843" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="fbd75b871efc11e1278a22e28273dc1c35f1e4186e4ef86cc6febbeb690c3697" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.6.1"/>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
</package>
<package pkgid="ea73df26db18616577279ee0457a601cbd0000c767987a6c9e97920fe2a7ad9d" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.9.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1519992000">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992001">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
</package>
<package pkgid="55416b66c096827ff5b3d5e916027a6fe9c44f297d2b38570b93203dbd2d7d2b" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
</package>
<package pkgid="7e306c095453afb88d404a8f6b793e6fd706e8ba4d45da40d3b89875ffcb33a4" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.16.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="149a8a62c65e6e30b2dfabeb9299c3af1b9c5fedfe8892acb3d6d4b80a62d127" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="f0044911e59408b531149b631fd1321be45516f6fc2900c14d5333ce7b1a5ad1" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.6.1"/>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
</package>
<package pkgid="7baf40171d74997de4b2f88104d5314deb67631b1aa4dfeb67d7ec3cea6bc6cd" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.9.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1519992000">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992001">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
</package>
<package pkgid="9cd7984d2aa5e6526bd560b07f93c01ecb2d7622531e963dd0c4ac062ebc6ffe" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
</package>
<package pkgid="c2c3d2d306216e37c37599f24d33bb5254a44b15c665b3fa515031f732a987f3" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.16.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="13e8630eaa8a3c0406afdc53df73b4d789fe0f7d06f7d256dd41bd8cd789222b" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="67fbb7f0fb42177fb967ac63af1933a657e83b48f05eb22fcdef255024e59c20" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.6.1"/>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
</package>
<package pkgid="b78b8cdb0ea7b2d0bd72986c229000f3a29255335316f5ada5deef24a639c9a9" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.9.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1519992000">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992001">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
</package>
<package pkgid="4d210b413af0dd36e58ec44674766321f0e19dd78c5286a9d7f525b0bf409906" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
</package>
<package pkgid="f0fe64b6371c96fecff416db75d68a858cc2893bfefd076efcfd883bbfe75c43" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.16.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="562fddbc6b444d899d3f3c889cbab1b1d6132c7672fdfdbe87369482fd3f0918" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="956d7e7a3973071d6a151ce81fcaab9514ce23a9cbcd10c1b669327ae703088a" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.6.1"/>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
</package>
<package pkgid="b17d7654d57a8599787ccacd90190d40175025d8186f641c7ae6f20a09dbb1e7" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.9.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1519992000">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992001">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
</package>
<package pkgid="cee0ef6f7f0abfc37f236c9267c20a892fb377c7773d39fbc21739ebcad01230" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
</package>
<package pkgid="7ebd66bc51cef13578b5f2717541906e21a754e7d6115f9a569c5ae9dcfdd83b" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.16.1"/>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gdm-s390-not-require-g-s-d_wacom.patch: Remove the gnome
  session runtime requirement of g-s-d Wacom plugin because it is
  not build on s390 (bsc#1129412).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1556452800">- Add gdm-remove-duplicate-sessions.patch: Backport from upstream
  commit 187c8515 and 1795bb31 to remove duplicate sessions once,
  after all sessions have been processed (boo#1131625,
  glgo#GNOME/gdm#473).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch: Add one SIGTERM signal handler
  to avoid gdm terminating unexpectedly (bsc#1120307).</changelog>
</package>
<package pkgid="96101c053c7371b95cee00559f6444ac13fef5ade3f76ee5f36f9e219887ca5b" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="641bb5fd4e695538a8b4f929736b13a0b612d3fb176dd81d8164ad681c2cbb87" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.6.1"/>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
</package>
<package pkgid="eca38aa879f13e7c165ec24e2dae3edf46ed515d3b92933201047d8c044b8f07" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.9.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1519992000">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992001">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
  <changelog author="qzheng@suse.com" date="1546516800">- Add gdm-ignore-duplicate-desktop-file.patch to ignore duplicate
  desktop file with same "Name" value, including symlinks of
  desktop files (bsc#1112834, glgo#GNOME/gdm#437).
- Drop gdm-ignore-duplicate-session.patch, the patch hardcodes
  "default.desktop" while LightDM and SDDM treat symlinks as
  aliases.</changelog>
  <changelog author="qkzhu@suse.com" date="1547035200">- Add gdm-disable-wayland-for-proprietary-nvidia-machines.patch: At
  the moment GLX applications don't work well when the proprietary
  nvidia driver is used with a wayland session. so disable wayland
  on that hardware (glgo#GNOME#gdm!46 bsc#1112578).</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1549972800">- Add gdm-CVE-2019-3825.patch: Fix lock screen bypass when timed
  login is enabled (boo#1124628, glgo#GNOME/gdm#460, CVE-2019-3825)</changelog>
  <changelog author="xwang@suse.com" date="1550750400">- Add gdm-kill-user-session.patch: Kill all sessions when stopping
  gdm service
  (bsc#1112294 bsc#1120307 bsc#1113245 glgo#GNOME/gdm#400).
- Add gdm-switch-to-tty1.patch: Switch to tty1 when stopping gdm
  service (bsc#1113700).
- Drop gdm-plymouth-vt1.patch: Replaced by gdm-switch-to-tty1.patch</changelog>
</package>
<package pkgid="58f0a7086da8d465c6c075bd1b7f09b9f638c531d8d3d93cae2a3f16a3b56257" name="geotiff" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="3916e80326e86a29ba0b992d2f0ac0103f7c30137f992d56d701baa4eccf5f7d" name="geotiff-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="eeae06a7ba702aaa2c8a73efd2d7d1e875f2dead5bdf30af96435c5aabf6de8c" name="gettext-csharp" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1292932800">- Update to 0.18.1. Changes since 0.17:
  Version 0.18.1 - June 2010
  * msggrep: A '$' anchor in a regular expression now also matches
    the end of the string, even if it does not end in a newline.
  * Dependencies:
    The libraries and programs are now linked with libunistring if
    this library is already installed.
  * Installation options:
    The configure option --with-cvs is deprecated. The 'autopoint'
    program will now use the 'git' program by default to compress its
    archive.  If the configure option --without-git is specified,
    'autopoint' will not rely on 'git', but will instead rely on a
    locally installed 3 MB large archive.
  Version 0.18 - May 2010
  * PO file format:
    There is a new field 'Language' in the header entry.  It denotes
    the language code (plus optional country code) for the PO file.
    This field can be used by automated tools, such as spell
    checkers. It is expected to be more reliable than looking at the
    file name or at the 'Language-Team' field in the header entry.
    msgmerge, msgcat, msgen have a new option --lang that allows to
    specify this field. Additionally, msgmerge fills in this new
    field by looking at the 'Language-Team' field (if the --lang
    option is not given).
  * xgettext and PO file format:
    For messages with plural forms, programmers can inform the
    translators about the range of possible values of the numeric
    argument, like this:
    /* xgettext: range: 0..15 */
    This information 'range: 0..15' is stored in the PO file as a
    flag attached to the message. Translators can produce better
    translations when they know that the numeric argument is small.
  * Colorized PO files:
    msgattrib, msgcomm, msgconv, msgen, msgfilter, msggrep, msginit,
    msgmerge, msgunfmt, msguniq, xgettext now have options --color
    and --style, like msgcat has since version 0.17.
  * msgmerge is up to 10 times faster when the PO and POT files are
    large. This speedup was contributed by Ralf Wildenhues.
  * msgcmp has a new option -N/--no-fuzzy-matching, like msgmerge has
    since version 0.12.
  * msgfilter now sets environment variables during the invocation of
    the filter, indicating the msgid and location of the messge being
    processed.
  * xgettext now can extract plural forms from Qt 4 programs. The
    recommended xgettext command-line options for this case are:
  - -qt --keyword=tr:1,1t --keyword=tr:1,2c,2t --keyword=tr:1,1,2c,3t
  * xgettext --language=GCC-source now recognizes also the format
    strings used in the Fortran front-end of the GCC compiler, and
    marks them as 'gfc-internal-format'.
  * autopoint can now be used to update several PO directories all
    together.
  * PO mode changes:
  - PO files with plural entries are now correctly handled.
  - Editing a message with previous msgid (in comments) removes these
    comments.  Contributed by Noritada Kobayashi.
  * The po/Makevars file has a new field MSGMERGE_OPTIONS, that can
    be used to adjust msgmerge's operation.
  * The use of the macro AM_GNU_GETTEXT without 'external' argument
    and the --intl option of the gettextize program are deprecated
    and will be removed in the next release. Instead of including
    the intl sources in your package, we suggest making the libintl
    library an (optional) prerequisite of your package.
  * Updated the meaning of 'gcc-internal-format' to match GCC 4.3.
  * Installation options:
    The configure options --without-cvs and --with-git can be used to
    specify whether 'autopoint' will use the 'cvs' program, or the
    'git' program, or none at all. These options allow to trade
    dependencies against installed package size: If --without-cvs is
    specified and --with-git is not specified, 'autopoint' will not
    rely on 'cvs' or 'git', but will instead rely on a locally
    installed a 3 MB large archive.
  * Portability: The msgfilter program now also works on native Woe32
  - platforms. Compiled C# message catalogs now also work with
  - 'mono' versions from 2009
    or newer.</changelog>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1348488000">- remove silent_rules from AM_INIT_AUTOMAKE to make autoreconf
  succeed on older distributions.
- Rename po-mode.diff to gettext-po-mode.diff</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="christoph.miebach@web.de" date="1370692800">- Update to version 0.18.2.1: Version 0.18.2 - December 2012
  + xgettext now understands the block comment syntax of Guile 2.0.
  + libgettextpo library:
  * The initial msgstr of a new message is now "", not NULL.
  * Bug fixes in the functions po_message_is_range,
    po_file_check_all, po_message_check_all.
  + Installation options:
    The configure options --with-xz and --with-bzip2 can be used to
    specify alternate compression methods for the archive used by
    the 'autopoint' program. These options, together with
  - -with-git, allow to trade dependencies against installed
    package size. --with-xz has the highest compression rate,
    followed by --with-git, followed by --with-bzip2.
  + Autoconf macros:
  * The autoconf macros installed by 'gettextize' now work with
    the forthcoming Automake 1.14 and require Autoconf version
    2.60 or newer.
  + Portability:
  * Building on MacOS X 10.7, Cygwin 1.7.10, and newer 64-bit
    mingw is now supported.
- Remove obsolete patches:
  + getext-stdio.in.patch
  + gettext-codecleanup.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1371297600">- Add glib2-devel libcroco-devel libxml2-devel to build requires to avoid
  using the included copies.
- gettext-configure.patch: Fix syntax in libxml check to avoid spurious
  failure</changelog>
  <changelog author="christoph.miebach@web.de" date="1376308800">- Version 0.18.3 - July 2013
  * Runtime behaviour:
    On Mac OS X systems, the setlocale() function now properly
    invalidates loaded message catalogs when a locale has been set.
  * Programming languages support:
  - C++:
    The gnu::autosprintf class now provides an assignment
    operator.
  - Glade:
    xgettext now supports GtkBuider file format used by Glade 3.
    xgettext now also extracts contexts (msgctxt) from Glade 2
    and GtkBuider files.
  - JavaScript:
    xgettext now partially supports JavaScript.  Since the
    current JavaScript specification (ECMA-262) does not define
    the standard set of formatting methods nor translation
    functions, the implementation supports only a limited
    set of formatting methods and translation functions commonly
    used in Gjs and other popular JavaScript implemenations and
    libraries.
  - Lua:
    xgettext now supports Lua, using ?ubomír Remák's lua-gettext.
  - Python:
    xgettext and msgfmt's format string checking now recognize
    Python format string in braced syntax (PEP 3101).  xgettext
    now also supports explicit string concatenation with '+' and
    handles platform dependent line terminators (LF/CR/CRLF)
    transparently.
  - Tcl:
    Bug fix in xgettext Unicode escape handling.
  - Vala:
    xgettext now supports Vala.
  * msgattrib now has --previous option to keep previous msgid when
    making messages fuzzy, similar to msgmerge --previous.
  * msgfmt now checks PO file headers more strictly with less
    false-positives.
  * 'gettextize' now checks macro directories specified with
    AC_CONFIG_MACRO_DIRS in configure.ac.
  * Portability:
  - msginit now does not require GNU sed.
  - The Makefile rule for generating en@quot and en@boldquot now
    uses @SED@ variable instead of hard-coded 'sed' command to
    allow users to supply GNU sed.
  * Future backward-incompatibilities:
  - In future Gettext versions, the files installed by
    'gettextize' will require Automake 1.10 or later.  This will
    improve the compatibility of user projects with newer
    Automake versions.
- Remove upstreamed patches:
  gettext-configure.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389528000">- GNU gettext 0.18.3.2:
  * Add missing extern-inline.m4 into archive.
- verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- GNU gettext 0.19:
  - Programming languages support:
  * Desktop Entry:
    xgettext and msgfmt now support .desktop files, used by
    desktop applications, as input and output.
  * GSettings:
    xgettext now supports GSettings schema file format used by
    GNOME applications.
  * JavaScript:
    xgettext now recognizes E4X (ECMA-357) constructs.
  * PHP:
    Single and double quotes around heredoc markers are now
    recognized.
  * Python:
    The acceptable format specifiers in the braced-syntax format
    strings is now limited to the Standard Format Specifiers, to
    reasonably avoid false-positives.
  * Scheme:
    The gettext shorthand form _"abc", used by GIMP script-fu, is
    now recognized by xgettext.
  * C and Vala:
    xgettext now recognizes C99-style Unicode character escapes.
  - The --add-location option of msgattrib, msgcat, msgcomm,
    msgconv, msgen, msgfilter, msggrep, msgmerge, msguniq, and
    xgettext commands now takes an optional argument 'never',
    'full', or 'file', to control the format of "#: ..." comments.
  - msgfmt now has --source option to keep generated .java file
    when running in Java mode.
  - msgattrib now has --empty option that sets msgstr to empty when
    clearing fuzzy flag.
  * msgexec and msgfilter pass the plural information to subprocess
    through the environment variable MSG{EXEC,FILTER}_MSGID_PLURAL
    and MSG{EXEC,FILTER}_PLURAL_FORM.
  * New built-in filters 'quot' and 'boldquot' have been added to
    msgfilter.  These filters convert Latin quotation marks ('...',
    "...") into Unicode quotation marks (for example, U+2018) if
    possible, similar to the sed commands used in po/Rules-quot and
    po/Rules-boldquot.
  * The po/Makevars file has a couple of new options
    PO_DEPENDS_ON_POT and DIST_DEPENDS_ON_UPDATE_PO, that can be
    used to adjust the behavior of updating PO files on demand.
  * xgettext now strips prefixed string before the comment tag.
    This is useful to support C-style comment like this:
    /*
  * TRANSLATORS: first line
  * second line
  * /
  * In this example, the extracted comment does not contain "* " at
    the beginning of each line.
  * libgettextpo library:
  - Memory leak fixes in the PO file parser.
  * Documentation:
  - A complete example showing the use of GNU gettext in a
    GNOME 3 application has been added</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
</package>
<package pkgid="6de25627bcdfb2dc402dd84a7433f7660575c998f6fa605459137c8d21dc9bec" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="fd3506038bb1414d11833fd353b39e5a0e20fcf40c7186195ae2deb0b5e0d438" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="3bab282dfaf47c39d64caed83783b8e539918825d57acbc0d013671a7a4f67d6" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="d1916056509cba6eab1317fa76dba47512390cc135c724011def47c9f19a279b" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="5c945f73c05ac799d670d1d5020fbac964fec4e507937c2c8685b6a0e73ca2a7" name="gettext-java" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="aj@suse.de" date="1342958400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="pth@suse.de" date="1348488000">- remove silent_rules from AM_INIT_AUTOMAKE to make autoreconf
  succeed on older distributions.
- Rename po-mode.diff to gettext-po-mode.diff</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="christoph.miebach@web.de" date="1370692800">- Update to version 0.18.2.1: Version 0.18.2 - December 2012
  + xgettext now understands the block comment syntax of Guile 2.0.
  + libgettextpo library:
  * The initial msgstr of a new message is now "", not NULL.
  * Bug fixes in the functions po_message_is_range,
    po_file_check_all, po_message_check_all.
  + Installation options:
    The configure options --with-xz and --with-bzip2 can be used to
    specify alternate compression methods for the archive used by
    the 'autopoint' program. These options, together with
  - -with-git, allow to trade dependencies against installed
    package size. --with-xz has the highest compression rate,
    followed by --with-git, followed by --with-bzip2.
  + Autoconf macros:
  * The autoconf macros installed by 'gettextize' now work with
    the forthcoming Automake 1.14 and require Autoconf version
    2.60 or newer.
  + Portability:
  * Building on MacOS X 10.7, Cygwin 1.7.10, and newer 64-bit
    mingw is now supported.
- Remove obsolete patches:
  + getext-stdio.in.patch
  + gettext-codecleanup.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1371297600">- Add glib2-devel libcroco-devel libxml2-devel to build requires to avoid
  using the included copies.
- gettext-configure.patch: Fix syntax in libxml check to avoid spurious
  failure</changelog>
  <changelog author="christoph.miebach@web.de" date="1376308800">- Version 0.18.3 - July 2013
  * Runtime behaviour:
    On Mac OS X systems, the setlocale() function now properly
    invalidates loaded message catalogs when a locale has been set.
  * Programming languages support:
  - C++:
    The gnu::autosprintf class now provides an assignment
    operator.
  - Glade:
    xgettext now supports GtkBuider file format used by Glade 3.
    xgettext now also extracts contexts (msgctxt) from Glade 2
    and GtkBuider files.
  - JavaScript:
    xgettext now partially supports JavaScript.  Since the
    current JavaScript specification (ECMA-262) does not define
    the standard set of formatting methods nor translation
    functions, the implementation supports only a limited
    set of formatting methods and translation functions commonly
    used in Gjs and other popular JavaScript implemenations and
    libraries.
  - Lua:
    xgettext now supports Lua, using ?ubomír Remák's lua-gettext.
  - Python:
    xgettext and msgfmt's format string checking now recognize
    Python format string in braced syntax (PEP 3101).  xgettext
    now also supports explicit string concatenation with '+' and
    handles platform dependent line terminators (LF/CR/CRLF)
    transparently.
  - Tcl:
    Bug fix in xgettext Unicode escape handling.
  - Vala:
    xgettext now supports Vala.
  * msgattrib now has --previous option to keep previous msgid when
    making messages fuzzy, similar to msgmerge --previous.
  * msgfmt now checks PO file headers more strictly with less
    false-positives.
  * 'gettextize' now checks macro directories specified with
    AC_CONFIG_MACRO_DIRS in configure.ac.
  * Portability:
  - msginit now does not require GNU sed.
  - The Makefile rule for generating en@quot and en@boldquot now
    uses @SED@ variable instead of hard-coded 'sed' command to
    allow users to supply GNU sed.
  * Future backward-incompatibilities:
  - In future Gettext versions, the files installed by
    'gettextize' will require Automake 1.10 or later.  This will
    improve the compatibility of user projects with newer
    Automake versions.
- Remove upstreamed patches:
  gettext-configure.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389528000">- GNU gettext 0.18.3.2:
  * Add missing extern-inline.m4 into archive.
- verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1401796800">- GNU gettext 0.19:
  - Programming languages support:
  * Desktop Entry:
    xgettext and msgfmt now support .desktop files, used by
    desktop applications, as input and output.
  * GSettings:
    xgettext now supports GSettings schema file format used by
    GNOME applications.
  * JavaScript:
    xgettext now recognizes E4X (ECMA-357) constructs.
  * PHP:
    Single and double quotes around heredoc markers are now
    recognized.
  * Python:
    The acceptable format specifiers in the braced-syntax format
    strings is now limited to the Standard Format Specifiers, to
    reasonably avoid false-positives.
  * Scheme:
    The gettext shorthand form _"abc", used by GIMP script-fu, is
    now recognized by xgettext.
  * C and Vala:
    xgettext now recognizes C99-style Unicode character escapes.
  - The --add-location option of msgattrib, msgcat, msgcomm,
    msgconv, msgen, msgfilter, msggrep, msgmerge, msguniq, and
    xgettext commands now takes an optional argument 'never',
    'full', or 'file', to control the format of "#: ..." comments.
  - msgfmt now has --source option to keep generated .java file
    when running in Java mode.
  - msgattrib now has --empty option that sets msgstr to empty when
    clearing fuzzy flag.
  * msgexec and msgfilter pass the plural information to subprocess
    through the environment variable MSG{EXEC,FILTER}_MSGID_PLURAL
    and MSG{EXEC,FILTER}_PLURAL_FORM.
  * New built-in filters 'quot' and 'boldquot' have been added to
    msgfilter.  These filters convert Latin quotation marks ('...',
    "...") into Unicode quotation marks (for example, U+2018) if
    possible, similar to the sed commands used in po/Rules-quot and
    po/Rules-boldquot.
  * The po/Makevars file has a couple of new options
    PO_DEPENDS_ON_POT and DIST_DEPENDS_ON_UPDATE_PO, that can be
    used to adjust the behavior of updating PO files on demand.
  * xgettext now strips prefixed string before the comment tag.
    This is useful to support C-style comment like this:
    /*
  * TRANSLATORS: first line
  * second line
  * /
  * In this example, the extracted comment does not contain "* " at
    the beginning of each line.
  * libgettextpo library:
  - Memory leak fixes in the PO file parser.
  * Documentation:
  - A complete example showing the use of GNU gettext in a
    GNOME 3 application has been added</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="fstrba@suse.com" date="1507032000">- Added patch:
  * gettext-0.19.8.1-jdk9.patch
    + specify java soure and target level 6 to be able to build
    with jdk9
- Do not depend on gcc-java and do not build native binaries of the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools, since
  gcc-java is bound to disappear
- Build the gettext.jar using any java-devel provider and make the
  gnu.gettext.GetURL and gnu.gettext.DumpResource tools scripts
  running classes from this gettext.jar
- Clean the spec file a bit</changelog>
</package>
<package pkgid="59596f06d02c32e2bbc2373c07d3ba2ce1b966ed15354153b1b540760e0f1a51" name="gettext-runtime" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="74c97b62d54afa7320409b212355d2fdf8cda97d3eff624f67bc715244a92017" name="gettext-runtime" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="524a7d37c6f62943b958aebdc711bd859d0eeb79a42df3ef6a58e6e3e1e18eaf" name="gettext-runtime-32bit" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="3ca05fbf19ab8f452517e061ab6ed948a2e1555071d78cd4696efe7b0d32f43c" name="gettext-runtime-mini" arch="src">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="8eb4cd25e6b0c86f335859a607d45474802d31700d93ae5c9d379f323ea90721" name="gettext-runtime-mini" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="9425f4701ea76fb17bf50f933889265b42e1ecd0b5cb480ef91194e562f5d98c" name="gettext-runtime-mini-tools-doc" arch="noarch">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="4a7777a737a499f826c87a3c84f19fcbe0163b481fc0fe805838f70e2c9e6e6c" name="gettext-runtime-tools-doc" arch="noarch">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="2ba00d4d1696540a841243f0dcc924f146420921faee33204b0da9ab9190b7d2" name="gettext-tools" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
</package>
<package pkgid="a93ae0926dbb7ced62260a951419f022de607eabde0d7ab9c4042ff49055f4fc" name="gettext-tools-mini" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp150.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1402401600">- GNU gettext 0.19.1:
  * Desktop Entry: msgfmt now always reads the po/LINGUAS file
  * Vala:  Bug fix in xgettext handling of "//" in string literals
  * po/Makevars.template now contains the newly added variables
  * msgfmt now treats errors in the PO file header as non-fatal
    In future Gettext versions, msgfmt will treat header errors as
    fatal and terminate the command execution.
- switch to xz tarball</changelog>
  <changelog author="pth@suse.de" date="1405425600">- Update to 0.19.2:
  * Fix xgettext crash in parsing empty string literals in C and Vala.
  * Autoconf macro trace in autopoint now works again with Autoconf 2.68
    or earlier.  It was a regression in 0.19.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413547200">- GNU gettext 0.19.3:
  * Fix xgettext mishandling of octal character escapes in C.
  * Fix autopoint infinite recursion with certain configure.ac.
  * The po/Makevars file has a new field MSGINIT_OPTIONS, that can
    be used to adjust msginit's operation.  This is particularly
    useful for controlling line wrapping behavior together with
    MSGMERGE_OPTIONS and XGETTEXT_OPTIONS.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
</package>
<package pkgid="d253f4c7786c1002afcb88c886c9f3e8eeabe612c4c905e0116643c346893423" name="ghc-xmonad" arch="x86_64">
  <version epoch="0" ver="0.13" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1428148800">- update to 0.11.1</changelog>
  <changelog author="mimi.vx@gmail.com" date="1429876800">- add relax-utfstring-dep.patch for build with utf8-string-1+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1440936000">- drop  relax-utfstring-dep.patch , use of new macros functions instead</changelog>
  <changelog author="mimi.vx@gmail.com" date="1450785600">- update to 0.12
  * Use of data-default allows using def where previously you had to write
    defaultConfig, defaultXPConfig, etc.
  * The setlocale package is now used instead of a binding shipped with xmonad proper
    allowing the use of Main.hs instead of Main.hsc
  * No longer encodes paths for spawnPID
  * The default manageHook no longer floats Gimp windows
  * Doesn't crash when there are fewer workspaces than screens
  * Query is now an instance of Applicative
  * Various improvements to the example configuration file</changelog>
  <changelog author="psimons@suse.com" date="1468152000">- Update to version 0.12 revision 0 with cabal2obs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479384000">- Add windowmanager provides (boo#981663).</changelog>
  <changelog author="psimons@suse.com" date="1486900800">- Update to version 0.13 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1492689600">- Add "remove-state-file-after-startup.patch" to fix issues where
  xmonad would not start because an incorrect serialized state file
  was still lying around in the user's home. The patch comes from
  https://github.com/xmonad/xmonad/pull/91 (boo#1128329).</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551960000">- Fix focus when pointer entering empty workspace.
  Add xmonad-fix-empty-workspace-focus.patch</changelog>
</package>
<package pkgid="97b898e7070f2720a232b2b16ef98e90b048da2bdca999a5b14008065933c073" name="ghc-xmonad-devel" arch="x86_64">
  <version epoch="0" ver="0.13" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1428148800">- update to 0.11.1</changelog>
  <changelog author="mimi.vx@gmail.com" date="1429876800">- add relax-utfstring-dep.patch for build with utf8-string-1+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1440936000">- drop  relax-utfstring-dep.patch , use of new macros functions instead</changelog>
  <changelog author="mimi.vx@gmail.com" date="1450785600">- update to 0.12
  * Use of data-default allows using def where previously you had to write
    defaultConfig, defaultXPConfig, etc.
  * The setlocale package is now used instead of a binding shipped with xmonad proper
    allowing the use of Main.hs instead of Main.hsc
  * No longer encodes paths for spawnPID
  * The default manageHook no longer floats Gimp windows
  * Doesn't crash when there are fewer workspaces than screens
  * Query is now an instance of Applicative
  * Various improvements to the example configuration file</changelog>
  <changelog author="psimons@suse.com" date="1468152000">- Update to version 0.12 revision 0 with cabal2obs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1479384000">- Add windowmanager provides (boo#981663).</changelog>
  <changelog author="psimons@suse.com" date="1486900800">- Update to version 0.13 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1492689600">- Add "remove-state-file-after-startup.patch" to fix issues where
  xmonad would not start because an incorrect serialized state file
  was still lying around in the user's home. The patch comes from
  https://github.com/xmonad/xmonad/pull/91 (boo#1128329).</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1551960000">- Fix focus when pointer entering empty workspace.
  Add xmonad-fix-empty-workspace-focus.patch</changelog>
</package>
<package pkgid="0243b8b800c22084e30974d4320a791baa88d1f345563720563026cdd85ca302" name="ghostscript" arch="src">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="7781983f1c667e4eff55746c426dee0e2e8fc1f61b5a271ac2e5bd600758f107" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="92cd5cf9bb58820e9a982f4b048a0e24fb5ea4c55e3ecb414bc595f1dbc2bbe1" name="ghostscript" arch="src">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="0aa2da65c31cb5e7d781d58ebc1dabf4c0155466cd27edcd67e3e71ca658a6ad" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="5729456323d891e80baa006f3eee5c6b040934f0cee8f46e49c634446e67d4d8" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="d0c6ffb0d21fc00d7cc7c8a7136f9628539902946743c54402b89e894c4d5de0" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="47fc51de5953608e8015497ade0f9256a02d2ac02e91299208dd7be0b0ea69b0" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="2620688e60ce9e5417338ed6785c5b68326095c0d97262063741c91cf3fa4cd2" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="cee890a0bb98a290db5c8baa5d974397e11b3051f5df5820ae8909b5d5fe1059" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="cfac62fd33df1629271df7e66fa05a8efd5b37ed54bb9da15b1fc4da63be1ead" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="b876cce19ea05df15b49487a79908691dc26d27977744a88ccc6c94ff409e0de" name="ghostscript" arch="src">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="f77a44ed39fbab657490c3fd0f4817d78c301e1d274b4b2b85702f82eee6afba" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="9f803ef2dadd89c3dccdce83110a273da49d85c8a60f06bf8e5229b4e67fc79a" name="ghostscript" arch="src">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="533e337f0d9ae47da8eaefd15cc99a943e059ca5d66e33e4db74b8f2a62e8304" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="88e6946745bd18f870a1ffcad07ae44288c586375637a621e6cd1e42e952f867" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="6ac9b455263731ab957818c4ac4729ed021de74df26ddf2db6f1f12c42ab784a" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="2866832dbfb0e03aeaf2ee566e0812e449f1a7d2c17b0dc7596f813c7f7aec18" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="589404ca98f37cde9d9d748b51cb2c1c411a632722599e72acd3af4b560134ac" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="32b7780ae583dfaf9e38ca996693f0bea4484eae0afdb85b9940bd94216485ca" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="20004790047cd52f2f1b902f84df750dad05b343622c1b75fd62d1851895cbcd" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="5bbdc4f1f7b10819d706bc7d52926db3de866d47b716a8341614153bd4ccbe6f" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="35d95a9df6b66c5596bd35ac622c4dd1e2995728dfaa790f5be342388ec5d657" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="a5b21058143b7e57309e60c46d6c89e93c024a6c12851d2d1b2b189a14305bf4" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="ec7bd8fee557f3965aa00ef20d6a24236885d3c2af014c883c7bf38e5e4bbbeb" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="ccedb484dd2e5c485ccfb465c4cbfc8706909c59c88484b2cc5ffaa35b83c766" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="fa0be582bc2b101a17269ee76908792ab0a39be5123ca23e5c6e79b44daf8b20" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="3c896dacd74cb18ea091d1843500eaa3206fea3be4e094a1ab12d75dcfa62abe" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="12c3b98c4d753b4d63dc4b2f52888b0374e55c660f54acb4fde93275d1606ae9" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="bbc5b4125dc29bc0d367605ddde4c9af91dd34c589f0acdac8a2bfa97f5ebe6f" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="71ca4cbc3bb79b158b9d22043e48c9c9ded5a5b401bedadf6d2573acc817918f" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="f85fdd64a815c26b5158771fa09e549cf8803ca996e9e2f7b6725080568b5d22" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="456c8d947ab06156ed4936415730530a999f800e942717552fdb18bb58ea2438" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="e716bb92d7116ab5dd0a13bf36c45c293c4836d4881c1fc7a1eb20497c33b4b4" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="1fa5aa5270936b163460eac3f6f18fcfe62cbe644d7bcda77c5ceabc1f900c89" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="468a140b206be5cb5dbf07922d0aaea3d4314122d7746cc8b0924227eff52e60" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="52c74a0dc5fe79bed24fee473bdbf942abbbec11318930c05209a8207342c937" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="819e3f47a0aa1d4d8c06ca74e09ff371e22d99800c01ebe7e9d7336d3b70907d" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="e52ff7cfe877205e851b2ec9b37bc3b12f1fd71773b2cc313537c879829fb527" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="869cb3c42361159a957316d0b0c67af7519bb2e0cd00fa3b50b6b3556d96dc7d" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="276e3518b920db38d1bd94f8e55f04388f583706e89d131cd712d5d31f2b9c94" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="73fd93c386fea6c8f2a593eb0c735e367771c2236bec3acdfbb79db7f2342cb6" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="a3ec47ea994f3e722951c3a26b03e9f392e885801d25d1cc721055acfa4a3958" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="d85edb2c5b3b8c5d92fbb387cdd51844934452b733b46afc00b37fce623a7457" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="729182f4f4fe16195a0930a0b01249891ab04eee1c99b6b6c7f9067a8bc536e3" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.25" rel="lp150.2.6.1"/>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="97b7e66e0297609eb76e9716b7781b279f511e1580fd9a2591f10ebf0ceea9ea" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26" rel="lp150.2.9.1"/>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
</package>
<package pkgid="7ef319acc835e691a74b4a7f5246054b8173ebe77a59c6f49414963d9d7af37a" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.12.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
</package>
<package pkgid="8ccd27e6fc205f8b162ca9febc0aeb653a970099544f3f1614eba9a31bc81c1b" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.17.2"/>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
</package>
<package pkgid="7ef7fdc6482eb327743b71f75f64bbafc399289d479efb0c7cc121c040254c0d" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.26a" rel="lp150.2.20.1"/>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
</package>
<package pkgid="8d7200442955012b86ea7d77bcf93ef3bda8456a33f7126238994c9c6899f2bf" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.27" rel="lp150.2.23.1"/>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch to fix bsc#1140359
  for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
</package>
<package pkgid="3ae43272d80e7e6ed21bd2857031041bab0083a5cf1a19686ef509d15b94bc2c" name="gio-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1442664000">- Drop org.gnome.settings-daemon.plugins.power/button-power
  override: this settings has been removed in GNOME 3.17.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Bump version to 42.1, to prepare for next version of openSUSE.</changelog>
  <changelog author="badshah400@gmail.com" date="1447156800">- The touchpad schemas migrated to org.gnome.desktop.peripherals
  from org.gnome.settings-daemon.peripherals, adapt tap-to-click
  setting accordingly (boo#954526).
- The "disable-while-typing" key no longer exists, remove it
  accordingly.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455364800">- Drop org.gnome.settings-daemon.plugins.media-keys/toggle-mute
  since we dropped the patch making this needed.</changelog>
  <changelog author="fcrozat@suse.com" date="1458043200">- Fix KeySym assigned for Help, XF86Help doesn't exist anymore.</changelog>
  <changelog author="fcrozat@suse.com" date="1466424000">- Add some settings from SLE12 SP2, not enabled when building on
  openSUSE (default zoom on nautilus).
- Update favorite applications default to use new names from
  upstream, prevent writing some defaults to dconf (partially fixes
  bsc#979947).</changelog>
  <changelog author="fcrozat@suse.com" date="1467201600">- Resync with glib2-branding-SLE and simplify specfile.
- Replaces Requires by Recommends on wallpaper-branding-openSUSE:
  gio-branding-openSUSE is required by glib2, which is causing
  openSUSE wallpaper as hard dependency on non-graphical install.
  (boo#993969).</changelog>
  <changelog author="fezhang@suse.com" date="1467374400">- Make gnome-settings-daemon housekeeping plugin ignore /boot/efi
  [bsc#919217].
  Summary from bsc#919217:
  "On a default UEFI installation, /boot/efi is created with a size
  of 156MB. It will cause gnome-settings-daemon to popup a warning,
  if logged as root (not 100% sure when logged as a regular user)
  that a partition has less than than 1GB of free space.
  /boot/efi should be added to default schema
  org.gnome.settings-daemon.plugin.housekeeping ignore-paths"</changelog>
  <changelog author="dimstar@opensuse.org" date="1468497600">- Do not attempt to build -openSUSE on SLE and -SLE on openSUSE:
  trick the .spec file to ExclusiveArch: %nil in this case.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Once again disable GNOME Software update notifications (automatic
  download of patches; openSUSE relies on gnome-settings-daemon's
  internal update plugin for update notifications) (boo#997572).</changelog>
  <changelog author="dimstar@opensuse.org" date="1476878400">- Enable freedesktop sound theme by default (boo#1004919):
  + Set org.gnome.desktop.sound/theme-name to 'freedesktop' for
    openSUSE.
  + Recommend sound-theme-freedesktop by gio-branding-openSUSE.
- Introdue @@IF_LEAP@@ logic into the .gschema.override.in file:
  IF_LEAP is true if building for 'openSUSE' and sle_version is set
  in prjconf. Apply IF_LEAP to the GNOME Software update
  notifications.</changelog>
  <changelog author="yfjiang@suse.com" date="1500379200">- Update .gschema.override.in to set small icon size on Desktop and
  nautilus in Leap, which is consistent with SLE (bsc#1043604).</changelog>
  <changelog author="fcrozat@suse.com" date="1508500800">- Update SLE version to 15.
- Remove post/postun scripts, no longer needed with file triggers.
- Update favorites applications on SLE15, we switched to pidgin and
  gnome-photos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Update .gschema.override.in: evolution.desktop has been renamed
  to org.gnome.Evolution.desktop.</changelog>
  <changelog author="xwang@suse.com" date="1513166400">-  Update .gschema.override.in to show application menu on title
  bar in sle-classic session (bgo#746592 bsc#1070090).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513339200">- Rename base package to glib2-branding and add SLE and openSUSE as
  multibuild flavors. There is no other difference to the previous
  glib2-branding-{openSUSE,SLE} packages.
- Drop pre_checkin.sh: no longer needed with multibuild.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513684800">- Use variable flavor instead of BUILD_FLAVOR: obs is only
  replacing the first occurence.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513771200">- Revert "Update .gschema.override.in: evolution.desktop has been
  renamed to org.gnome.Evolution.desktop.": This will only be valid
  with GNOME 3.28.</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530187200">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
</package>
<package pkgid="f14c29461b17040263c57f8aba5a358ec9fd2b53f36c87e2e0ba655583cd6ca4" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="c591cf5dbebd08ebdbb5af62f622f585d80bfbd5d244bbe67d551f1a71f0ebcf" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="22e8e88110d66a84fe2469ef6521b6cd959eefd34e3e50f65df18c25b0460219" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="f9715133966ecda31df27ee1685bf24b06af037b1b93240d92fd1a75528a9fa2" name="gio-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="7db7f489aeef8b896603b3a55523da98ee157806da97a5ce5f966c43b0990ca2" name="git" arch="src">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="8dfc8c90049503e202e1aa77c32839e69af5963b9ad12d483865aed35204bbca" name="git" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="7d60e209b08ab9e3384ebf1caa2036772b63823a69c9afe44f08ecb8442c15d5" name="git" arch="src">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="8477b9851c717bec159ad278e6aa42e7cd27a8011f5864e1defc0c41b92091c5" name="git" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="3fd4a30120f5018c5aaad3596a3746757cbac17648d2f95c2f9f62c807c24505" name="git" arch="src">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="b70b497d620d26f06d15fc715bca04484b0feaa498a8b93464e0affc261abade" name="git" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="bb2d3adc165d25dcc17a478506a387deb22a6892a85f1be11fe4c147a631d1a3" name="git-annex" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="adfb6bb6cb7520286677a8c06f871bcfc540e3ffbe0268034f97ced3bc247642" name="git-annex-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="4f4d7bec3ac6ff73535d81f2bdc6ca60c7f28200b7f9a0aee254dee3e29ec642" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="cc7572d5683efa694c784c922a09915afc02a9514dc1a67f79c80ad10908c82f" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="b42e15fefd1ca80c3203f2fe08b3489e7c43b9449149b491e8462e404cb7e2d5" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="06d6e056962b75c28f295df8ef5372aa1c0aecd987fb7f9747b9805ca25b252d" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="e0b8263ef11d91282f33245c119509f8aa40456f63019130d0730f71016a36bd" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="f7940ad6cde0e9e6f19a08528daef41baf91816ebd97f216c1d777bf7d2b0e5b" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="41cc591579a0586851161248d465f452b8886f000ed1c553fadb44dd96924b10" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="914210191400db55fa5cdf46a570ed3bde3dd2eef35f543132e017ab4cc233c8" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="3ef14059fb3ca3d7ec0240a44cd484d14b11e5d302876c68ebca0fd443157e81" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="f0b80903f4c9930cbf3a100e84bd0e75e3b00af89e76b31ea8f6ea4f6a253ac6" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="080a05ae2f75b58f38538f721aaec8cc5a19e6d3d8a7c719297b765a713cdf3e" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="bac49e7d3de99d38d4e82dd586dbea06d8e363231021bcceb81a30bf76a69b1c" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="2911e2cbd9bd9cbae46a1dfbdd084e6ed98380e1a63769fbb70a32794e4d3d97" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="4f77bebfa9f1f75697d0f9c8e76a61e84a73d9ac6fee8f2a04c96cb71b638b3f" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="93b384459217328dda64b98bcd0681c450ebb9e56c91a5dfd75d224c605c2fd4" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="f8e78eab70ceff5d3ca99625de16cd09a8881e92d530316210fc20ea43994f2d" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="2a861eec54c744b242beee6ab3b57355554803a183e9751e45d5223f71376697" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="0f1675348edc98f05fe8a60e7b616b3d62f1e44264be7c1f4b25f65d9f21aafe" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="2d6555f247a864829c3d39e6c0faff3234c73f1e20fe98f25de6154771f6ac35" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="94b916775dbb00d5d775ea9e4c0e826162b2fb22b119be0f4f076af7b4db83f4" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="487a85f3e0481021409479b6ddf96707f00b5dedcfb386830e212f3be212dc7e" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="ab73513d30bdaaf79f006cf9e0faddc575b2eaf338aed80296deaeca658cd76a" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="bccd1a8f5f4a0b110dae3ac8255060ed5cb7eb49eaf2f26619a014dd148f4295" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="d69a910b874cd651793ba84f0e05bc1021bfbd494889d9e0febf9643a9c02041" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="f005dcb4e433fac7ad0c2ef6a5fb34230e163a39aff8187f4726786528857dc3" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="7c1214d0c7f0223c56f9757c4f2ad6c0ab18f53932e3fe43379a903f0d656841" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="57be401e12a45818072aebad387bb3bddfb8c8fe1d0efbe3787cbd77255f7266" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="3f047823647ff4a10e17108014106833754c68b6e94129d3d8f8ee03926beabf" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="977ab1d4e5f2163502c6071c531060f2bfc372b9f9926a04aa5e9d2a2f0fb2c3" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="3f703fdd78aeda9a9ccbec3774ba254444a5dbd7561124f170a97c07f3f59fea" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="c81714b886555c807f17134cbeb05c26d03c49b2516b1196fc96d740dc9cd31c" name="git-review" arch="noarch">
  <version epoch="0" ver="1.28.0" rel="lp150.2.3.1"/>
  <changelog author="dmueller@suse.com" date="1400760000">- update to 1.23.61:
  * Topic: do not use '(detached' when detached
  * Use gerrit 2.8.5 instead of gerrit 2.6.1 in tests
  * Allow to specify default scheme in .gitreview file
  * Correct test_remote to support branchs without upstream
  * Remove parsing of --help and variants from our code
  * Python2: fixed UnicodeEncodeError
  * Skip invalid unicode in commit messages
  * Git review assumes the wrong ssh default port
  * Add http(s) protocol support to fetch_review and list_reviews
  * git-review.1 manpage fix for groff warnings
  * Fix parsing of SCP-style URLs, as these are valid in Git itself
  * "git review --setup" failed in Chinese locale
  * Bump hacking version in requirements
  * Reduce testr concurrnecy to 2
  * Add http(s) protocol support to set_hooks_commit_msg
  * Retrieve remote pushurl independently of user's locale
  * Add http(s) protocol support to test_remote
  * Verify if every attached file exists. Attach gerrig.config
  * Wrap exceptions that occur while running external process
  * Make Gerrit port and dir selection deterministic
  * Don't try to attach known_hosts if it's not there
  * Remove tox locale overrides
  * Fix the regex for setting topic
  * Add 2m timeout to tests
  * Attach Gerrit logs and known_hosts to failed tests
  * Change test gerrit ssh/http ports offset
  * Correct .Fl typo WRT --compare in the manual page
  * Ignore content of merge commits in reporting
  * Remove empty lines from git log output
  * Preserve merges when doing a rebase
  * Split git rev-parse --show-toplevel --git-dir on newline
  * Prefer .gitconfig username
  * Add more deterministic port selection for Gerrit
  * Document source location as git.openstack.org
  * Implement integration tests
  * Migrate to pbr
  * No longer check for new git-review releases
- remove git-review-username.diff: merged upstream</changelog>
  <changelog author="speilicke@suse.com" date="1404475200">- Avoid source Url, we're packaging from git</changelog>
  <changelog author="bwiedemann@suse.com" date="1405512000">- update to 1.24
  * Require python-requests
  * Update homepage on PyPI
  * Update requirements to OpenStack's recommendations
  * Update the README to mention dependencies
  * Ensure username is set for all tests
  * Provide nicer user message for missing remote ref
  * Fix a typo in HACKING.rst
  * Ignore newline in bp/bug search in commit message
  * Restrict tests SSH auth to only the provided key
  * Disable proxies for tests that clone over http
  * Keep track of gerrit.war and golden_site versions
  * Fix typo in manpage s/gireview/gitreview/
  * Correct git review -l over http(s)</changelog>
  <changelog author="bwiedemann@suse.com" date="1411387200">- Require python-setuptools to fix CLI</changelog>
  <changelog author="tbechtold@suse.com" date="1434196800">- update to 1.25.0:
  * Add ?git-review -l? to man page synopsis and usage doc
  * Add reviewers on upload
  * Update project links
  * Override E-mail in Gerrit integration tests
  * Fixed a dead link to the git-review docs
  * Provide an explanation on failed rebase
  * Switch to requests to support proxying of 'https'
  * Use plumbing rev-parse to get the branch name
  * Isolate tests from user/system git configuration
  * Push language override down into the cmd wrapper
  * git review -sv gets more verbose
  * Add utf-8 char support
  * Choose tracked branch for rebase when submitting
  * pbr should install the manpage
  * get_remote_url(): also honor url.*.pushInsteadOf
  * Support authentication in run_http_exc
  * Split README.rst into separate doc files
  * Handle correctly http error raise in run_http_exc
  * Fix encoding header
  * Workflow documentation is now in infra-manual
  * Update tests to use Gerrit 2.9.2
  * Use 'no_proxy' env variable in addition to uppercase
  * Enable color support based on tty and config
  * get_remote_url(): honor any "url.&lt;base&gt;.insteadOf" config setting
  * Convert add_remote to use GitReviewExceptions
  * Prefer git-config over git-review config files
  * Isolate tests from user/system config
  * Switched documentation to point to storyboard
  * Fix ---list and "departement" typos in man page
  * Align git-review and python -m git_review.cmd behaviors
  * Define -T/--no-topic to disable review submit with topic
  * Work toward Python 3.4 support and testing
  * -F/--force-rebase has no effect if rebase is disabled by config
  * Remove useless constants
  * Improve windows support for git-review --setup
  * Fix groff warnings with manpage
  * Enabled hacking checks H305 and H307
  * Prevent long subjects in reviews causing spurious blank lines
  * added link to get-pip to readme
  * Disable ssh/scp password authentication during tests
  * Update tests to use Gerrit 2.8.6.1
  * Build universal wheels</changelog>
  <changelog author="tbechtold@suse.com" date="1440676800">- Remove %{_sysconfdir}/git-review/git-review.conf from package.
  File is deprecated.</changelog>
  <changelog author="dmueller@suse.com" date="1510574400">- add git-2.15-compat.patch: fix compat with git 2.15</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546948800">- Update to 1.27.0:
  * Work with python3
- Remove patch in upstream: git-2.15-compat.patch
- Switch to source url downloads
- Switch URL to point to active site
- Switch to singlespec</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884800">- update to 1.28.0 (bsc#1134089):
  * Support for auto-configuration of topic names based on the
  presence of keywords in the commit message is removed. Previously,
  keywords such as bug, bp or lp followed by a number would result
  in branch names containing the associated number, e.g. bug/123.
  This feature was OpenStack specific, was a frequent source of bugs
  and clearly wasn?t being used that often, given that StoryBoard
  is a thing now and no one had updated this feature to handle that metadata.
  * Fixed usepushurl to work when a read-only mirror being used as origin does not contain refs/changes from gerrit.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884801">- revert switch to singlespec. This is an insane complexification
  for no gain: git-review is a pure cli tool, not a module
  to import, and we never had a working python2- version anyway
  because all the tooling was excluded from packaging. So
  don't create packages that are unusable and deprecated.</changelog>
</package>
<package pkgid="1d9cc8e9f4f5e7b09069b940f1198764ca3d208f3f4f4a23edea5f910c21657c" name="git-review" arch="src">
  <version epoch="0" ver="1.28.0" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1337860800">- Initial version</changelog>
  <changelog author="rhafer@suse.com" date="1348142400">- Update to 1.18:
  * Adds Python3 support and various bugfixes
- Package a default configuration file to disable the automatic check
  for new git-review releasess on PyPI. Otherwise git-review refuses
  to work when a new release is available on PyPI</changelog>
  <changelog author="saschpe@suse.de" date="1361966400">- Update to version 1.20:
  + Avoid symlinks in the manpage path
- Changes from version 1.19:
  + Allow download of reviews from deleted accounts
  + See https://github.com/openstack-infra/git-review/compare/1.18...1.19
- Renamed from python-git-review, it's a tool not a library
- Install man-page in correct location
- Explicit %py_requires, since we don't have files in %python_sitelib</changelog>
  <changelog author="vmiklos@suse.com" date="1370260800">- Update to version 1.22
- Changes from version 1.20:
  + Allows easy cherry-picking of a change
  + See https://github.com/openstack-infra/git-review/compare/1.20...1.22</changelog>
  <changelog author="aj@suse.com" date="1378900800">- Add patch git-review-username.diff to prefer .gitconfig username
  (see https://review.openstack.org/46015)
- Update to version 1.23:
    Expand multiple commit submission warning.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="dmueller@suse.com" date="1400760000">- update to 1.23.61:
  * Topic: do not use '(detached' when detached
  * Use gerrit 2.8.5 instead of gerrit 2.6.1 in tests
  * Allow to specify default scheme in .gitreview file
  * Correct test_remote to support branchs without upstream
  * Remove parsing of --help and variants from our code
  * Python2: fixed UnicodeEncodeError
  * Skip invalid unicode in commit messages
  * Git review assumes the wrong ssh default port
  * Add http(s) protocol support to fetch_review and list_reviews
  * git-review.1 manpage fix for groff warnings
  * Fix parsing of SCP-style URLs, as these are valid in Git itself
  * "git review --setup" failed in Chinese locale
  * Bump hacking version in requirements
  * Reduce testr concurrnecy to 2
  * Add http(s) protocol support to set_hooks_commit_msg
  * Retrieve remote pushurl independently of user's locale
  * Add http(s) protocol support to test_remote
  * Verify if every attached file exists. Attach gerrig.config
  * Wrap exceptions that occur while running external process
  * Make Gerrit port and dir selection deterministic
  * Don't try to attach known_hosts if it's not there
  * Remove tox locale overrides
  * Fix the regex for setting topic
  * Add 2m timeout to tests
  * Attach Gerrit logs and known_hosts to failed tests
  * Change test gerrit ssh/http ports offset
  * Correct .Fl typo WRT --compare in the manual page
  * Ignore content of merge commits in reporting
  * Remove empty lines from git log output
  * Preserve merges when doing a rebase
  * Split git rev-parse --show-toplevel --git-dir on newline
  * Prefer .gitconfig username
  * Add more deterministic port selection for Gerrit
  * Document source location as git.openstack.org
  * Implement integration tests
  * Migrate to pbr
  * No longer check for new git-review releases
- remove git-review-username.diff: merged upstream</changelog>
  <changelog author="speilicke@suse.com" date="1404475200">- Avoid source Url, we're packaging from git</changelog>
  <changelog author="bwiedemann@suse.com" date="1405512000">- update to 1.24
  * Require python-requests
  * Update homepage on PyPI
  * Update requirements to OpenStack's recommendations
  * Update the README to mention dependencies
  * Ensure username is set for all tests
  * Provide nicer user message for missing remote ref
  * Fix a typo in HACKING.rst
  * Ignore newline in bp/bug search in commit message
  * Restrict tests SSH auth to only the provided key
  * Disable proxies for tests that clone over http
  * Keep track of gerrit.war and golden_site versions
  * Fix typo in manpage s/gireview/gitreview/
  * Correct git review -l over http(s)</changelog>
  <changelog author="bwiedemann@suse.com" date="1411387200">- Require python-setuptools to fix CLI</changelog>
  <changelog author="tbechtold@suse.com" date="1434196800">- update to 1.25.0:
  * Add ?git-review -l? to man page synopsis and usage doc
  * Add reviewers on upload
  * Update project links
  * Override E-mail in Gerrit integration tests
  * Fixed a dead link to the git-review docs
  * Provide an explanation on failed rebase
  * Switch to requests to support proxying of 'https'
  * Use plumbing rev-parse to get the branch name
  * Isolate tests from user/system git configuration
  * Push language override down into the cmd wrapper
  * git review -sv gets more verbose
  * Add utf-8 char support
  * Choose tracked branch for rebase when submitting
  * pbr should install the manpage
  * get_remote_url(): also honor url.*.pushInsteadOf
  * Support authentication in run_http_exc
  * Split README.rst into separate doc files
  * Handle correctly http error raise in run_http_exc
  * Fix encoding header
  * Workflow documentation is now in infra-manual
  * Update tests to use Gerrit 2.9.2
  * Use 'no_proxy' env variable in addition to uppercase
  * Enable color support based on tty and config
  * get_remote_url(): honor any "url.&lt;base&gt;.insteadOf" config setting
  * Convert add_remote to use GitReviewExceptions
  * Prefer git-config over git-review config files
  * Isolate tests from user/system config
  * Switched documentation to point to storyboard
  * Fix ---list and "departement" typos in man page
  * Align git-review and python -m git_review.cmd behaviors
  * Define -T/--no-topic to disable review submit with topic
  * Work toward Python 3.4 support and testing
  * -F/--force-rebase has no effect if rebase is disabled by config
  * Remove useless constants
  * Improve windows support for git-review --setup
  * Fix groff warnings with manpage
  * Enabled hacking checks H305 and H307
  * Prevent long subjects in reviews causing spurious blank lines
  * added link to get-pip to readme
  * Disable ssh/scp password authentication during tests
  * Update tests to use Gerrit 2.8.6.1
  * Build universal wheels</changelog>
  <changelog author="tbechtold@suse.com" date="1440676800">- Remove %{_sysconfdir}/git-review/git-review.conf from package.
  File is deprecated.</changelog>
  <changelog author="dmueller@suse.com" date="1510574400">- add git-2.15-compat.patch: fix compat with git 2.15</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1546948800">- Update to 1.27.0:
  * Work with python3
- Remove patch in upstream: git-2.15-compat.patch
- Switch to source url downloads
- Switch URL to point to active site
- Switch to singlespec</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884800">- update to 1.28.0 (bsc#1134089):
  * Support for auto-configuration of topic names based on the
  presence of keywords in the commit message is removed. Previously,
  keywords such as bug, bp or lp followed by a number would result
  in branch names containing the associated number, e.g. bug/123.
  This feature was OpenStack specific, was a frequent source of bugs
  and clearly wasn?t being used that often, given that StoryBoard
  is a thing now and no one had updated this feature to handle that metadata.
  * Fixed usepushurl to work when a read-only mirror being used as origin does not contain refs/changes from gerrit.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1556884801">- revert switch to singlespec. This is an insane complexification
  for no gain: git-review is a pure cli tool, not a module
  to import, and we never had a working python2- version anyway
  because all the tooling was excluded from packaging. So
  don't create packages that are unusable and deprecated.</changelog>
</package>
<package pkgid="df818efee0f2985d3bddeec3d0f73e76775e527ddb3af7acad3565bf19bb0bbf" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="13357b6c9bce79d1109827152d72ee077fc5c502d8854606e4d817b51be469c7" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="19161d1ded4198ab23ee0a3589fc73411a278c74b502cc173b53e5a0fc43c0ad" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="2b2a7b81efecbdcf68609e200567ba6e6a3d37147cdec786273fe037c1824141" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="4f8bfe819dab10e5e12c316ed70534a0934cbf143a1cb20ef212f394da0f090a" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="467f17d4de0bf26bccfbbf4389698042372dac45219cad948d6fa86c4b5f76c8" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="8171c83533dd302b214455bef2dcb0e5fb18a60de64380559d9b473d02853de3" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="8728508f68c6f0467d4950435827596d7208029955a7e819fdd47f59241f14da" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
</package>
<package pkgid="bf354adcdbda129493a9c35aa5ffd30dd813f492bda2933557e4868019003167" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519646400">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
  <changelog author="tiwai@suse.de" date="1539000000">- Fix VUL-0: arbitrary code execution via .gitmodules
  (CVE-2018-17456, bsc#1110949):
  0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  0003-submodule-config-ban-submodule-paths-that-start-with.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1543233600">- fix CVE-2018-19486 (bsc#1117257)
  * git-mark-path-lookup-errors.patch</changelog>
</package>
<package pkgid="dfd11e232c68b85b0e271d482ad815f73f8d3701036703ccf1615df0fa453973" name="gitolite" arch="noarch">
  <version epoch="0" ver="3.6.11" rel="lp150.2.6.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
  <changelog author="chris@computersalat.de" date="1547467200">- update to 3.6.11
  - fix for boo#1121570 (CVE-2018-20683)
    security issue in 'rsync' (bundle helper); see commit 5df2b81 for more
- update to 3.6.10
  - fix up boo-boo caused by previous release; see mails on list for details</changelog>
</package>
<package pkgid="f1ea13d9f8ac4db45d26d8390e9201c6a8a990ea389fc96f8bf0a1dca632cf2f" name="gitolite" arch="noarch">
  <version epoch="0" ver="3.6.9" rel="lp150.2.3.1"/>
  <changelog author="asn@cynapses.org" date="1292500800">- Initial package version 1.5.7</changelog>
  <changelog author="chris@computersalat.de" date="1297684800">- update to version 1.5.9
  - Nokia MeeGo team contributed ldap scripts
  - large configs should now be twice as fast (except when gl-perms exists)
    due to my finding and eliminating a wasted parse_acl
  - major change: split the config file when in big-config mode
    (includes a data format change)
  - GL_ALL_READ_ALL to make things much, (MUCH!) faster for sites where all
    can read all repos (like Fedora)
  - rc file revamp -- was getting too big and unwieldy; now the documentation
    is in a new file instead of inline
  - allow gitolite to be used even when users have real IDs (thus $HOME is not
    valid to find the rc file); allow /etc/gitolite/gitolite.rc then
  - BIG one for adc writers -- full blown access checks (ref level) can be
    done from an ADC now (though it has to be in perl, not shell)!
  - allow full access checks from perl (shell can only do level 1 checks);
    useful in hooks or ADCs
- v1.5.8
  - Jeff from KDE contributed the watch ADC
  - allow disabling gitolite (write access only) to take backups
  - document how to move gitolite from one server to another
  - custom permissions categories (default being READERS and WRITERS) for
    setperms (thanks to Jeff from KDE for the idea/need)
- noarch pkg, not only for suse &gt; 1110
- reworked rpm-system patch
- add group/user git</changelog>
  <changelog author="chris@computersalat.de" date="1297771200">- improve co-operation with git-web
  o add gitweb patch
  o add permissions file to doc
  o add apache user to git group</changelog>
  <changelog author="dmueller@suse.de" date="1320926400">- change requires to git-daemon</changelog>
  <changelog author="chris@computersalat.de" date="1323864000">- update to 1.5.9.1
  * IMPORTANT SECURITY FIX; PLEASE UPGRADE IF YOU'RE USING
    SOMETHING OLDER THAN THIS ONE
  - supercool new 'git' adc; so cool it's disabled by default
  - '-prune' added to find commands; makes a big diff if REPO_BASE is
    NFS/CIFS mounted
  - first python ADC contributed -- 'perms' makes setperms etc easier
    to do
  - 'set-head' ADC added
  - v2.0rc1; major refactor</changelog>
  <changelog author="chris@computersalat.de" date="1344686400">- update to 2.3.1
  - fix bug where config statements would get ignored if you had a
    description set. The biggest problem was that this would affect
    mirroring.
  - for mor info please see the CHANGELOG file
- rebase patches
- fix License: GPL-2.0 -&gt; GPL-2.0+
- add skeldir
  * add .gitolite.rc to skeldir
- add README.SuSE</changelog>
  <changelog author="chris@computersalat.de" date="1350907200">- fix for bnc#784983
  * add subpkg skel
  - hold files needed for git user homedir (/etc/skelgit/....)
  * rework spec pre section</changelog>
  <changelog author="darin@darins.net" date="1412596800">- update to 3.6.1
- updated and renamed README.SUSE
- removed patches and unused files
- spec cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1430049600">- Update to 3.6.3
  * allow limited use of 'git config' using the new 'config' command
  * accept openssh 6.8's new fingerprint output format
  * (finally!) allow limited symlinks within ~/repositories; see
    commit 8e36230 for details
  * perms command now lists available roles
  * minor backward compat breakage: 'perms -l repo' no longer works;
    see 'perms -h' for new usage
  * allow gitolite-shell to be used as $SHELL (experts only; no
    support, no docs; see commit 9cd1e37 for details)
  * help with 'git push --signed' using a post-receive hook to adopt
    push certs into 'refs/push-certs'; for details see
    contrib/hooks/repo-specific/save-push-signatures
  * new 'transparent proxy' feature for git repos; see
    src/lib/Gitolite/Triggers/TProxy.pm for details</changelog>
  <changelog author="tampakrap@opensuse.org" date="1431864000">- Change URL to gitolite.com
- Use full URL path for the source tarball
- Add Git as runtime dependency, it's heavily needed</changelog>
  <changelog author="rpm@fthiessen.de" date="1469793600">- Update to 3.6.5
  * allow creator check to be bypassed during mirroring
  * handle new style ssh fingerprinting correctly
    (thanks to Robin Johnson)
  * allow pre-auto-gc as a repo-specific hook
  * optimise mirror pushes for heavily used repos
  * create-with-reference trigger: on repo creation, setup
    objects/info/alternates for a server side alternate object store.
  * 'mirror status all all' prints a list of repos that have *some*
    error, which is arguably more useful for further action/processing
  * allow incrementally adding more repo-specific hooks
- 2015-11-01  v3.6.4
  * a ref-create bug in wild repos was fixed
  * some contrib code related to AD integration, and to redmine user
    aliases
  * teach Alias.pm a few new tricks
  * remove a race condition in 'create' command that affected the
    'default roles' setting
  * make 'who-pushed' more efficient (local push logs, and
    'tip search')
  * 'gitolite query-rc' learns '-d' ('--dump') option</changelog>
  <changelog author="chris@computersalat.de" date="1470657600">- fix changes file
  * add missing ChangeLog info</changelog>
  <changelog author="tampakrap@opensuse.org" date="1473336000">- change the homedir of the git user to /srv/gitolite, to prevent ownership
  conflicts of the /srv/git directory with the git-daemon package</changelog>
  <changelog author="jengelh@inai.de" date="1483358400">- Do not suppress errors from useradd/groupadd
- Replace unknown "groupmod -A" call by "usermod -a -G".</changelog>
  <changelog author="bwiedemann@suse.com" date="1484654400">- dont include rebuild counter in rpm to make build-compare happy</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1528113600">- Update to 3.6.7
  * allow repo-specific hooks to be organised into
    subdirectories, and allow the multi-hook driver to be
    placed in some other location of your choice
  * allow simple test code to be embedded within the
    gitolite.conf file; see contrib/utils/testconf for how.
    (This goes on the client side, not on the server)
  * allow syslog "facility" to be changed, from the default of
    'local0'
  * allow syslog "facility" to be changed, from the default of
    replaced with a space separated list of members
- 2016-09-08  v3.6.6
  * simple but important fix for a future perl deprecation
    (perl will be removing "." from @INC in 5.24)
  * 'perms' now requires a '-c' to activate batch mode
    (should not affect interactive use but check your scripts
    perhaps?)
  * gitolite setup now accepts a '-m' option to supply a
    custom message (useful when it is used by a script)</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1536840000">- Update to 3.6.9:
  * CVE-2018-16976: prevent racy access to repos in process of migration to
    gitolite (bsc#1108272)
  * 'info' learns new '-p' option to show only physical repos (as opposed to
    wild repos)
- Update to 3.6.8:
  * fix bug when deleting *all* hooks for a repo
  * allow trailing slashes in repo names
  * make pre-receive hook driver bail on non-zero exit of a pre-receive hook
  * allow templates in gitolite.conf (new feature)
  * various optimiations
- Applied spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Trim bias from descriptions.</changelog>
</package>
<package pkgid="d88a49df1226e563beeb065433f979e3cb064a2bd2dda56519af452a54e159ef" name="gjs" arch="src">
  <version epoch="0" ver="1.50.4" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="1b29e4864b0d8914b7b10071b4bd656f769e0fa594e03d2e509cf2f64c88ce94" name="gjs" arch="x86_64">
  <version epoch="0" ver="1.50.4" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.48.1:
  + gjs crashed with SIGSEGV in gjs_object_from_g_object
    (bgo#779918).
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494158400">- Update to version 1.48.3:
  + arg: don't crash when asked to convert a null strv to an array
    (bgo#775679).
  + gjs 1.48.0: does not compile on macOS with clang (bgo#780350).
  + Modernize shell scripts (bgo#781806).
- Changes from version 1.48.2:
  + Intermittent crash in gnome-shell, probably in weak pointer
    updating code (bgo#781194).
  + Add contributor's guide (bgo#781297).
  + Misc fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.48.4:
  + gnome-shell 3.24.1 crash on wayland (bgo#781799).</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.48.5:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
  + Fix format string, caught by static analysis.
  + Fixes for regression in 1.48.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.48.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread - more fixes for bgo#783935.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884801">- Update to version 1.49.1:
  + test GObject Class failure (bgo#693676).
  + Enable incremental GCs (bgo#724797).
  + Don't silently accept extra arguments to C functions
    (bgo#680215).
  + Special case GValues in signals and properties (bgo#688128).
  + [cairo]: Instantiate wrappers properly (bgo#614413).
  + Warn if we're importing an unversioned namespace (bgo#689654).
  + Fixes in preparation for SpiderMonkey 45.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884802">- Update to version 1.49.2:
  + New feature: When building an app with the Package module,
    using the Meson build system, you can now run the app with
    "ninja run" and all the paths will be set up correctly.
  + New feature: Gio.ListStore is now iterable.
  + New API: Package.requireSymbol(), a companion for the already
    existing Package.require(), that not only checks for a GIR
    library but also for a symbol defined in that library.
  + New API: Package.checkSymbol(), similar to
    Package.requireSymbol() but does not exit if the symbol was not
    found. Use this to support older versions of a GIR library with
    fallback functionality.
  + New API: System.dumpHeap(), for debugging only. Prints the
    state of the JS engine's heap to standard output. Takes an
    optional filename parameter which will dump to a file instead
    if given.
  + Fixes in preparation for SpiderMonkey 52.
  + Misc fixes.
  + Bugs fixed: bgo#775868, bgo#781882, bgo#781882, bgo#782065,
    bgo#782069, bgo#779593, bgo#782310, bgo#781219, bgo#780106.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502884803">- Update to version 1.49.3:
  + Fixes in preparation for SpiderMonkey 52.
  + Use the Centricular fork of libffi to build on Windows.
  + Use a C++ auto pointer instead of g_autofree (bgo#777597).
  + Build failure in GNOME Continuous (bgo#783031).</changelog>
  <changelog author="dimstar@opensuse.org" date="1503316800">- Update to version 1.49.90:
  + New API: GObject.registerClass(), intended for use with ES6
    classes.
  + Misc 1.49 and mozjs52 enhancements (bgo#785040).
  + Switch to native promises (bgo#784713).
  + Can't call exports using top-level variable toString
    (bgo#781623).
  + Properties no longer recognized when shadowed by a method
    (bgo#785091).
  + Backport of changes required for use with mozjs-55.
- Changes from version 1.49.6:
  + GJS crash in needsPostBarrier, possible access from wrong
    thread (bgo#783935).
- Changes from version 1.49.4:
  + This version of GJS is based on SpiderMonkey 52.
  + New language features
  - ES6 classes.
  - Async functions and await operator.
  - Reflect - built-in object with methods for interceptable
    operations.
  + Backwards-incompatible changes
  - Non-standard "let expressions" and "let blocks" (e.g.,
    `let (x = 5) { use(x) }`) are not supported any longer
  - Non-standard flags argument to String.match(),
    String.replace(), and String.search() (e.g.
    `str.replace('foo', 'bar', 'g')`) is now ignored.
  - Non-standard WeakSet.clear() method has been removed.
  - Variables declared with let and const are now 'global lexical
    bindings', as per the ES6 standard, meaning that they will
    not be exported in modules.
  + Closed bugs:
  - Prepare for SpiderMonkey 45 and 52 (bgo#781429).
  - Add a static analysis tool as a make target (bgo#783214).
  - Fix the build with debug logs enabled (bgo#784469).
  - Switch to SpiderMonkey 52 (bgo#784196).
  - Test suite fails when run with JIT enabled (bgo#616193).
- Replace pkgconfig(mozjs-38) BuildRequires for
  pkgconfig(mozjs-52), following upstreams port.
- Add libxml2-tools BuildRequires: new dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 1.49.91:
  + Deprecation: The private "__name__" property on Lang.Class
    instances is now discouraged. Code should not have been using
    this anyway, but if it did then it should use the "name"
    property on the class (this.__name__ should become
    this.constructor.name), which is compatible with ES6 classes.
  + Closed bugs:
  - Use ES6 classes (bgo#785652).
  - A few fixes for stack traces and error reporting
    (bgo#786183).
  - /proc/self/stat is read for every frame if GC was not needed
    (bgo#786017).
  + Build fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Temporariliy change license to GPL-2.0+: there are a couple files
  in the source tree, that link into libgjs and bring the code to
  GPL-2.0+ level; upstream is working on relicensing them
  (bgo#787263).</changelog>
  <changelog author="dimstar@opensuse.org" date="1504612800">- Update to version 1.49.92:
  + It's now possible to build GJS with sanitizers (ASan and
    UBSan) enabled; add "--enable-asan" and "--enable-ubsan" to
    your configure flags.
  + There's also a "make check-valgrind" target which will run
    GJS's test suite under Valgrind to catch memory leaks and
    threading races.
  + Many of the crashes in GNOME 3.24 were caused by GJS's closure
    invalidation code which had to change from the known-working
    state in 1.46 because of changes to SpiderMonkey's garbage
    collector. This code has been refactored to be less
    complicated, which will hopefully improve stability and
    debuggability.
  + Docs tweaks.
  + Bugs fixed: bgo#783220, bgo#786668, bgo#786995, bgo#787113.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.50.0:
  + Relicense coverage.cpp and coverage.h to the same license as
    the rest of GJS (bgo#787263).
- Change license back to MIT.</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Rectify summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 1.50.1:
  + As a debugging aid, gjs_dumpstack() now works even during
    garbage collection.
  + Code coverage tools did not work so well in the last few 1.49
    releases. The worst problems are now fixed, although even more
    improvements will be released in the next unstable version.
    Fixes include:
  - Specifing prefixes for code coverage files now works again.
  - Code coverage now works on lines inside ES6 class
    definitions.
  - The detection of which lines are executable has been improved
    a bit.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509451200">- Update to version 1.50.2:
  + Closed bugs and merge requests:
  - tweener: Fix a couple of warnings.
  - legacy: Allow ES6 classes to inherit from abstract Lang.Class
    class.
  + Minor bugfixes.
- Update Url to https://wiki.gnome.org/Projects/Gjs: current Gjs'
  project web page.
- Alignment BuildRequires with configure:
  + Add pkgconfig(*): cairo-gobject, gio-2.0, gobject-2.0 and
    gthread-2.0.
  + Drop pkgconfig(libmozjs-52) and libxml2-tools.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517313600">- Update to version 1.50.4:
  + Gnome Shell crash with places-status extension when you plug an
    USB device (glgo#gjs#33 and glgo#gjs#38).
- Changes from version 1.50.3:
  + GJS will now log a warning when a GObject is accessed in
    Javascript code after the underlying object has been freed in
    C. (This used to work most of the time, but crash
    unpredictably.) We now prevent this situation which, is usually
    by caused a memory management bug in the underlying C library.
  + Closed bugs and merge requests:
  - Add checks for GObjects that have been finalized
    (glgo#gjs#21, glgo#gjs#23, glgo#gjs#25, glgo#gjs#28,
    glgo#gjs#33).
  - Test "Cairo context has methods when created from a C
    function" fails (glgo#gjs#27, glgo#gjs#35).
  - Various fixes from the master branch for rare crashes.</changelog>
  <changelog author="fcrozat@suse.com" date="1519041600">- Do not try to build against s390 anymore, since it doesn't build
  with mozjs54 and s390 is only for compability with old
  applications (gjs doesn't qualifies).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559822400">- Add gjs-disable-destroyed-object-criticals.patch: We have a bunch of
  corruption right now spamming the log. This commit gets rid of the
  spam unless G_MESSAGES_DEBUG is set (glgo#GNOME/gjs!71, boo#1117221).</changelog>
  <changelog author="hpj@suse.com" date="1560254400">- Add gjs-aggressive-gc.patch (bsc#1093541). This ensures the GC
  runs repeatedly until there are no more objects to be destroyed.</changelog>
</package>
<package pkgid="05a5457da519ccd6716b7b7bad7c7c22bcbe85d0d5bfbc9ff2e421077ce5dd7f" name="glade-catalog-evolution" arch="x86_64">
  <version epoch="0" ver="3.26.6" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570, bgo#781660,
    bgo#781647, bgo#781722, bgo#781833, bgo#781890, bgo#781116,
    bgo#778423, bgo#780088, bgo#569684, bgo#782153.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Update to version 3.24.3:
  + [ECompEditor]:
  - Ensure local store directory exists before saving
    attachments.
  - Use ICAL_FILENAME_PARAMETER for attachments, if available.
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Bugs fixed: bgo#720197, bgo#782529, bgo#773420, bgo#782803,
    bgo#783106, bgo#537048, bgo#783191, bgo#782052, bgo#783317,
    bgo#782210, bgo#783353, bgo#782470, bgo#783682.
  + Updated translations.
- Pass -DCMAKE_SKIP_RPATH=OFF to configure, needed after upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.24.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Bugs fixed: bgo#783905, bgo#782210, bgo#784246, bgo#780934,
    bgo#784445, bgo#784438, bgo#781309, bgo#784664, bgo#784665,
    bgo#784776, bgo#784663, bgo#784874.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 3.24.5:
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#785188, bgo#785233,
    bgo#785412, bgo#777086, bgo#785717, bgo#785800.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193600">- Update to version 3.25.1:
  + Crash under e_meeting_time_selector_refresh_cb().
  + Drag and drop to the editor can lock the Evolution.
  + Dropping text/* content to the editor is not handled by WebKit.
  + Fix the compilation warning with gcc 7.
  + [ENameSelectorEntry] Avoid fake "changed" signals on focus-in.
  + Calendar Print skips print dialog.
  + Remove some left-over debug prints.
  + User documentation improvements.
  + Bugs fixed: bgo#781404, bgo#781557, bgo#781570.
  + Updated translations.
- Bump evolution_base_version to 3.26, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193601">- Update to version 3.25.2:
  + Show VERSION_SUBSTRING and VERSION_COMMENT in Help-&gt;About.
  + Fix occasional runtime warning from
    e_web_extension_set_clipboard_flags().
  + Mark editor as changed if using 'Wrap lines' action.
  + Mark editor as changed if deleting a selection.
  + MailFolderCache can sometimes block folder 'changed'
    notifications.
  + Correct possible ref/unref imbalance of a CamelFolder instance.
  + Remove misplaced 'return' call.
  + Refer to Polari instead of Empathy for IRC support in Help.
  + Use new e_util_generate_uid() instead of
    e_cal_component_gen_uid().
  + [ECompEditor] Ensure local store directory exists before saving
    attachments.
  + [ECompEditor] Use ICAL_FILENAME_PARAMETER for attachments, if
    available.
  + Bugs fixed: bgo#781660, bgo#781647, bgo#781722, bgo#781833,
    bgo#781890, bgo#781116, bgo#778423, bgo#780088, bgo#569684,
    bgo#782153, bgo#720197, bgo#782529, bgo#782438, bgo#773420.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1502193602">- Update to version 3.25.3:
  + Use SIGTERM instead of SIGQUIT in killev
    (evolution --force-shutdown).
  + Allow select the same source and destination calendar in Copy
    To Calendar.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + Use ESourceRegistryWatcher in alarm-notify.
  + Allow overwrite of CMAKE_SKIP_RPATH variable.
  + e_mail_folder_to_full_display_name: Special-case virtual
    Trash/Junk folders.
  + Correct Unicode opening quotation mark.
  + Bugs fixed: bgo#205718, bgo#266621, bgo#499319, bgo#531945,
    bgo#537048, bgo#782052, bgo#782210, bgo#782470, bgo#782803,
    bgo#783106, bgo#783191, bgo#783317, bgo#783348, bgo#783353,
    bgo#783682.
  + updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502193603">- Update to version 3.25.90:
  + Provide e_alert_bar_submit_alert() to avoid code duplication.
  + Workaround broken GPG encrypted messages from Exchange and
    GroupWise servers.
  + Reply-To header value lost on Draft message reopen.
  + Add a WebDAV browser into the Account Editor.
  + Set shadow for Aliases scrolled window in mail account
    Properties.
  + Use SRV records for configuration lookup.
  + Remove change-switcher-appearance.page - too specific; not
    common topic.
  + Fix incorrect alt desc text for a screenshot.
  + Remove obsolete TODO comment.
  + Fix date in previous commit.
  + Read Receipts settings are also available in EWS/MAPI accounts.
  + Cover actual EWS account settings nowadays.
  + Use same string as in 'Manage signatures' page about '-- '
    delimiter.
  + Provide actual links to the pages dedicated to these bullet
    points.
  + Grammar fixes in help.
  + Remove image from French user docs which is not used anywhere.
  + Bugs fixed: bgo#785031, bgo#785127, bgo#271481, bgo#785188,
    bgo#785233, bgo#785412, bgo#777086, bgo#785650, bgo#750564,
    bgo#785717, bgo#785800, bgo#768260, bgo#784214, bgo#784214,
    bgo#784767, bgo#784527, bgo#784527, bgo#784527, bgo#785644,
    bgo#783793.
  + Updated translations.
- Changes from version 3.25.4:
  + Sort accounts in identity combo box (From: combo in mail
    composer).
  + Make it possible to debug filters on stdout.
  + Use the fancy Unicode quotation marks in a new string.
  + Change --module-dir for gtkdoc-fixxref call.
  + Make it possible to change theme for text-highlight module.
  + Cannot focus contact list editor's list name.
  + Fix runtime warning on close from e_content_request_process().
  + Use the fancy Unicode quotation marks in a new file.
  + Prefer gtk_clipboard_wait_for_targets() over
    gtk_clipboard_request_targets().
  + Wrong folder URI used for message notifications.
  + AlertBar from ShellContent not freed.
  + Derive date from selected day when creating event/meeting in
    ToDo bar.
  + Remove an obsolete comment.
  + Fix a typo.
  + Bugs fixed: bgo#783905, bgo#783968, bgo#783987, bgo#339675,
    bgo#782210, bgo#772572, bgo#235022, bgo#784246, bgo#783908,
    bgo#780934, bgo#781744, bgo#784445, bgo#784438, bgo#781309,
    bgo#781790, bgo#784664, bgo#784665, bgo#784746, bgo#784751,
    bgo#784776, bgo#784663, bgo#773550, bgo#771404, bgo#784874,
    bgo#783363, bgo#783504, bgo#783533, bgo#744526, bgo#780329.
  + Updated translations.
- Add explicit gettext BuildRequires.
- Stop post(un) handling, no longer needed as we have file-triggers
  taking care of this now. This means dropping
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un) macros.
- Rename lang subpackage following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 3.25.91:
  + Add new developer documentation files into
    evolution-util-docs.sgml.in.
  + Update mail filter conditions (as per bgo#698439).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92.2:
  + Do not use PROJECT_VERSION_TWEAK when searching for eds
    dependencies.
- Changes from version 3.25.92.1:
  + Revert "Rename evolution.desktop to
    org.gnome.Evolution.desktop".
- Changes from version 3.25.92:
  + Default mail account not indicated after restart.
  + Show EDateEdit time combo popup in columns.
  + [ECompEditor] Preserve original duration when changing time.
  + Correct timezone handling when printing calendars.
  + Custom page setup not properly restored when printing.
  + Rename evolution.desktop to org.gnome.Evolution.desktop.
  + Add debugging console prints for message-list.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Add flatpak build script.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 3.26.1:
  + Add flatpak build script for stable Evolution version.
  + Show also git commit ID of Evolution in VERSION_SUBSTRING of
    flatpak build.
  + Correct runtime warning when creating All Day Appointment.
  + Cannot change organizer of existing meeting.
  + Use large-enough buffer in e_calendar_item_draw_day_numbers().
  + Fix some syntax errors in translations.
  + Remove linked page that got deleted in 8f967d9f.
  + Bugs fixed: bgo#758945, bgo#787411, bgo#785618, bgo#787590,
    bgo#785178, bgo#787646, bgo#739059, bgo#788050, bgo#788051,
    bgo#788164, bgo#788231, bgo#788112.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Initialize libxml2 global memory in the main().
  + Use icaltime_is_utc() instead of icaltimetype::is_utc.
  + Label shortcuts prevent typing numbers.
  + Crash after import file disappears before import is done.
  + Crash under e_dom_resize_document_content_to_preview_width().
  + [ECellCombo] Misplaced combo popup under Wayland.
  + Disable expand of To Do bar icon renderer.
  + Store To Do bar width as proportion, not as absolute value.
  + Bugs fixed: bgo#696047, bgo#781645, bgo#788156, bgo#788293,
    bgo#788430, bgo#788450, bgo#788478, bgo#788639, bgo#788675,
    bgo#788686, bgo#788829, bgo#788916, bgo#789009.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513771200">- Update to version 3.26.3:
  + Workaround bgo#674885 (type initialisation deadlock in
    GObject).
  + [Calendar] set_style_from_attendee(): Prevent crash when
    attendee has no mail set.
  + Drag&amp;drop of multiple messages from message list to composer
    fails.
  + [Composer] Better care of autosave snapshot after
    WebKitWebProcess crash.
  + Bugs fixed: bgo#789648, bgo#700778, bgo#790263, bgo#790326,
    bgo#789526, bgo#789571, bgo#790069, bgo#790291, bgo#680268,
    bgo#790311, bgo#790944, bgo#790666, bgo#790952, bgo#791203.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515412800">- Update to version 3.26.4:
  + Bugs fixed: bgo#791291, bgo#791341, bgo#791346, bgo#791793.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517832000">- Update to version 3.26.5:
  + Crash under message-list.c:free_message_info_data().
  + Indentation in plain text adds unwanted spaces around links.
  + Composer-autosave: Use-after-free during snapshot save to file.
  + Bugs fixed: bgo#339675, bgo#792343, bgo#792385, bgo#792480,
    bgo#792781, bgo#792736, bgo#792909, bgo#788589, bgo#788823,
    bgo#720387.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Remove BuildRequires on pkgconfig(libgtkhtml-4.0): evolution only
  relies on webkit2gtk3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251200">- Update to version 3.26.6:
  + itip-formatter: Meeting request attendee response address not
    properly filled.
  + Bugs fixed: bgo#793582.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="mgorse@suse.com" date="1555070400">- Add evolution-show-security-bar-above-message-headers.patch:
  show security bar above message headers (boo#1125230
  CVE-2018-15587 glgo#GNOME/evolution#120).</changelog>
</package>
<package pkgid="02959ef52d2334531af8c35a9a0b9be828a1a0605484d36613d22bc625c7ceb9" name="glib-networking" arch="src">
  <version epoch="0" ver="2.54.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="708b91dc440edbb5212ca47ad201ca319650c340495cc27a818171a21d978b1b" name="glib-networking" arch="x86_64">
  <version epoch="0" ver="2.54.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="579af0dafbeeaeec8c59eeb415faca5dc95e2ce758f573efd8c22c20d17ee7f9" name="glib-networking-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="ce38e9f34992dd57e24d4e185866ff99cd9c6ded88edd33915a4f2b4c3c78152" name="glib-networking-lang" arch="noarch">
  <version epoch="0" ver="2.54.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1418817600">- Update to version 2.43.1:
  + The GTlsClientConnection "use-ssl3" property now falls back to
    TLS 1.0 if SSL 3.0 has been disabled, rather than just failing.
    Also, we now use the gnutls %LATEST_RECORD_VERSION option by
    default (to allow connecting to certain servers that were
    incorrectly patched for the POODLE attack), but also make sure
    to remove that option in the fallback ("use-ssl3") mode (to
    allow connecting to other servers that are differently broken)
    (bgo#738633, bgo#740087).
  + tls/gnutls: Miscellaneous warning, debugging, and leak fixes
    (bgo#736757, bgo#736809, bgo#737106).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Update to version 2.43.91:
  + tls/gnutls: Removed a workaround for connecting to servers with
    weak DH parameters, which was apparently only needed because
    gnutls was prioritizing DHE over RSA (rh#1177964#c8).
  + tls/gnutls: We now require gnutls 3.x again. (In fact, 2.42.1
    and 2.43.1 accidentally used a 3.x-only function, so we already
    required it, we were just failing to declare that fact).
  + tls/tests: Skip certain tests when running against old gnutls
    or GLib releases. (glib-networking 2.43.91 itself does not
    require GLib 2.43, but one of the test cases does).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426593600">- Update to version 2.43.92:
  + Fix TLS session caching when using session tickets
    (bgo#745099).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427112000">- Update to version 2.44.0:
  + Stable release, no changes since 2.43.92.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Update to version 2.45.1:
  + tls/gnutls: Implement
    g_tls_client_connection_copy_session_state(), to allow
    implementing FTP-over-TLS in gvfs (bgo#745255).</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 2.46.0:
  + Various minor cleanups and small memory leak fixes.
  + Added a new test case for client certificate chain handling
    (bgo#754129).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 2.46.1:
  + Fixed a certificate chain validation problem that affected
    Facebook in Epiphany (bgo#750457).</changelog>
  <changelog author="zaitor@opensuse.org" date="1448366400">- Update to version 2.47.1:
  + Added a systemd service file for glib-pacrunner (bgo#755740).</changelog>
  <changelog author="dimstar@opensuse.org" date="1455624000">- Update to version 2.47.90:
  + gnutls: The non-PKCS#11 TLS plugin now uses gnutls's
    certificate validation code directly, rather than attempting to
    build a certificate chain itself first (bgo#753260 and others).
  + gnutls: Fixed a leak when closing a connection during an
    implicit handshake (bgo#736809).
  + gnutls: Fixed "make check" without PKCS#11 support
    (bgo#728977).
  + gnutls: Various changes in preparation for DTLS support (but
    not the actual DTLS support itself) (bgo#697908, bgo#735754).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458648000">- Update to version 2.48.0:
  + New stable release. (No changes since 2.47.90).</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 2.48.1:
  + Fixed translations in non-UTF-8 domains (bgo#765466).
  + Fixed bash-ism in configure (bgo#765396).
  + Updated translations.
- Stop passing V=1 to make, we do debugging locally.
- Add default http://www.gnome.org as Url: Silence rpmlint.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462795200">- Update to version 2.48.2:
  + gnutls: Fixed an infinite loop if a server sent two identical
    copies of its CA certificate (bgo#765317).
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1463486400">- Update to GNOME 3.20.2  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1471348800">- Update to version 2.49.90:
  + Ported to use upstream gettext rather than
    intltool/glib-gettext (bgo#768708).
  + Updated po files for future gettext versions.
  + Fixed translation lookup on Windows (bgo#765466).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 2.50.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 2.53.90:
  + gnutls: Stop using %LATEST_RECORD_VERSION in priority string,
    since that gives better compatibility with current gnutls /
    current real world (bgo#782218).
  + gnutls: Provide a better error message when a TLS alert is
    received (bgo#782218).
  + Updated translations.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Replace old macros and fixup RPM group.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 2.54.0:
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509105600">- Update to version 2.54.1:
  + gnutls: Fix using different client certs for different
    connections (bgo#781578).
  + Updated translations.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1557835200">- Fix invalid TLS sessions when TLS 1.3 is used (bsc#1134795)
  * add 0001-gnutls-Add-support-for-timeouts-on-GnuTLS-pulls.patch
- Polish spec with spec-cleaner</changelog>
</package>
<package pkgid="f1090fb25a2e89c5fda1a5c6472855a2cf2a568f239c78ed13c4adf030e734a1" name="glib2" arch="src">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="47780ca69c4a3015f33c0ce05f7ad0ff65f6477189913ae812b98a05b3737f5f" name="glib2" arch="src">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="0ca12babae67ab5a2c2ef8f4ff79767e235b55ae0920cd14101f49ec4237fb1c" name="glib2" arch="src">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="f1fe653941b96b5091b5f14d5d1543a546f268e7492963985ce719f6b42597cf" name="glib2" arch="src">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="59d614cbf944e6f1fab333ca39998dd9cb0b5ef112c9c320d932b9d1ff8c37ac" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="0793e05ef21e01feab9b8189c3b4e35b46b10872c7db50693353ad8c67c39ab3" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="ebe84c4a23a0e6daf7cf3fe23505dde3a6624acfc01b5c783789e1435fe6643b" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="acd52e856c05fb1278c4c6fbea1179cb5191c250220a04bce021858f64bea049" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="831f60ebeb98d0d467c15a5710c83a0d991c1922c78b329f4789a9ff6ed8237a" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="cc87d2f9bf362145c8a3b1a764941c786b406ce399c552da2e3ddb337633d94f" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="b691365416856fae6932c4a28733f1d991d5ec3ad92e8a3c3ee0bbb6b75be0c4" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="990bc849dfac2c57577ac85dff83869f86c2bb24fc4fa80e76ee19a48ab390c5" name="glib2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="f15cb98e1e34d88d3c77a8b8dc98e08ab8d6720f12297c9d2bce04f4ca325f71" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="43a15f4e0477e33069202e8a99d2a20ebb473afe4b367402af4449cae60a555f" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="b9a02b2e4eb07942f98d5f390768801e4915f323d206c1595079efba3011a683" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="a1e2eccf13a1cff6eed981f79a919a0a80f6438af9b6618bc0018b980b8b8414" name="glib2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="e47bb2122cee1473659de1e5fe2f6762cae455e7a696acc88aac17b2a57a2f1a" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="a683cbe76123c9758b725926e69fd6d1016c26b1b57aa83328a95e386e98d341" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="4fd78ae4371889d2e8e1b5d86cdbee93725f04194f0ef132c143e407e70b43f6" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="c2fdc70883d3e1f00aa59b5bda75bc0eaa7775ae2683f1033335fbc11f149be6" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="a776e143cf021eb66f3c2c44439a547daeb824166dcb16b2530286c702ac07a5" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="3d50a695730f694c384d80ace260301efb8b0f9c3e121e5b048a0c1f69af33af" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="9b1384731492dd21f1d6f67ddf9bf6ec1b0f09e37e2eb8f77d67b20b2e41a776" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="5c854955bdc928bab952f5ca3f71ce92c09bbb30905401bd685fbe169b9c576a" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="9d56bd979bef8386fe65ab86a7ab915cbea0902cf880f58febcda2e3796992b6" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
</package>
<package pkgid="3f8c12ed7fee0edb18ac3b1499fa930a37a5cfd2433d12bab38c33e6c001879e" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1551787200">- Add patch submitted upstream to handle an UNKNOWN NM connectivity
  the same as a NONE value. This partly fixes boo#1103678
  (packagekit reports the network as available on a computer
  without network connectivity which makes plasma-pk-update start
  an update check which obviously fails).
  * 0001-Handle-an-UNKNOWN-NetworkManager-connectivity-as-NONE.patch</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560772800">- Add glib2-CVE-2019-12450.patch: Backport from commit d8f8f4d6
  to fix a file permissions issue  while copy (boo#1137001,
  CVE-2019-12450).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1562241600">- Add glib2-CVE-2019-13012-keyfile-settings-Use-tighter-permissions.patch:
  When creating directories, create them with 700 permissions,
  instead of 777 (bsc#1139959, CVE-2019-13012, glgo#GNOME/glib#1658).</changelog>
</package>
<package pkgid="86a73c06954e600928407030a123c9ab2c4d2775f505c43ad5aa83d76ecd16af" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1498651200">- Update to version 2.53.2:
  + A few new number parsing functions have been added. These have
    better error handling than the existing ones.
  + glib-mkenums now supports /*&lt; private &gt;*/ and /*&lt; public &gt;*/.
  + GSettings now consider XDG_DATA_HOME in addition to
    XDG_DATA_DIRS.
  + Bugs fixed: bgo#674885, bgo#698064, bgo#732000, bgo#734946,
    bgo#741335, bgo#748263, bgo#776876, bgo#777030, bgo#780300,
    bgo#780309, bgo#781755, bgo#781826, bgo#781830, bgo#781847,
    bgo#781867, bgo#782068, bgo#782075, bgo#782089, bgo#782162,
    bgo#782237, bgo#782311, bgo#782628.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651201">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
</package>
<package pkgid="9842c2f4f53c4184414493dbf80f66e3ceb6443a7b898780c2578c31e19bbcd9" name="glib2-tools-32bit" arch="x86_64">
  <version epoch="0" ver="2.54.3" rel="lp150.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update to version 2.53.3:
  + Bugs fixed: bgo#658446, bgo#661926, bgo#674885, bgo#775593,
    bgo#776169, bgo#776333, bgo#776504, bgo#777307, bgo#778422,
    bgo#781301, bgo#782336, bgo#782996, bgo#783061, bgo#783130,
    bgo#783193, bgo#783201, bgo#783340, bgo#783350, bgo#783392,
    bgo#783593.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 2.53.4:
  + Unicode support has been updated to Unicode 10.0.0.
  + glib-genmarshal and glib-mkenums have been rewritten in python.
    Every effort has been made to keep compatibility. Please report
    problems related to these tools.
  + GLib can now be built with meson. Autotools are still
    supported.
  + Bugs fixed: bgo#722047, bgo#733821, bgo#773842, bgo#779332,
    bgo#780095, bgo#780634, bgo#783841, bgo#784000, bgo#784020,
    bgo#784037, bgo#784433, bgo#784456, bgo#784528, bgo#784579,
    bgo#784581, bgo#784739, bgo#784792.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 2.53.5:
  + Bugs fixed: bgo#695573, bgo#725950, bgo#731703, bgo#769135,
    bgo#779332, bgo#779607, bgo#784000, bgo#784815, bgo#784965,
    bgo#784995, bgo#785113, bgo#785130, bgo#785438, bgo#785468,
    bgo#785520, bgo#785577.
  + Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 2.53.6:
  + Bugs fixed: bgo#766358, bgo#783270, bgo#785955, bgo#786060,
    bgo#786360, bgo#786452, bgo#786460, bgo#786462, bgo#786463.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504094400">- Ignore errors in postun of gio-fam: when uninstalling the entire
  glib stack, we can end up with the -tools package no longer being
  functional. As nothing will read the cache, we can accept that.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 2.53.7:
  + Bugs fixed: bgo#736710, bgo#785260, bgo#786456, bgo#786555,
    bgo#786580, bgo#786807.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.54.0:
  + Bugs fixed: bgo#780861, bgo#786983, bgo#787109, bgo#787123,
    bgo#787146.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1505390400">- Avoid running fdupes across hardlink boundaries.
  Replace some old RPM macros.
- Update RPM groups and package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 2.54.1:
  + Bugs fixed: bgo#786737, bgo#787551, bgo#783270, bgo#783210,
    bgo#781867.
  + Updated translations.</changelog>
  <changelog author="sbrabec@suse.com" date="1507118400">- Install dummy *-mimeapps.list files to prevent dead symlinks
  (bsc#1061599).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 2.54.2:
  + Bugs fixed: bgo#780296.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Pass --with-python=/usr/bin/python3 to configure.
  + Replace python-base and python-xml BuildRequires with their
    python3 equivalents python3-base and python3-xml.
  + Replace the -devel package's python-xml requires with
    python3-xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512561600">- Add glib2-gtester-report-py3.patch: gtester-reporter fails to
  run with python3 (bgo#791296, boo#1071378).</changelog>
  <changelog author="xwang@suse.com" date="1512734400">- Add glib2-gsettings-overrides-per-session.patch: gsettings
  default value can be overridden depending on session
  (bgo#746592 bsc#1070090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 2.54.3:
  + Bugs fixed: bgo#691436, bgo#761102, bgo#776147, bgo#779182,
    bgo#782057, bgo#785113, bgo#788990, bgo#789637, bgo#789894,
    bgo#790030, bgo#790093, bgo#790126, bgo#790829, bgo#790934,
    bgo#791235, bgo#791267, bgo#791296, bgo#791325, bgo#791334,
    bgo#791337, bgo#791720, bgo#791744, bgo#791754, bgo#791906.
  + Updated translations.
- Drop glib2-gtester-report-py3.patch: Fixed upstream.
- Add glib2-gmain-partial-revert.patch: gmain: Partial revert of
  recent wakeup changes to gmain.c (bgo#761102).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="qzhao@suse.com" date="1537963200">- Add glib2-CVE-2018-16428.patch: Do a null pointer dereference.
  Avoid that, at the cost of introducing a new translatable error
  message(bnc#1107121 CVE-2018-16428).</changelog>
  <changelog author="Scott Reeves &lt;sreeves@suse.com&gt;" date="1539604800">- Add patchset to fix gvariant parsing issues. (bsc#1111499).
  0001-gvariant-Fix-checking-arithmetic-for-tuple-element-e.patch
  0002-gvarianttype-Impose-a-recursion-limit-of-64-on-varia.patch
  0003-gvariant-Check-array-offsets-against-serialised-data.patch
  0004-gvariant-Check-tuple-offsets-against-serialised-data.patch
  0005-gvariant-Limit-GVariant-strings-to-G_MAXSSIZE.patch
  0006-gdbusmessage-Validate-type-of-message-header-signatu.patch
  0007-gdbusmessage-Improve-documentation-for-g_dbus_messag.patch
  0008-gdbusmessage-Clarify-error-returns-for-g_dbus_messag.patch
  0009-gdbusmessage-Fix-a-typo-in-a-documentation-comment.patch
  0010-gdbusmessage-Check-for-valid-GVariantType-when-parsi.patch
  0011-gvariant-Clarify-internal-documentation-about-GVaria.patch
  0012-tests-Tidy-up-GError-handling-in-gdbus-serialization.patch
  0013-tests-Use-g_assert_null-in-gdbus-serialization-test.patch
  0014-gutf8-Add-a-g_utf8_validate_len-function.patch
  0015-glib-Port-various-callers-to-use-g_utf8_validate_len.patch</changelog>
  <changelog author="qzheng@suse.com" date="1541419200">- Add glib2-CVE-2018-16429.patch: Make backport from
  commit cec71705 to fix unvalidated UTF-8 read in
  markup parsing error paths (bsc#1107116, CVE-2018-16429).</changelog>
  <changelog author="mgorse@suse.com" date="1547812800">- Enable systemtap (fate#326393 bsc#1090047).</changelog>
</package>
<package pkgid="81c7cf27ed3cc22525c3bb76897cbe9b56691d277940fe6661750733938986ce" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="a87c48224ca9f40c263b7e6b1995c974b40f7f232efa6c9c92137a24a8c6b881" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="5276058ccde4d5b8eebe74346ea2ae068afa2903032a36231b72fa112c9bd3eb" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="c063fdea1ba0c028453cd9a5afe16134a6f027188cde2920f910167c938930e4" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="644e6d167b38d3232d6a97ec5d85a3c8487e3c740244892edf201e7c73276ca4" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="44bca28084a18e0d31cd5db66a570a43af1554abf06bb62a8339b17120f49fe7" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="b27f721d5a491be55969bc27cebb27f5d3481e5f7246d5e35cfce53f00a1b60d" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="75e00798ff967711b9eeefed8b93eb081bc63aa685428f6116030a661392c338" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="5689799679db4829ba6fbaef6640fc177c671639ded4747980108055a21e6764" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="756eae0815981ff6968a8389d1f5fe7f9717c22bf3d6238d313cc701900c1202" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="63403420ef3fc56ea45430287860ede27d4a4b4ed742eb2df6bd784fdf05cfdf" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="5b715cc65556edf2a326d48dfba14b7af4f9d2a58ae4833344d2346e0d87c402" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="ef3e7c25b02c9526defe7bbaf9d1580621b4cd3a0da0626e0f94a4226620f7b2" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="8870cba15c5c42ab54bf9c562237165b059ed9457ee71084df01982fb999e13c" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="1cdd0b9abaafa0617293daad7a16a251fea60f33f1f7d06e3b5e97b48002f5a5" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="a70b5b946d7aad7d3db04b720e26191cd680c6aac5d94df59ec86ae39486153e" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="07640f1dfc7c96325280435e734d1b5065260b7c271ec9ee07ed2f7be6b66956" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="48b82bce4adfa4e1b8a99222ba171ce58f689d8560d5d41c78928d4527344315" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="bc8b0704037383085076494f79239fa8d0bd0d2df360a73cce5a923fb5dcaa83" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="9ad343af049d91a6bd9c2f2ccd0cb660878f4ef23e08c9e288f5006726096a49" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="802c97d9259b266b082f32269801f35ad6ddb6a258dcd2ab07810b50334bfaf0" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="81ebb2aae2ded14a57ab1d2020f998077a912e0a60fff48533152c494fbffd04" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="cd2f71ada94d645942c9504bc518c7e4dc53089f6e6c8ac8e95d3d328e3fff4b" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="fd5866c1310df45db9c95f9df4c852b4b54db2c8e7e018e6e4a9836b8b24a155" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="747ad5f87baed415a4b55b6502e363c6e8ec45413cad26f15d1cd62feb7150aa" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="e5d49eab2a431687038b9273e0443abdf8b74558de75f57356da0f836d9d6f5b" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="7ea8266c14004b33df1419ae5c74fc8d60cf71c35df0892bb65e0c7c76707b0d" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="d417c9ba5d5f1e37a277706f5d2532cffc2e0a4c5b6876769578fc242a9e662d" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="3ed54a74cf9c63315f71e437676471168cb3ef84116c6a85aed6b7c87983e6c0" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="d725390a6c7d0c7ef7b83bc2222792ed4bef6733999742df90f446dad342b9b3" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="723560e8fdbc556736e472c08036d28f0b3e8551e5522bc1aa25a59f73a4db24" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="618332f6f05d9337d1912cfeb1fd695497b2cc63a72439d3d9f4ed12fab354a5" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="92d9e04ab54b6aa6d463d7cf54558eaa7c94c5157553227c2b88cba16291f296" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="4f7ef60c28955c3c8533280bfe72cb9cbe89cc6578225dc6ce461dd908744c12" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="3736874df4ed74df0f79c97ddbe65e43a7aca7591c283a2947f7e31b6d47f37c" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="3cf460b817445275538359127ba9d7ae4bc1d48e68b13f3ebf3d742cb169d730" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="d6113f14afd425712dbbe27e4c6c356f746ca9c0afd4599749768caf971be21d" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="d7f1dd18ec337e0be7af69ea8cbb95dc9700effc536a313bf150165b9fc250bd" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="c704e48fd002aa83698253134da33bb4b9dacf861f73c724d5bfe7af77b27737" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="182f33d459fcef2c72d0b8fc059fae26eeb9c458a523b9c45210ea58c8d891c9" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="7c87b6b30eb02c0b29d4e8eccaeb5c70f09ee6dffdc5f4bb428377b0d57f580f" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="afa866260b4a643f1bd3790092b9984b6d0afe4e5005bb045c4e13f626c58af7" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="92ce5f4cdecdd7dc3cdfe3e677bef9130ec0911213f898fbd1f55e9bad69e7b1" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="d97877577a0358c2da290e0fdbf576a6dd885aced17890eb8825e1563906f757" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="2b20921ef2ac115d011d46557a0d940c6de7f5c1910e9666ff9ecc1fb93d0bc0" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="0fa9656415480fe41cf7e2941e49a16539d55bc138fce59f24a6894d5222c386" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="f51addffc1053b6f3f4f929499782caf64d38e1b2d9e0da5ab6604e714f0b652" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="6c9ec778b111bccf32b5632cc333378c5a9ccb4b1ec2571bf66a2204123b2dff" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="fa447ff2c0b7dc3d0d3982720242ef8a0d42b31705631997c9662813b71adeac" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="2c5dfced20045f5f071ef989a37af91a1c85438d3d20a109423bc01fe1015d2c" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="e23c220bee7b2ad154fc49a1a8e807312dc8ce28018e893b17b626aa7cabce28" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="6876ccdeee61c93a4a981af63d627429571d52d2e0590a5d2e3f5d8724381d60" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="7daa41fc72100847d7ae789e6c65c515c55ea9d5cb04177879dd8f552db0cedc" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="bc3b5f2b6b43f9052b5ebb4f8536d03d9fe0178ab9921d8c8fa93526a8e62689" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="c5d8794669098585efa5b8c325b3e44fae5e7fe4171a3e05773881a0c0637766" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="d12a3f45f5af3713beca1e6dc08f70c219dccc7d576df9563de4995c767172db" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="2d7b6a471007730dad1a108def192385f8cba8e051484e499bb56669b7283dd8" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="0ce68b202a82d8f11a45942853e38764dda4a1618381fc385a7fc2dd0ff39d67" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="367425f3ff7fc960d14eb2eeaaa5700c0e17897b9ab3be5f24572a01046bf358" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="c5ee47f2bc24048dba266756c8bf48c37b0204d28ed6d8ce7730b67a9e2a9ec0" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="3a90a85a89f2a7c79bb8fc40f9533642c4b9efa585f4a9ca98452736986f1083" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="3acfa83775f1c0cc436e6715fae32b608cca535d20158da78875ec7363600bbf" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="d7fb508555c63dcf2410b9fc0e1dcda9dfda01390fcd34860e00df99779abedc" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="043bf218cc511c5b153e585901a487c570c25acc3ef3b0054b3642826e8fb1af" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="39ff16135133c48a3897ec2a9c555528dac32a1c2757f9f00f0bf275674d3573" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="1249d46cc8d0e89a269aba5435d9b5ae60450293dace82c13f5d1bbfcc5474b9" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="69d2094d47f336f35286deb146071678ded9cc6afe0b6dca4d63c43ab0e8f33d" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="0b705336542f2e51fb00229923a2eb5b23cf723cfc01c16a0e6706a39185596f" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="a3ceac88218f42874d530e0c15292b7553ef7b5c755c316fb2bdbd3a96338358" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="9a6197fae1f4cf2a2d4afbc673c0d051d433e5730ad79cef6305e5a144381d3a" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="4a9cad423c982213908a94561487a488ae5d3b38cbf4321e3c1b019ded9b7bd9" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="6e38e6f76b73bb1f20ea5282b37fe94f280766dd73debd5d22fc60e9b775d09a" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="20b4725b94c0595b3206d0ada8da1140940d57357fe586e8762b2c9de8c2d4b7" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="71605788a9dac409c71423070db4ab62a22a9ec136dbb7e507cfe4840e29b4a0" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="1d8e6f8e792db08260e13dda55b940f613bfe07e50aa7fe53d9764ed15e74e39" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="319deb85bb306880beb01fc909fae8067cde096e22c5255e784383ebbea77954" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="965aba18ef14a7bf6e0dfdffbedfc0b2277ca3a39eba8c71f232cc370fb4f8c5" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="11ada0528125db2af43034adb814d29043261c79fcc9fe283978e7151c2977a9" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="e1d01eca96b8a25f30a68739481614625d8dcfe542f039b63ed975e05a2e2ed8" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="3aa62240f6c3e770e302987aee17975c908bafba63daba948f9cbe73fb50fafd" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="2329e22b5836d64c2cf783a05087bbabcfb31ce2d23d533733e1c8fa4fba3788" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="cd0c6c71e69f0716ac7de3a002cf271d92a39f916cc1f7513b34545272e58907" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="473f9b68f1617494f45323cffe52b0f74816a25ce4d0c23c155ff0e11bb44644" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="460b00398405bdda92b84afcbda27845fa61026652003005f22ba14426ba84a3" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="b9d56b915445b0d2564a8a06fecc215139f9272615579a194d7adbe00b62724c" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="b3a53fe241903844d9aa78309ce05e41d98e96cc021429dc5937ae7c916aa59a" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="8ad768758801371d8bcefe649a1fa42c0937daa4b55283fd4eff1f46a60e9cf4" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="e144e00d86dd8474cee3546c51bc2386d23a259d2e8fdf354767703989774302" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="61ca83ebc1c2bdacb6acdca755ecd952c7ba772aa81d1faf0b00bb6161ac3f77" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="59e7e0f05ddc1db4ba68c560d924f82780a28128492d9f274cbe0765210bd779" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="a2050bdbb9d82d5cb99150b1ea40177febb41ced11b9a77f9d45d9205646f098" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="8d871c4b503b11339423e371f84c102af21fc8a8b3b8887211cd49fa7ebe01b5" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="fcc4998857efa2eec08b1450c7586d8f0465f5a255a7406437e709c59db5012f" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="7fbf4d3edbf954820f1d9293d5306c6ba75d9258a26b8d4713af0c19a429d5cb" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="ad903a6535bb9f40289b3d3b0afccdf07c47ea3e94306cd66d22cc1e765836bf" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="a7f5126895284ad2b3bbc3e777dc41f290688fd17905f92211dc6aa4a565dec4" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="0e47937634801c2b0dd61085d8029f68d2b069c87514c5a7c63eff58866954cd" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="47a948f6b10fdebe6864e17b4be39dbc95ef07829ae78e811be7df217cdf8ec0" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="97eed844ddcc0ff7dcb08baf354619d3bbed107a006051700ab742b3457290e4" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="170689d7aa1aa431e6cfbdf7ee50d7e51d5ccf4348208fb22b64fae5de22b60f" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="17981d66d898190cf1d357c24adc4529613581c92324c310f1b9a3d633fa35e5" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="d924f38dd4a72fab8eb7cc0dcb05d89d7a544327558f2652433d4fe995130cdd" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="739523fcd8398a7e970f4042ec3acedc8d4b4509da8dc0199119cef96a27b6a0" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="3fcf158d1095ff318b56ca8554c2db7ca1a1b7fd13f5af571e91f9c43eb8ba23" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="cceab0c1614dfa40d7b0c23cf23e9165f201e334626b97c5d70846686ec81241" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="dc5b7e7ebbe892d3e08340827c187125222318016d9df13b675e9261023c216e" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="6ef41d1fad71c8c916f1a980db67602bb7e0ffdd131ebe6aefc95382cd4648ba" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="50a2f6ed03ddbf8007f6f9621b8a08e5d006a50836c5109616374f91b3732ffa" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="40807222cbcee5dbcbc302ca3fd8d805c1cc0cc82133d6c1318ddec683974814" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="8efb066559e7ae9bdb59b5bfc75ffc5e6ff7205a9f76cb72f79af4a6b8867ca0" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="db1f0c30626f4cf00a7807d8d43655eee172bad24a0cc9797bcfef6a53ed95ee" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="4eabcadd2e4360527cd3562e2105b8b3c0624f785c4afa1e44def52828a541cb" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="595d681a2128ff3208ee1ace736201c6a477464f5d36e1a3069f9f1a22037ca8" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="f3d3c9cbb9446bc67b946978e9023c2c9f93e636cd249718691adc7f768671ca" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="f365e183e246799a7050960367c383d68746f75cf6744e1c1e27618b1160694c" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="dd8a5ac83fa47e6792bac8ea8e6feb7463012e411baa49982291b73870ad07fb" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="9106fb2ea2be6c90702307f00e7c378a5964ec3810971b3395dd015703d46f60" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="2389702d0c63ce7314de6bf02a9e237c3c2a6e1de9564f9e81959f79ed5f93e8" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.14.2"/>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
</package>
<package pkgid="b06b5beef48b4f689ae27c076ad486a7a5624f6fb5b3f5ae59ed28b50d8bc4d3" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.17.1"/>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
</package>
<package pkgid="0e678ee967b1ecd956216a7b4828d0b52ad4fcb54c92e76c3dca7ec3fe914009" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.20.1"/>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- math-remove-slow-path.patch: Remove slow paths from math routines
  (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)</changelog>
  <changelog author="schwab@suse.de" date="1534248000">- aarch64-hwcap-atomics.patch: aarch64: add HWCAP_ATOMICS to
  HWCAP_IMPORTANT (fate#325962)</changelog>
  <changelog author="schwab@suse.de" date="1534334400">- Add glibc-locale-base subpackage containing only C, C.UTF-8 and
  en_US.UTF-8 locales (fate#326551)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with
  binutils newer than 2.30.</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- absolute-symbols.patch: Don't relocate absolute symbols (bsc#1112570, BZ
  [#19818])</changelog>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
</package>
<package pkgid="a6e6bcfa69b38d75dc5f400b5848121a8964ad1bf16a1b9a81c18e9b91189260" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="7211edf8d8d0583f4365c2dd26ce0ba46221d540b6a6b099286269c602c150ae" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="ca2bf04446b9d05429a4c771fc4c37325899f60a075ad03b1dce1f7de3915048" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.9.1"/>
  <changelog author="schwab@suse.de" date="1509019200">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
  <changelog author="schwab@suse.de" date="1532952000">- localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
  (bsc#1102526, BZ #22639)</changelog>
  <changelog author="matz@suse.com" date="1539777600">- glibc-fix-aarch64-build.diff: Fix build on aarch64 with binutils
  newer than 2.30.</changelog>
</package>
<package pkgid="98d7bb9ee63e860065bd6e95554c392b92a59fe95242bc09baea097c1a981615" name="glm" arch="src">
  <version epoch="0" ver="0.9.7.5" rel="lp150.2.3.1"/>
  <changelog author="adam@mizerski.pl" date="1305374400">- new package</changelog>
  <changelog author="adam@mizerski.pl" date="1306411200">- update to 0.9.2.1
  - Automatically detect CUDA support
  - Improved compiler detection
  - Fixed errors and warnings in VC with C++ extensions disabled
  - Fixed and tested GLM_GTX_vector_angle
  - Fixed and tested GLM_GTX_rotate_vector</changelog>
  <changelog author="adam@mizerski.pl" date="1309176000">- update to 0.9.2.3
  - Fixed build issues
- update to 0.9.2.2
  - Expend matrix constructors flexibility
  - Improved quaternion implementation
  - Fixed many warnings across platforms and compilers</changelog>
  <changelog author="adam@mizerski.pl" date="1316174400">- update to 0.9.2.4
  - Fixed extensions bugs</changelog>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections</changelog>
  <changelog author="adam@mizerski.pl" date="1346760000">- update to 0.9.3.4
  - A lot happend since last update.
    Changelog available at http://glm.g-truc.net/</changelog>
  <changelog author="jengelh@inai.de" date="1362312000">- Add missing BuildRoot directive (resolve SLE build failure)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1373457600">- Update to version 0.9.4.4
  * Promoted GTC_espilon extension
  * Promoted GTC_ulp extension
  * Removed GLM website from the source repository
  * Added GLM_FORCE_RADIANS so that all functions takes radians for arguments</changelog>
  <changelog author="cfarrell@suse.com" date="1374148800">- license update: MIT and GPL-2.0+
  glm-0.9.4.4/test/external/gli/core/shared_ptr.inl is GPL licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1375358400">- convert sources to UNIX format using dos2unix
- fix build on non x86 architectures (glm-nonx86.patch)</changelog>
  <changelog author="tchvatal@suse.com" date="1395662400">- Version bump to 0.9.5.2:
  * Various bug fixes
  * MIT only license
- Remove no longer needed patch:
  * glm-nonx86.patch
- Use cmake macros to build</changelog>
  <changelog author="fstrba@suse.com" date="1400241600">- Version bump to 0.9.5.3
- Add a patch to disable gtc_packing test that fails on some i586
  systems:
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Add %fdupes to reduce size</changelog>
  <changelog author="schwab@suse.de" date="1411646400">- aliasing.patch: fix strict aliasing issues</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 0.9.7.4
- Fix cmake config location
  * glm-cmake-config.patch
- Drop obsolete
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Drop aliasing.patch, use -fno-strict-aliasing</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to 0.9.7.5
  * Added Visual C++ Clang toolset detection
  * Fixed uaddCarry warning #497
  * Fixed roundPowerOfTwo and floorPowerOfTwo #503
  * Fixed Visual C++ SIMD instruction set automatic detection in 64
    bits
  * Fixed to_string when used with GLM_FORCE_INLINE #506
  * Fixed GLM_FORCE_INLINE with binary vec4 operators</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1558353600">- Added glm-pkgconfig.patch to create glm.pc file
  (fixes bsc#1135667)</changelog>
</package>
<package pkgid="5ce56b380db08e1393ce3a845b571066e6720246005cac69c0a4329e273987ff" name="glm-devel" arch="x86_64">
  <version epoch="0" ver="0.9.7.5" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1362312000">- Add missing BuildRoot directive (resolve SLE build failure)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1373457600">- Update to version 0.9.4.4
  * Promoted GTC_espilon extension
  * Promoted GTC_ulp extension
  * Removed GLM website from the source repository
  * Added GLM_FORCE_RADIANS so that all functions takes radians for arguments</changelog>
  <changelog author="cfarrell@suse.com" date="1374148800">- license update: MIT and GPL-2.0+
  glm-0.9.4.4/test/external/gli/core/shared_ptr.inl is GPL licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1375358400">- convert sources to UNIX format using dos2unix
- fix build on non x86 architectures (glm-nonx86.patch)</changelog>
  <changelog author="tchvatal@suse.com" date="1395662400">- Version bump to 0.9.5.2:
  * Various bug fixes
  * MIT only license
- Remove no longer needed patch:
  * glm-nonx86.patch
- Use cmake macros to build</changelog>
  <changelog author="fstrba@suse.com" date="1400241600">- Version bump to 0.9.5.3
- Add a patch to disable gtc_packing test that fails on some i586
  systems:
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Add %fdupes to reduce size</changelog>
  <changelog author="schwab@suse.de" date="1411646400">- aliasing.patch: fix strict aliasing issues</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 0.9.7.4
- Fix cmake config location
  * glm-cmake-config.patch
- Drop obsolete
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Drop aliasing.patch, use -fno-strict-aliasing</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to 0.9.7.5
  * Added Visual C++ Clang toolset detection
  * Fixed uaddCarry warning #497
  * Fixed roundPowerOfTwo and floorPowerOfTwo #503
  * Fixed Visual C++ SIMD instruction set automatic detection in 64
    bits
  * Fixed to_string when used with GLM_FORCE_INLINE #506
  * Fixed GLM_FORCE_INLINE with binary vec4 operators</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1558353600">- Added glm-pkgconfig.patch to create glm.pc file
  (fixes bsc#1135667)</changelog>
</package>
<package pkgid="523921a197fcd725b3db15b803c27d9b19a03cd1de048ff90d5008929d9e0a89" name="glm-doc" arch="noarch">
  <version epoch="0" ver="0.9.7.5" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1362312000">- Add missing BuildRoot directive (resolve SLE build failure)</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1373457600">- Update to version 0.9.4.4
  * Promoted GTC_espilon extension
  * Promoted GTC_ulp extension
  * Removed GLM website from the source repository
  * Added GLM_FORCE_RADIANS so that all functions takes radians for arguments</changelog>
  <changelog author="cfarrell@suse.com" date="1374148800">- license update: MIT and GPL-2.0+
  glm-0.9.4.4/test/external/gli/core/shared_ptr.inl is GPL licensed</changelog>
  <changelog author="dvaleev@suse.com" date="1375358400">- convert sources to UNIX format using dos2unix
- fix build on non x86 architectures (glm-nonx86.patch)</changelog>
  <changelog author="tchvatal@suse.com" date="1395662400">- Version bump to 0.9.5.2:
  * Various bug fixes
  * MIT only license
- Remove no longer needed patch:
  * glm-nonx86.patch
- Use cmake macros to build</changelog>
  <changelog author="fstrba@suse.com" date="1400241600">- Version bump to 0.9.5.3
- Add a patch to disable gtc_packing test that fails on some i586
  systems:
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Add %fdupes to reduce size</changelog>
  <changelog author="schwab@suse.de" date="1411646400">- aliasing.patch: fix strict aliasing issues</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1458561600">- Update to version 0.9.7.4
- Fix cmake config location
  * glm-cmake-config.patch
- Drop obsolete
  * glm-0.9.5.3-no_gtc_packing_test.patch
- Drop aliasing.patch, use -fno-strict-aliasing</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to 0.9.7.5
  * Added Visual C++ Clang toolset detection
  * Fixed uaddCarry warning #497
  * Fixed roundPowerOfTwo and floorPowerOfTwo #503
  * Fixed Visual C++ SIMD instruction set automatic detection in 64
    bits
  * Fixed to_string when used with GLM_FORCE_INLINE #506
  * Fixed GLM_FORCE_INLINE with binary vec4 operators</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1558353600">- Added glm-pkgconfig.patch to create glm.pc file
  (fixes bsc#1135667)</changelog>
</package>
<package pkgid="00ba0ffd2bc8e168056842acf057cdf8bac71c022421513f5b6525e5c015584e" name="gn" arch="x86_64">
  <version epoch="0" ver="0.1463" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="28a7fe560c8216559d9a13c399b7249d2192c27082edfa6bb0f51598f98168bc" name="gnome-books" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="57a59c9832eee0f91abfc9c1b2d27e9b3f39a6ec8bfbe72a2de707858f5853bb" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="f3912f1543890734638d3d9587a94ec45af6d0a94dba5297519d32a2fcc2ccab" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="1ce7f31e5d5a9a21d09aed101f00b9ec21cf89c03806cc25b7fa7a2162908eb1" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="bbd7122053684fa8aa033bad9a485701c66e64338d26a6461384805b56edbd91" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="4a39a2215fec2251d6bc3a839a000cf1274655694db5854e6213f7bd82fdc0eb" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="2985e1ddc8725324bdb5170e230679cb6b21a88d545fd8d10f852e48f89fa312" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="c743ed195e3a4b5e82b6d9c66252a8651927ff2a65dd7a083e2731ce6423b6e4" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="708236a56189308f32f1cdf7464d2a1f1427cf3193bb0987638dff757e6ba37e" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="85fe5eee05d86a0197dcfe08a9b4590e0b8dc5f79e4a104c8414902d46f0a49e" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="1cb9d6f80acff4c5db2c68532ead45c2dbbacb3a5319334f17b5343ced26934b" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="ada28ba394d80c81cdfeddd4149d5ba638469d63948dc9a0b0d1255f1c6051b0" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="2fde33e263bdd7e5e49764fa40612b2e777a30254b9e4cb35c88c68f4103ef91" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="84abc914421d22d831cac567353d6c025e9319bcd55181bba6f89512cdf184ca" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="877e741cc81cc7af6553525fed0c632c2ab1b953503c6f2f310c7bc73b621a35" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="354d3bf7fae673332af1daaf595f8764388311f5fd509efba137370109e89791" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="2b95fb774a7de5184ef5db065a123d2dbf5b0b15397984657aa289cfb235c47d" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="b16cca819e4fda935213e7abf8db295f267766116b7579441d26697ea3ac3921" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="6111b2622d16cc94a1e20f55624b34f30bf24b064d107dda258683732028952e" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="1ea55e34d59373c90e9b43f1f2be5121c3ac84471349fb679509ac9280b38d2c" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="9f7f6b7748da7ef6e640ffc2eda18b7f72b74b9d1c6e9b876cd888494ff600aa" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="6485310282f1d34b13f8662fcca32a97dfcac84b648154da6e07ca0c7543eb9e" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="78548c6189698dfe078dd539400d631361b860aa5021a6180b847d8603b85f7e" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="53e8aec6db77e31d6638860f099f085c24533006996b00fee3a21f6f878eee79" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.10.1"/>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
</package>
<package pkgid="a0de3e0cae927e05b8fb6c0b5d673415789ebc50ea21918d73e3a36c89cacf85" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.13.1"/>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
  <changelog author="sckang@suse.com" date="1551355200">- Modify gnome-control-center-bring-back-firewall-zone.patch,
  Add control-center-network-fix-ce-apply-button.patch:
  network: disable the "Apply" button until a change has been made
  (glgo#GNOME/gnome-control-center!402 bsc#1040054).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
</package>
<package pkgid="78695cd905b685ca53bdf395e048bc21e4a6e6afceaacec731fbf56d8687f2fe" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="e6b250a11f4123d848f119c8106e961cb668b5f26ba740698234aae4fedcffbd" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
  <changelog author="sckang@suse.com" date="1540296000">- Add gnome-control-center-periodic-wifi-scan.patch: Request
  periodic Wi-Fi scans (bsc#1097347, bgo#793647).</changelog>
</package>
<package pkgid="b5353e5fa80bf8e49d9e968d69e81e46dbf601e28780aab44001312fc5522d41" name="gnome-documents" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="1836f6a1ea89637c10b9f364d195dc875fc8d12abbf194cf8d8f53d53b15b75d" name="gnome-documents-lang" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="a39be552513f3d029c5f1451dfe6ca20d11e536297afab5b68c384b4fff7069c" name="gnome-documents_books-common" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="066ba503225c5c29bcce7933e19984650f4c4f2911bcdc51898c015cf4d8723f" name="gnome-music" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Handle more duplicate files via fdupes macro.
- Add gnome-music-rpmlintrc to supress rpmlint warning about a gir
  file that there is no sense in having a devel package for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Empty-state added for playlist dialog.
  + Bugs fixed: bgo#772089, bgo#776680, bgo#777541, bgo#777219.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Code cleanups.
  + Bugs fixed: bgo#774470, bgo#774449.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove redundant %clean section</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Code cleanups.
  + Local art retrieval added.
  + AppData screenshots updated.
  + Bugs fixed: bgo#776668, bgo#777041, bgo#779013, bgo#779052,
    bgo#779584, bgo#779585.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1.1:
  + Revert desktop file rename.
  + In turn revert Flatpak manifest addition.
- Changes from version 3.24.1:
  + Add Flatpak manifest (bgo#779905).
  + Fix crashers.
  + Up Grilo requirements.
  + bgo#780523: playlist dialog shows the playlist that is going to
    be deleted.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#776668, bgo#781684.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495368000">- Require python3-gobject-Gdk: gnome-music is a GUI application and
  we thus don't only require python3-Gobject, but also the GUI
  toolkits.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Add gnome-music-group-configs.patch: Fix sefault at launch with
  updated python-cairo (bgo#774500, bgo#781326).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.25.4:
  + Build: depend on libtracker-sparql-2.0.
  + Add Flatpak manifest.
  + Mark forgotten string for translation.
  + Bugs fixed: bgo#776668, bgo#774500, bgo#781684, bgo#777346,
    bgo#781754.
- Replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires following upstreams
  changes.
- Drop gnome-music-group-configs.patch: Fixed upstream.
- Update desktop file name to new dbus conforming one.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Limit concurrent loading of coverart.
  + Fixes to appdata.
  + Use tracker:title-order for sorting.
  + Bugs fixed: bgo#783466, bgo#785697.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Bugs fixed: bgo#786541, bgo#786315.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Wrong player.set_playlist call in albumwidget.py (bgo#786454).
  + Problem scrolling albums on wayland (bgo#780548).
  + Different icon in System Settings Sound pane (bgo#709073).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504958400">- Add gstreamer-plugins-ugly Recommends: Recommend often used
  codecs for music playback.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 3.26.2:
  + Bugs fixed:
  - Block spotify plugin (glgo#gnome-music#132).
  - DiscListBoxWidget: Update favorites playlist (bgo#784998).
  - Albumartcache: Fix order in method call.
  - Flatpak: Update music repository URL (glgo#gnome-music#138).
  - Misc flatpak fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1521028800">- Add grilo-plugin-tracker as requires, otherwise gnome-music is
  useless (bsc#1083659).
- Add tracker as requires, tracker-miner-files is not enough as
  a dependency (bsc#1084861).</changelog>
  <changelog author="mgorse@suse.com" date="1562673600">- Add gnome-music-init-albums-view.patch: mark albums view as
  initialized, to avoid populating duplicate albums (boo#1115708).</changelog>
</package>
<package pkgid="a9eef3593eba644008902a5d3bd7f156944d02f8a93d6db26364ca791605ad16" name="gnome-music" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Handle more duplicate files via fdupes macro.
- Add gnome-music-rpmlintrc to supress rpmlint warning about a gir
  file that there is no sense in having a devel package for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Empty-state added for playlist dialog.
  + Bugs fixed: bgo#772089, bgo#776680, bgo#777541, bgo#777219.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Code cleanups.
  + Bugs fixed: bgo#774470, bgo#774449.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove redundant %clean section</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Code cleanups.
  + Local art retrieval added.
  + AppData screenshots updated.
  + Bugs fixed: bgo#776668, bgo#777041, bgo#779013, bgo#779052,
    bgo#779584, bgo#779585.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1.1:
  + Revert desktop file rename.
  + In turn revert Flatpak manifest addition.
- Changes from version 3.24.1:
  + Add Flatpak manifest (bgo#779905).
  + Fix crashers.
  + Up Grilo requirements.
  + bgo#780523: playlist dialog shows the playlist that is going to
    be deleted.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#776668, bgo#781684.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495368000">- Require python3-gobject-Gdk: gnome-music is a GUI application and
  we thus don't only require python3-Gobject, but also the GUI
  toolkits.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Add gnome-music-group-configs.patch: Fix sefault at launch with
  updated python-cairo (bgo#774500, bgo#781326).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.25.4:
  + Build: depend on libtracker-sparql-2.0.
  + Add Flatpak manifest.
  + Mark forgotten string for translation.
  + Bugs fixed: bgo#776668, bgo#774500, bgo#781684, bgo#777346,
    bgo#781754.
- Replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires following upstreams
  changes.
- Drop gnome-music-group-configs.patch: Fixed upstream.
- Update desktop file name to new dbus conforming one.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Limit concurrent loading of coverart.
  + Fixes to appdata.
  + Use tracker:title-order for sorting.
  + Bugs fixed: bgo#783466, bgo#785697.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Bugs fixed: bgo#786541, bgo#786315.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Wrong player.set_playlist call in albumwidget.py (bgo#786454).
  + Problem scrolling albums on wayland (bgo#780548).
  + Different icon in System Settings Sound pane (bgo#709073).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504958400">- Add gstreamer-plugins-ugly Recommends: Recommend often used
  codecs for music playback.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 3.26.2:
  + Bugs fixed:
  - Block spotify plugin (glgo#gnome-music#132).
  - DiscListBoxWidget: Update favorites playlist (bgo#784998).
  - Albumartcache: Fix order in method call.
  - Flatpak: Update music repository URL (glgo#gnome-music#138).
  - Misc flatpak fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1521028800">- Add grilo-plugin-tracker as requires, otherwise gnome-music is
  useless (bsc#1083659).
- Add tracker as requires, tracker-miner-files is not enough as
  a dependency (bsc#1084861).</changelog>
  <changelog author="mgorse@suse.com" date="1562673600">- Add gnome-music-init-albums-view.patch: mark albums view as
  initialized, to avoid populating duplicate albums (boo#1115708).</changelog>
</package>
<package pkgid="a83e97ff9780b22c04e093a5137ccaf3a1022b568c55bbd1cb3f850080b722d3" name="gnome-music-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1484654400">- Handle more duplicate files via fdupes macro.
- Add gnome-music-rpmlintrc to supress rpmlint warning about a gir
  file that there is no sense in having a devel package for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Empty-state added for playlist dialog.
  + Bugs fixed: bgo#772089, bgo#776680, bgo#777541, bgo#777219.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Code cleanups.
  + Bugs fixed: bgo#774470, bgo#774449.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove redundant %clean section</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Code cleanups.
  + Local art retrieval added.
  + AppData screenshots updated.
  + Bugs fixed: bgo#776668, bgo#777041, bgo#779013, bgo#779052,
    bgo#779584, bgo#779585.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1.1:
  + Revert desktop file rename.
  + In turn revert Flatpak manifest addition.
- Changes from version 3.24.1:
  + Add Flatpak manifest (bgo#779905).
  + Fix crashers.
  + Up Grilo requirements.
  + bgo#780523: playlist dialog shows the playlist that is going to
    be deleted.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#776668, bgo#781684.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495368000">- Require python3-gobject-Gdk: gnome-music is a GUI application and
  we thus don't only require python3-Gobject, but also the GUI
  toolkits.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Add gnome-music-group-configs.patch: Fix sefault at launch with
  updated python-cairo (bgo#774500, bgo#781326).</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.25.4:
  + Build: depend on libtracker-sparql-2.0.
  + Add Flatpak manifest.
  + Mark forgotten string for translation.
  + Bugs fixed: bgo#776668, bgo#774500, bgo#781684, bgo#777346,
    bgo#781754.
- Replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires following upstreams
  changes.
- Drop gnome-music-group-configs.patch: Fixed upstream.
- Update desktop file name to new dbus conforming one.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un) and icon_theme_cache_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Limit concurrent loading of coverart.
  + Fixes to appdata.
  + Use tracker:title-order for sorting.
  + Bugs fixed: bgo#783466, bgo#785697.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Bugs fixed: bgo#786541, bgo#786315.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Wrong player.set_playlist call in albumwidget.py (bgo#786454).
  + Problem scrolling albums on wayland (bgo#780548).
  + Different icon in System Settings Sound pane (bgo#709073).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504958400">- Add gstreamer-plugins-ugly Recommends: Recommend often used
  codecs for music playback.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 3.26.2:
  + Bugs fixed:
  - Block spotify plugin (glgo#gnome-music#132).
  - DiscListBoxWidget: Update favorites playlist (bgo#784998).
  - Albumartcache: Fix order in method call.
  - Flatpak: Update music repository URL (glgo#gnome-music#138).
  - Misc flatpak fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1521028800">- Add grilo-plugin-tracker as requires, otherwise gnome-music is
  useless (bsc#1083659).
- Add tracker as requires, tracker-miner-files is not enough as
  a dependency (bsc#1084861).</changelog>
  <changelog author="mgorse@suse.com" date="1562673600">- Add gnome-music-init-albums-view.patch: mark albums view as
  initialized, to avoid populating duplicate albums (boo#1115708).</changelog>
</package>
<package pkgid="ed05f31c3183cf083b9004e3815accd2da1c34b97a42e27c3170f734bb6d3628" name="gnome-photos" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="53b242ca2ea67cb6fed55649fe21d85aec18de6629c25bf3b62a2f2b7304c3e9" name="gnome-photos-lang" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="8d9e869a6cd83843212607819c9475cb6c57559e08bb622c7f29f03b0f08caf2" name="gnome-session" arch="src">
  <version epoch="0" ver="3.26.1" rel="lp150.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1492257600">- Update to version 3.24.1:
  + Autogoo degooing.
  + Race condition fix with startup and owning the dbus name.</changelog>
  <changelog author="zaitor@opensuse.org" date="1499688000">- Update to version 3.25.3:
  + Improved error messages with systemd integration.
  + Fix crash in fail whale if X dies.
  + Fix warning/crash when iterating over extensions.
  + Kill dbus clients at logout.
  + Leverage unicode for clarity and aesthetics.
  + BSD support improvements.
  + Drop old SSH_AUTH_SOCK on wayland workaround.
  + Updated translations.
- Drop post(un) handling for gnome-session and gnome-session-core,
  no longer needed as file-triggers now takes care of this.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500465600">- Update to version 3.25.4:
  + Restart dbus-daemon instead of killing dbus clients at log out.
  + Session file updates for latest g-s-d.
  + Misc memory fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1500897600">- Do not build wayland subpackage on s390/s390x, xwayland doesn't
  exist there [bsc#1047173].</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504872000">- Update to version 3.25.92:
  + gnome-session-inhibit fix.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Update package summaries.
  Drop an idempotent %if..%endif block around %package declaration.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1505476800">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505908800">- Register GNOME with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Revert "Enable SLE-Classic for wayland": the SLE-Classic session
  requires gnome-shell-extensions, which is the reason why the
  X-Session is shipped as part of that package. The wayland session
  should also be there.</changelog>
  <changelog author="fcrozat@suse.com" date="1506081601">- Re-add
  gnome-session-logging-to-systemd-journal-configurable.patch (not
  yet upstream [bsc#979498], [bgo#768982]).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Log warning fix.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1508414400">- Make default.desktop session working on wayland.
  Add default.desktop file in '{_datadir}/wayland-sessions/'
  (bsc#1062196).</changelog>
  <changelog author="zaitor@opensuse.org" date="1514116800">- Add gnome-session-nb-translation.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="ro@suse.de" date="1519646400">- Fix build on s390/s390x without wayland: do not setup the system
  for default-waylandsession alternatives.</changelog>
  <changelog author="yfjiang@suse.com" date="1521028800">- Add gnome-session-better-handle-empty-xdg_session_type.patch
  The gnome-session-check-accelerated currently detects wayland
  by checking if XDG_SESSION_TYPE != "x11". More appropriate test
  would be XDG_SESSION_TYPE == "wayland".
  This is especially important for cases when XDG_SESSION_TYPE is
  not set to anything at all - in such case it is more likely
  that the intention is to run gnome inside X11 (bsc#1084756,
  bgo#794256).
  The analysis and the patch is fully provided by msrb@suse.com.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="c996ec1cce4ad537d7e56e6aea7b60efaf6ad32e4562bca78590ac0b8ae952ad" name="gnome-session" arch="x86_64">
  <version epoch="0" ver="3.26.1" rel="lp150.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1492257600">- Update to version 3.24.1:
  + Autogoo degooing.
  + Race condition fix with startup and owning the dbus name.</changelog>
  <changelog author="zaitor@opensuse.org" date="1499688000">- Update to version 3.25.3:
  + Improved error messages with systemd integration.
  + Fix crash in fail whale if X dies.
  + Fix warning/crash when iterating over extensions.
  + Kill dbus clients at logout.
  + Leverage unicode for clarity and aesthetics.
  + BSD support improvements.
  + Drop old SSH_AUTH_SOCK on wayland workaround.
  + Updated translations.
- Drop post(un) handling for gnome-session and gnome-session-core,
  no longer needed as file-triggers now takes care of this.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500465600">- Update to version 3.25.4:
  + Restart dbus-daemon instead of killing dbus clients at log out.
  + Session file updates for latest g-s-d.
  + Misc memory fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1500897600">- Do not build wayland subpackage on s390/s390x, xwayland doesn't
  exist there [bsc#1047173].</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504872000">- Update to version 3.25.92:
  + gnome-session-inhibit fix.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Update package summaries.
  Drop an idempotent %if..%endif block around %package declaration.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1505476800">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505908800">- Register GNOME with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Revert "Enable SLE-Classic for wayland": the SLE-Classic session
  requires gnome-shell-extensions, which is the reason why the
  X-Session is shipped as part of that package. The wayland session
  should also be there.</changelog>
  <changelog author="fcrozat@suse.com" date="1506081601">- Re-add
  gnome-session-logging-to-systemd-journal-configurable.patch (not
  yet upstream [bsc#979498], [bgo#768982]).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Log warning fix.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1508414400">- Make default.desktop session working on wayland.
  Add default.desktop file in '{_datadir}/wayland-sessions/'
  (bsc#1062196).</changelog>
  <changelog author="zaitor@opensuse.org" date="1514116800">- Add gnome-session-nb-translation.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="ro@suse.de" date="1519646400">- Fix build on s390/s390x without wayland: do not setup the system
  for default-waylandsession alternatives.</changelog>
  <changelog author="yfjiang@suse.com" date="1521028800">- Add gnome-session-better-handle-empty-xdg_session_type.patch
  The gnome-session-check-accelerated currently detects wayland
  by checking if XDG_SESSION_TYPE != "x11". More appropriate test
  would be XDG_SESSION_TYPE == "wayland".
  This is especially important for cases when XDG_SESSION_TYPE is
  not set to anything at all - in such case it is more likely
  that the intention is to run gnome inside X11 (bsc#1084756,
  bgo#794256).
  The analysis and the patch is fully provided by msrb@suse.com.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="80a15bda9936240a25f8e6abfcddfb379b2851cc6748a1aaf5c10f84c911c801" name="gnome-session-core" arch="x86_64">
  <version epoch="0" ver="3.26.1" rel="lp150.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1492257600">- Update to version 3.24.1:
  + Autogoo degooing.
  + Race condition fix with startup and owning the dbus name.</changelog>
  <changelog author="zaitor@opensuse.org" date="1499688000">- Update to version 3.25.3:
  + Improved error messages with systemd integration.
  + Fix crash in fail whale if X dies.
  + Fix warning/crash when iterating over extensions.
  + Kill dbus clients at logout.
  + Leverage unicode for clarity and aesthetics.
  + BSD support improvements.
  + Drop old SSH_AUTH_SOCK on wayland workaround.
  + Updated translations.
- Drop post(un) handling for gnome-session and gnome-session-core,
  no longer needed as file-triggers now takes care of this.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500465600">- Update to version 3.25.4:
  + Restart dbus-daemon instead of killing dbus clients at log out.
  + Session file updates for latest g-s-d.
  + Misc memory fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1500897600">- Do not build wayland subpackage on s390/s390x, xwayland doesn't
  exist there [bsc#1047173].</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504872000">- Update to version 3.25.92:
  + gnome-session-inhibit fix.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Update package summaries.
  Drop an idempotent %if..%endif block around %package declaration.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1505476800">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505908800">- Register GNOME with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Revert "Enable SLE-Classic for wayland": the SLE-Classic session
  requires gnome-shell-extensions, which is the reason why the
  X-Session is shipped as part of that package. The wayland session
  should also be there.</changelog>
  <changelog author="fcrozat@suse.com" date="1506081601">- Re-add
  gnome-session-logging-to-systemd-journal-configurable.patch (not
  yet upstream [bsc#979498], [bgo#768982]).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Log warning fix.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1508414400">- Make default.desktop session working on wayland.
  Add default.desktop file in '{_datadir}/wayland-sessions/'
  (bsc#1062196).</changelog>
  <changelog author="zaitor@opensuse.org" date="1514116800">- Add gnome-session-nb-translation.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="ro@suse.de" date="1519646400">- Fix build on s390/s390x without wayland: do not setup the system
  for default-waylandsession alternatives.</changelog>
  <changelog author="yfjiang@suse.com" date="1521028800">- Add gnome-session-better-handle-empty-xdg_session_type.patch
  The gnome-session-check-accelerated currently detects wayland
  by checking if XDG_SESSION_TYPE != "x11". More appropriate test
  would be XDG_SESSION_TYPE == "wayland".
  This is especially important for cases when XDG_SESSION_TYPE is
  not set to anything at all - in such case it is more likely
  that the intention is to run gnome inside X11 (bsc#1084756,
  bgo#794256).
  The analysis and the patch is fully provided by msrb@suse.com.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="5d540e58729436142c289fcce66f9fadd90763839f1834d9377c2d7bf04388af" name="gnome-session-default-session" arch="x86_64">
  <version epoch="0" ver="3.26.1" rel="lp150.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1492257600">- Update to version 3.24.1:
  + Autogoo degooing.
  + Race condition fix with startup and owning the dbus name.</changelog>
  <changelog author="zaitor@opensuse.org" date="1499688000">- Update to version 3.25.3:
  + Improved error messages with systemd integration.
  + Fix crash in fail whale if X dies.
  + Fix warning/crash when iterating over extensions.
  + Kill dbus clients at logout.
  + Leverage unicode for clarity and aesthetics.
  + BSD support improvements.
  + Drop old SSH_AUTH_SOCK on wayland workaround.
  + Updated translations.
- Drop post(un) handling for gnome-session and gnome-session-core,
  no longer needed as file-triggers now takes care of this.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500465600">- Update to version 3.25.4:
  + Restart dbus-daemon instead of killing dbus clients at log out.
  + Session file updates for latest g-s-d.
  + Misc memory fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1500897600">- Do not build wayland subpackage on s390/s390x, xwayland doesn't
  exist there [bsc#1047173].</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504872000">- Update to version 3.25.92:
  + gnome-session-inhibit fix.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Update package summaries.
  Drop an idempotent %if..%endif block around %package declaration.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1505476800">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505908800">- Register GNOME with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Revert "Enable SLE-Classic for wayland": the SLE-Classic session
  requires gnome-shell-extensions, which is the reason why the
  X-Session is shipped as part of that package. The wayland session
  should also be there.</changelog>
  <changelog author="fcrozat@suse.com" date="1506081601">- Re-add
  gnome-session-logging-to-systemd-journal-configurable.patch (not
  yet upstream [bsc#979498], [bgo#768982]).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Log warning fix.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1508414400">- Make default.desktop session working on wayland.
  Add default.desktop file in '{_datadir}/wayland-sessions/'
  (bsc#1062196).</changelog>
  <changelog author="zaitor@opensuse.org" date="1514116800">- Add gnome-session-nb-translation.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="ro@suse.de" date="1519646400">- Fix build on s390/s390x without wayland: do not setup the system
  for default-waylandsession alternatives.</changelog>
  <changelog author="yfjiang@suse.com" date="1521028800">- Add gnome-session-better-handle-empty-xdg_session_type.patch
  The gnome-session-check-accelerated currently detects wayland
  by checking if XDG_SESSION_TYPE != "x11". More appropriate test
  would be XDG_SESSION_TYPE == "wayland".
  This is especially important for cases when XDG_SESSION_TYPE is
  not set to anything at all - in such case it is more likely
  that the intention is to run gnome inside X11 (bsc#1084756,
  bgo#794256).
  The analysis and the patch is fully provided by msrb@suse.com.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="9d6e914ed82b49cd91b5a9cebec5b96a94cdd23e4489e68f420a99dc40689e6a" name="gnome-session-lang" arch="noarch">
  <version epoch="0" ver="3.26.1" rel="lp150.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1492257600">- Update to version 3.24.1:
  + Autogoo degooing.
  + Race condition fix with startup and owning the dbus name.</changelog>
  <changelog author="zaitor@opensuse.org" date="1499688000">- Update to version 3.25.3:
  + Improved error messages with systemd integration.
  + Fix crash in fail whale if X dies.
  + Fix warning/crash when iterating over extensions.
  + Kill dbus clients at logout.
  + Leverage unicode for clarity and aesthetics.
  + BSD support improvements.
  + Drop old SSH_AUTH_SOCK on wayland workaround.
  + Updated translations.
- Drop post(un) handling for gnome-session and gnome-session-core,
  no longer needed as file-triggers now takes care of this.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500465600">- Update to version 3.25.4:
  + Restart dbus-daemon instead of killing dbus clients at log out.
  + Session file updates for latest g-s-d.
  + Misc memory fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1500897600">- Do not build wayland subpackage on s390/s390x, xwayland doesn't
  exist there [bsc#1047173].</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504872000">- Update to version 3.25.92:
  + gnome-session-inhibit fix.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Update package summaries.
  Drop an idempotent %if..%endif block around %package declaration.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1505476800">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505908800">- Register GNOME with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Revert "Enable SLE-Classic for wayland": the SLE-Classic session
  requires gnome-shell-extensions, which is the reason why the
  X-Session is shipped as part of that package. The wayland session
  should also be there.</changelog>
  <changelog author="fcrozat@suse.com" date="1506081601">- Re-add
  gnome-session-logging-to-systemd-journal-configurable.patch (not
  yet upstream [bsc#979498], [bgo#768982]).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Log warning fix.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1508414400">- Make default.desktop session working on wayland.
  Add default.desktop file in '{_datadir}/wayland-sessions/'
  (bsc#1062196).</changelog>
  <changelog author="zaitor@opensuse.org" date="1514116800">- Add gnome-session-nb-translation.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="ro@suse.de" date="1519646400">- Fix build on s390/s390x without wayland: do not setup the system
  for default-waylandsession alternatives.</changelog>
  <changelog author="yfjiang@suse.com" date="1521028800">- Add gnome-session-better-handle-empty-xdg_session_type.patch
  The gnome-session-check-accelerated currently detects wayland
  by checking if XDG_SESSION_TYPE != "x11". More appropriate test
  would be XDG_SESSION_TYPE == "wayland".
  This is especially important for cases when XDG_SESSION_TYPE is
  not set to anything at all - in such case it is more likely
  that the intention is to run gnome inside X11 (bsc#1084756,
  bgo#794256).
  The analysis and the patch is fully provided by msrb@suse.com.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="7dfdf640d303ba726ca15db1bf7e4815d86641dc0d74c815e721e9848a29c47a" name="gnome-session-wayland" arch="x86_64">
  <version epoch="0" ver="3.26.1" rel="lp150.5.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1492257600">- Update to version 3.24.1:
  + Autogoo degooing.
  + Race condition fix with startup and owning the dbus name.</changelog>
  <changelog author="zaitor@opensuse.org" date="1499688000">- Update to version 3.25.3:
  + Improved error messages with systemd integration.
  + Fix crash in fail whale if X dies.
  + Fix warning/crash when iterating over extensions.
  + Kill dbus clients at logout.
  + Leverage unicode for clarity and aesthetics.
  + BSD support improvements.
  + Drop old SSH_AUTH_SOCK on wayland workaround.
  + Updated translations.
- Drop post(un) handling for gnome-session and gnome-session-core,
  no longer needed as file-triggers now takes care of this.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500465600">- Update to version 3.25.4:
  + Restart dbus-daemon instead of killing dbus clients at log out.
  + Session file updates for latest g-s-d.
  + Misc memory fixes.
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1500897600">- Do not build wayland subpackage on s390/s390x, xwayland doesn't
  exist there [bsc#1047173].</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504872000">- Update to version 3.25.92:
  + gnome-session-inhibit fix.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Update package summaries.
  Drop an idempotent %if..%endif block around %package declaration.
- Avoid running fdupes across hardlink boundaries.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1505476800">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505908800">- Register GNOME with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Revert "Enable SLE-Classic for wayland": the SLE-Classic session
  requires gnome-shell-extensions, which is the reason why the
  X-Session is shipped as part of that package. The wayland session
  should also be there.</changelog>
  <changelog author="fcrozat@suse.com" date="1506081601">- Re-add
  gnome-session-logging-to-systemd-journal-configurable.patch (not
  yet upstream [bsc#979498], [bgo#768982]).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Log warning fix.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1508414400">- Make default.desktop session working on wayland.
  Add default.desktop file in '{_datadir}/wayland-sessions/'
  (bsc#1062196).</changelog>
  <changelog author="zaitor@opensuse.org" date="1514116800">- Add gnome-session-nb-translation.patch: Update Norwegian bokmål
  translations.</changelog>
  <changelog author="ro@suse.de" date="1519646400">- Fix build on s390/s390x without wayland: do not setup the system
  for default-waylandsession alternatives.</changelog>
  <changelog author="yfjiang@suse.com" date="1521028800">- Add gnome-session-better-handle-empty-xdg_session_type.patch
  The gnome-session-check-accelerated currently detects wayland
  by checking if XDG_SESSION_TYPE != "x11". More appropriate test
  would be XDG_SESSION_TYPE == "wayland".
  This is especially important for cases when XDG_SESSION_TYPE is
  not set to anything at all - in such case it is more likely
  that the intention is to run gnome inside X11 (bsc#1084756,
  bgo#794256).
  The analysis and the patch is fully provided by msrb@suse.com.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="6dfa2036b48321c009e07a630c0ba0fb4969c7ebbe5ee914dbdd4dc41e664999" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="c87fabc5e2d8f2a81e8aeda961686d6e2294c06f6d1f638fac3c9539d99ad150" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="ae182298a73d1c2ddef64d0211eba68f76103ace99e91bc9dddfb90ae3556be7" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="698bef63f4655d3b6932e980f9d54aef221155f72d7fe4503f3257453aedaa25" name="gnome-settings-daemon-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 3.25.90:
  + Color:
  - Honor location enabled setting.
  - Request location updates with a larger time granularity.
  + Date &amp; Time: Honor location enabled setting.
  + Media-keys: Restore interactive option for power button.
  + Wacom: Exclude non-display attached devices from remapping.
  + XSettings: Fix fontconfig cache updates causing desktop
    freezes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503403200">- Update to version 3.25.91:
  + Color: Prevent a potential crash on an uninitialized variable.
  + Power:
  - Fix automatic brightness adjustment being done inactive
    sessions.
  - Don't use undefined ambient light readings.
  + XSettings:
  - Use the new mutter API exclusively.
  - Drop the gnome-desktop requirement.
- Keep pkgconfig(gnome-desktop-3.0) BuildRequires: Configure still
  checks for it, no matter what upstream changes says.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + Ensure translatable strings are actually translated.
  + Housekeeping: Ignore the Retrode's low-space.
  + Sharing: Add gnome-remote-desktop as available service.
  + Updated translations.
- Drop obsolete clean section, glib2_gsettings_schema_requires
  and post(un) handling of following macros:
  + glib2_gsettings_schema_post(un).
  + icon_theme_cache_post(un).
- Run spec-cleaner, modernize spec.</changelog>
  <changelog author="qzhao@suse.com" date="1504353600">- Add gnome-settings-daemon-switch-Japanese-default-input-to-mozc.patch:
  Switch new user's default input engine from "anthy" to "mozc" in
  gnome-desktop with Japanese language and ibus input frame-work
  (bnc#1029083, boo#1056289).</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1505217601">- Rebase gnome-settings-daemon-more-power-button-actions.patch and
  enable for SLE 15 (bsc#1057770).</changelog>
  <changelog author="fcrozat@suse.com" date="1505390400">- Rebase gnome-settings-daemon-bring-back-updates-plugin.patch,
  gnome-settings-daemon-initial-keyboard.patch and
  gnome-settings-daemon-notify-idle-resumed.patch for SLE build.</changelog>
  <changelog author="fcrozat@suse.com" date="1505390401">- Rebase gnome-settings-daemon-more-power-button-actions.patch,
  part of the patch have been merged upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1506340800">- Add gnome-settings-daemon-wacom-tablet-rotation.patch: wacom:
  Add both tablet and touchscreen devices on initial iteration,
  and use GTK+ skeleton to make sure input coordinates are
  properly transformed upon screen rotation; patch taken from
  upstream git (bgo#787884).</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Wacom:
  - Ensure builtin touchscreens are properly mapped to outputs.
  - Fix spotty touchscreen detection with those touchscreens
    that have a capacitive menu/windows button.
  - Fix touchscreen vs display orientation mismatch under gdm.
  + XSettings: Reload the scale factor when mutter starts up.
  + Updated translations.
- Drop gnome-settings-daemon-wacom-tablet-rotation.patch: Fixed
  upstream.</changelog>
  <changelog author="sckang@suse.com" date="1508760000">- Modify gnome-settings-daemon-bring-back-updates-plugin.patch: Fix
  update notification not showing when conflicts exist
  (bsc#1063826).</changelog>
  <changelog author="hpj@opensuse.org" date="1509192000">- Remove gnome-settings-daemon-revert-libinput-mandatory.patch,
  since it isn't being applied and it's no longer useful to keep
  it around.</changelog>
  <changelog author="fezhang@suse.com" date="1509624000">- Update to version 3.26.2:
  + Housekeeping:
  - Ignore more virtual file systems (bgo#788879).
  - Fix the Empty Trash button in Settings not working
    (bgo#737624).
  + Media-keys: Fix custom binding command changes not getting
    applied (bgo#789782).
  + Minor cleanups.
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1510142400">- Avoid running fdupes across hardlink boundaries.
- Fix an error in the description.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Add gnome-settings-daemon-nb-translations.patch: Update Norwegian
  Bokmål translations.</changelog>
  <changelog author="fezhang@suse.com" date="1522756800">- Add gnome-settings-daemon-timeout-grabbing-keys.patch: Retry
  grabbing media-key accelerators when timed out (bgo#792353).
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Drop gnome-settings-daemon-bring-back-updates-plugin.patch:
  Deprecated on SLE15 / Leap15.0.
- Disable gnome-settings-daemon-more-power-button-actions.patch on
  Leap.</changelog>
  <changelog author="xwang@suse.com" date="1523620800">- Add gnome-settings-daemon-touch-screen-switch.patch: Add touch
  screen input switch, user can enable touch screen input when
  screen is off(bsc#1086496, glgo#GNOME/gnome-settings-daemon/#29).</changelog>
  <changelog author="dimstar@opensuse.org" date="1526299200">- Apply gnome-settings-daemon-more-power-button-actions.patch also
  on Leap.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
</package>
<package pkgid="8771d03f9b7c9a509a3e312b81e6f9b4e9586292f65715d5ce530c5db0089c3a" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.12.1"/>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="7fe43e9a84fdc4aabccea36277bcb119a975ef814c89750f98455e709b229703" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.12.1"/>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="b0d6089d04a47669187d643ee696137e6221bda83fa57c4ad3342967dc927582" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="f25d4e131d46b02e72db69071f01471645aa778cea7f627dabb221484db3349b" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="463e9f4227fb9a55ceeb255c936b301739a2c6d035890b796d78c6127a55caf3" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="b0cae0916788ee2cbfc21bf8ff101b00555e754dd263fd1b2140d4ca45a2c987" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.7.1"/>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
</package>
<package pkgid="182bb11dfb1aa23fa805db8d303207d57454630d811612f88d7f11a0f1b52db7" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.12.1"/>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="bcc5cb8fe76c6e94e17fd1e6f0a3741436225b8a2568b6ab237879f335530b32" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="14ca443112e5ce4053a2f426a60cf57859053cd87d90ba8e0a49d0dcba15c07c" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="dd98582358d6295e3caa8425f29d21103081fd98d5f64a562935cd14d81c5de9" name="gnome-shell-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.7.1"/>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
</package>
<package pkgid="e4315a7e832f870e79a1fffd52520580dfea6849182ce8cbf9cf43e8ff67b670" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.12.1"/>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="515e0af82732ea2ebbd9fe39ca1fc13c479660e9f4f0a107a17029a86ac8bd83" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="f2f379546f50a8fcdd4902326b8de21f9347726844ab25c456778dfa9718716a" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="85c686c7d3aa64f6fd7df9d39605236916d9be476a59c1f32e7e83871d9b9014" name="gnome-shell-calendar" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.7.1"/>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
</package>
<package pkgid="12151fa46c1c1c22fea7892906b1549e1c41ea1159b712909aff949a87ba4777" name="gnome-shell-classic" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.11.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="475b32f0f772aa0878e87190e7e616970aefaec05efd3c80d41b0094b175af46" name="gnome-shell-classic" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="17ceb06a4b7e140d837ba74d6e285f3d5b9889af11ad23d1bb4c5f7b03a52fc1" name="gnome-shell-classic-session" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.11.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="f8111e43c12e914d568d562a21e32e700f7040654c907d7055656191f70721d0" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.12.1"/>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="289bfb2409e12d2d4f9f19f9966fe197e8f7218065f3d2ccc7c8e221a850bf63" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="9383d9e7074d64da5c5821ad256b03b23e95e31c92ff501030e135bbbaee5272" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="cc1c25eacb293adc0855754a5eef3631a2299b8cb0981b3b220fbfbf88d4f64f" name="gnome-shell-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.7.1"/>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
</package>
<package pkgid="febe606228132dd4f70e516ddde3095ec982920cfb386c85a585a4b5f4741a0f" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.11.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="cdabbce5315e244312d04723193bf6587002ed007d842e5a51f7ba1a516932a1" name="gnome-shell-extensions-common" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.11.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="752cf88caea6efc5bc41b506ed5d7fed2fc659b9321d5829807852c676395847" name="gnome-shell-extensions-common" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="8823b49646bae236a384676e2ebc8a70b6a0911dbf3a4457511f750b55ed09cc" name="gnome-shell-extensions-common-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.11.1"/>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860800">- Add gnome-classic-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1559131200">- Split the architecture dependent session file to a new package
  gnome-shell-classic-session required by gnome-shell-classic.
- Move BuildArch: noarch to subpackages to enable %ifarch macro
  (bsc#1129412).</changelog>
</package>
<package pkgid="8c24796caac1a3123f1d8d3a28213fdffc1225bd8cf1e8be6709b6a4acbd2e0e" name="gnome-shell-extensions-common-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.6.3.1"/>
  <changelog author="xwang@suse.com" date="1505736000">- Update patch gse-sle-classic-ext.patch.
  Fix 'this._pureWinList is null', error involved in bsc#1046570
  fix(bsc#1046570).</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Register SLE-Classic with u-a handler for default.desktop
  implementation, which obsoletes the change in
  /etc/sysconfig/windowmanager to pick the 'default window manager'
  (boo#1039756).</changelog>
  <changelog author="xwang@suse.com" date="1506513600">- Enable SLE-Classic session working on Wayland.
  Add sle-classic.desktop in folder '{_datadir}/wayland-sessions/'
  (bsc#1058797)</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + native-window-placement: Adjust to gnome-shell changes.
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gse-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="qzheng@suse.com" date="1508241600">- Update gnome-shell-add-app-to-desktop.patch, allow app
  shortcut added to desktop could be executed with default
  attribute "trusted" (bsc#1055240).</changelog>
  <changelog author="xwang@suse.com" date="1508328000">- Add sle-classic-xorg.desktop file.
  Allow user to open X session or wayland session (bsc#1062909).
- Add default.desktop file in '{_datadir}/wayland-sessions/'
  Make default.desktop session working on wayland (bsc#1062196).</changelog>
  <changelog author="qzheng@suse.com" date="1509364800">- Update gse-sle-classic-ext.patch, make the bottom panel
  background of SLE-Classic "black" in the Overview mode
  (bsc#1064377).</changelog>
  <changelog author="xwang@suse.com" date="1509537600">- Apply gnome-shell-add-app-to-desktop.patch on openSUSE
  (bsc#1061742).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Updated translations.
- Update Url to
  https://wiki.gnome.org/Projects/GnomeShell/Extensions: current
  GNOME Shell Extensions project web page.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function in gnome-shell to
  gnome-shell-extensions (bsc#1065611).
  + Update gnome-shell-add-app-to-desktop.patch
  + Update gse-sle-classic-ext.patch
  + Update sle-classic-favorites-menu-at-end.patch
  + Update sle-classic-xorg.desktop
  + Update sle-classic.desktop
  + Add sle-classic.json
  + Add sle-classic@suse.com.tar.gz</changelog>
  <changelog author="xwang@suse.com" date="1510228800">- Apply SLE-Classic session on Tumbleweed (bsc#1051772).
  + Rename sle-classic-favorites-menu-at-end.patch to
    gnome-shell-favorites-menu-at-end.patch</changelog>
  <changelog author="xwang@suse.com" date="1511179200">- Add gnome-shell-extensions-window-list-app-icon-not-shown.patch:
  Fix window-list doesn't show app icon on taskbar when working in
  wayland (bgo#745064).</changelog>
  <changelog author="xwang@suse.com" date="1511524800">- Lower update-alternative priority of sle-classic desktop to 20,
  resulting in GNOME session becoming the default session
  (fate#324384).</changelog>
  <changelog author="xwang@suse.com" date="1513252800">- Fix in SLE-Classic session application title bar doesn't show
  application menu (bsc#1070090 bgo#746592).
  + Update sle-classic@suse.com.tar.gz
  + Update sle-classic.desktop
  + Update sle-classic-xorg.desktop</changelog>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Own {_datadir}/gnome-shell/extensions, needed after changes in
  gnome-shell package.</changelog>
  <changelog author="xwang@suse.com" date="1518091200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1524139200">- Update sle-classic-xorg.desktop translations (bsc#1077156).</changelog>
  <changelog author="xwang@suse.com" date="1528113600">- Update sle-classic@suse.com.tar.gz. Don't allow user to enable
  sle-classic extension in tweak tool (bsc#1095325).</changelog>
  <changelog author="xwang@suse.com" date="1531828800">- Update sle-classic@suse.com.tar.gz. After sle-classic extension
  is disabled, can't show clone window in overview mode
  (bsc#1095325).</changelog>
</package>
<package pkgid="6f41300c117073bf0240f61f022f43a7b225fc82c51bf54e70a325d4501a1833" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.12.1"/>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
</package>
<package pkgid="c41b8334fd2e4fe6da9e7f7c75c86be1d3f969a351fd5dcb5f39561bd6a4699a" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
  <changelog author="qkzhu@suse.com" date="1551960000">- Add two patches to reduce the JS warnings in GNOME 3.26.2
  + Add gnome-shell-1127231-workspace-JS-invalid-access.patch: Fix some
    JS warnings of workspace operation (glgo#GNOME/gnome-shell!143).
  + Add gnome-shell-1127231-fixesof4-JS-invalid-access.patch: Fix JS
    warnings of calendar, automountManager, messageList and dnd
    (glgo#GNOME/gnome-shell!209).
  + These patchs are part of Javascript invalid access fixes and
    contain 7 commits backported from upstream (bgo#791233,
    glgo#GNOME/gnome-shell#1, bsc#1127231).</changelog>
  <changelog author="xwang@suse.com" date="1554120000">- Add gnome-shell-screenShield-Handle-signal-StatusChanged.patch:
  Enable dimming screen when screen is locked
  (bsc#1118286 glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557316800">- Add gnome-shell-partial-screenlock-bypass-CVE-2019-3820.patch:
  + shellActionModes: disable POPUP keybindings in unlock screen
  + panel: Don't allow opening hidden menus via keybindings
    (bsc#1124493, glgo#GNOME/gnome-shell#851, CVE-2019-3820).</changelog>
</package>
<package pkgid="45aa609566a87cb4ef9020594853aa9b2a9b63182c5cdd5ab7f72d5f98b4ca21" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add gnome-shell-app-workaround-pkexec.patch: app: Work around
  pkexec restriction when launching (bgo#763531).
- Add gnome-shell-dateMenu-fixes.patch: Fix gnome-weather and
  notification icon (bgo#787423, bgo#766368).
- Add gnome-shell-fix-crash-hint-actor-NULL.patch: StEntry: fix
  crash when hint actor is NULL (bgo#787580).</changelog>
  <changelog author="xwang@suse.com" date="1505736000">- Fix JS warning, define classes with 'var' instead of 'const'
  (bgo#785084)
  + Update aboutMenu.js
  + Update gnome-shell-domain.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505822400">- Add gnome-shell-only-listen-window-created-events-once.patch:
  gtk-embed: ensure we only listen for window-created events once
  (bgo#787361).</changelog>
  <changelog author="xwang@suse.com" date="1506600000">- Add gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  Fix using keyboard can't unlock screen (bsc#1058521, bgo#788169).</changelog>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
</package>
<package pkgid="2d913936a7f0a7f5546d90ba76fddaf42667d5d9dde1e55cde85c1aeeb49a27a" name="gnome-shell-lang" arch="noarch">
  <version epoch="0" ver="3.26.2+20180130.0d9c74212" rel="lp150.3.7.1"/>
  <changelog author="badshah400@gmail.com" date="1506686400">- Add gnome-shell-disable-osk-gesture-on-lock-screen.patch:
  Disable OSK gesture on lock screen (bgo#788339).</changelog>
  <changelog author="jengelh@inai.de" date="1507032000">- Update package summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Don't detach launched apps to not break pkexec and friends
    (bgo#763531).
  + Allow search providers to not autostart (bgo#785380,
    bgo#787986).
  + Fix crash when tray icons are hidden/shown in quick succession
    (bgo#787361).
  + Make window group switcher more consistent (bgo#786009).
  + Improve legibility of the top bar when translucent
    (bgo#787940).
  + Don't crash when running outside a logind session (bgo#788046).
  + Allow to run headless (bgo#730551).
  + Update calendar on timezone changes (bgo#678507).
  + Improve keyboard navigation of window previews (bgo#786546).
  + Run unit tests on `meson test` (bgo#786497).
  + Misc. bug fixes: bgo#787423, bgo#766368, bgo#787580,
    bgo#787907, bgo#787901, bgo#788039, bgo#788003, bgo#786343,
    bgo#787902, bgo#788265, bgo#788339, bgo#787905, bgo#788282,
    bgo#787676.
  + Updated translations.
- Drop upstream fixed patches:
  + Drop gnome-shell-app-workaround-pkexec.patch.
  + gnome-shell-dateMenu-fixes.patch.
  + gnome-shell-fix-crash-hint-actor-NULL.patch.
  + gnome-shell-only-listen-window-created-events-once.patch.
  + gnome-shell-disable-osk-gesture-on-lock-screen.patch.
- Move all SLE only patches to patch# 1000 and above.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507204800">- Do not recommend gnome-shell-search-provider-documents: that
  package in turn should just supplement gnome-shell.</changelog>
  <changelog author="xwang@suse.com" date="1507550400">- Update gs-sle-classic-ext.patch to version 3.26.1</changelog>
  <changelog author="badshah400@gmail.com" date="1507982400">- Add gnome-shell-osk-dont-popup-when-not-needed.patch: Stop the
  on-screen keyboard from showing up when touchscreen use doesn't
  activate a text field; patch taken from upstream bug report
  (bgo#788188).</changelog>
  <changelog author="mgorse@suse.com" date="1508414400">- Add
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch:
  fixes a crash when the monitor is turned off (bgo#788607).</changelog>
  <changelog author="xwang@suse.com" date="1509019200">- Update gs-sle-classic-ext.patch: Fix the preview window is not
  fully shown in overview mode (bsc#1064378).</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Add gnome-shell-spawn-wifi-panel-for-wep-configuration.patch:
  network: Spawn wifi panel for further WPA enterprise
  configuration; patch taken from upstream git (bgo#789231).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Dump javascript stack on aborts, traps and segfaults
    (bgo#789237).
  + Misc. bug fixes: bgo#788607, bgo#789018, bgo#789231.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Projects/GnomeShell: current
  GNOME Shell's project web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Drop fixed upstream patches:
  gnome-shell-unset-primary-and-bottom-monitor-when-headless.patch
  and gnome-shell-spawn-wifi-panel-for-wep-configuration.patch.
- Rebase patches: gnome-shell-private-connection.patch and
  gnome-shell-osk-dont-popup-when-not-needed.patch.</changelog>
  <changelog author="xwang@suse.com" date="1509969600">- Move SLE-Classic function to gnome-shell-extensions package
  (bsc#1065611).
  + Remove gs-sle-classic-ext.patch
  + Remove SLEClassicExt.js</changelog>
  <changelog author="zaitor@opensuse.org" date="1515067200">- Update to version 3.26.2+20171218.15b1810a6:
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash:
  - Do not shadow ClutterActor's destroy().
  - Make sure item labels are only destroyed once.
  + status/keyboard: Reset menuItems and Label objects on change.
  + overview: Protect ::drag-end handlers.
  + Updated translations.
- Switch to git-checkout via source services.
- Pass enable-browser-plugin=true, enable-documentation=true,
  enable-man=true, enable-networkmanager=yes and
  enable-systemd=yes to meson, ensure we build the features we
  want.
- Following the above, add gtk-doc BuildRequires and build
  documentation again.
- Run spec-cleaner, modernize spec.
- Drop update-desktop-files BuildRequires and stop using the
  suse_update_desktop_file macro.
- Drop conditional libaccountsservice0, libcaribou0 and
  libgdmgreeter1 Requires needed for no longer supported versions
  of openSUSE.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.
- Drop gnome-shell-wayland Obsoletes: No currently supported
  version of openSUSE have ever had this binary, so this is no
  longer needed.
- Stop exporting BROWSER_PLUGIN_DIR=%%{_libdir}/browser-plugins,
  does not work as we are using meson buildsystem.</changelog>
  <changelog author="zaitor@opensuse.org" date="1515585600">- Add gnome-shell-network-fix-visibility-VPN.patch: network: Fix
  visibility of VPN section (bgo#787845).
- Own directories
  {_datadir}/gnome-shell/extensions|search-providers|modes again,
  seems a lot of packages depended on this beeing true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517400000">- Update to version 3.26.2+20180130.0d9c74212:
  + padOsd: Ensure to pick pad devices only.
  + network: Fix visibility of VPN section.
  + dnd: Declare restore location variables.
  + appDisplay: don't try to close the popup menu that is already
    destroyed.
  + background: don't leak wall clock when background changes.
  + dateMenu:
  - Fix possible crash with unknown locations.
  - Ignore malformed world-clocks settings.
  + dash: Do not shadow ClutterActor's destroy().
  + Updated translations.
- Update _service url to new gitlab home.
- Drop gnome-shell-network-fix-visibility-VPN.patch: Fixed
  upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Switch to Recommends on gnome-bluetooth, we might avoid this
  dependency on small setups without bluetooth (bsc#1067603).</changelog>
  <changelog author="xwang@suse.com" date="1533816000">- Add gnome-shell-private-Avoid-unnecessary-conversions-in-shadow-comp.patch:
  solve crash in gnome-shell blur_pixels()
  (bgo#788627 bsc#1084341).</changelog>
  <changelog author="xwang@suse.com" date="1542283200">- Add gnome-shell-st-Do-not-force-allocation-updates-during-shadow-creation.patch:
  Do not force allocation updates during shadow creation. Upstream
  commit f6a08472a (bgo#788908 bsc#1084341).</changelog>
  <changelog author="qkzhu@suse.com" date="1542283201">- Add gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + Add a background for this_lockDialogGroup to make login/lock
    background configurable.
  + This patch applies to SLE15-SP1 or later and openSUSE.
  + This patch requires a patch in gsettings-desktop-schemas
    gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch.
  + You can change the background via gsettings, and the schema id
    is "org.gnome.desktop.background.lockdialog".
  + The default theme is the same as upstream's, you can configure
    the background in a branding package just like how GNOME
    Shell's wallpaper was changed (fate#324570,
    glgo#GNOME/gnome-shell#680).</changelog>
  <changelog author="qkzhu@suse.com" date="1548676800">- Update the spec file section for
  gnome-shell-fate324570-Make-GDM-background-image-configurable.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
  <changelog author="hpj@suse.com" date="1550664000">- Add gnome-shell-fix-menutrackeritem-leak.patch: Fix a small memory
  leak of gnome-shell (glgo#GNOME/gnome-shell!50, bsc#1093541).</changelog>
</package>
<package pkgid="62071c54ef55c6326222e772444eff41f43cc59ec0d94ea571c633a8c02539c6" name="gnome-shell-search-provider-documents" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473681600">- Update to version 3.21.91:
  + Some refactoring.
  + Updated translations.
- Drop gnome-documents-Gepub-0.4.patch: Fixed upstream. Following
  this, drop gnome-common BuildRequires and autoreconf call, not
  needed as we do not carry any patches anymore.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488456000">- Update to version 3.23.91:
  + Port user interactions and keybindings to GAction.
  + Update theming for collection icons.
  + Rewrite fullscreen controller code.
  + Fix scrubbar preview positioning under Wayland.
  + Stop using GdNotification.
  + Add support for IANA-registered comicbook mime types.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490184000">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Use LOKDocView for pre-OOXML MS Office formats.
  + Unbreak opening in external application.
  + Fix regression that prevented comics from being previewed.
  + Make sure that load jobs are cancelled.
  + Fix double menus in fullscreened evince view.
  + Support fullscreening the e-pub view.
  + Don't leak the URI when thumbnailing.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494504000">- Update to version 3.24.2:
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Update to version 3.24.3:
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638401">- Update to version 3.25.1:
  + Distinguish multiple online sources from the same provider
  + Unbreak previews of LOKDocView-supported documents from
    OneDrive.
  + Unreak caching of LOKDocView-supported documents from ownCloud.
  + Support previews of encrypted PDFs from Google.
  + Pass the right number of arguments to LOKDocView.View.new.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500638402">- Update to version 3.25.3:
  + Show more info in epub preview, like number of chapters.
  + Restore the accelerators for going back.
  + Exit selection mode only after printing has begun.
  + Use GtkRevealers for faders instead of Tweener.
  + Enable printing only for documents that support it.
  + Avoid CRITICALs if a primary instance is already present.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638403">- Add gnome-documents-gepub-0_5.patch: Build using libgepub 0.5.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638404">- Update to version 3.25.4:
  + Use Tracker 2.0.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Rebase gnome-documents-gepub-0_5.patch.</changelog>
  <changelog author="zaitor@opensuse.org" date="1501329600">- Add gnome-documents-use-tracker-2.0.patch: Use new tracker
  version (bgo#785301).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 3.25.90:
  + Use Gepub 0.5.
  + Use Tracker 2.0.
  + Use 'var' for classes that are exported.
  + Updated translations.
- Drop gnome-documents-gepub-0_5.patch and
  gnome-documents-use-tracker-2.0.patch: Fixed upstream.
- Following the above, drop gnome-common BuildRequires and
  autoreconf call, no longer needed as we do not carry any patches.
- Drop obsolete post(un) handling, following macros removed:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).
- Pass --enable-documentation to configure, ensure we are building
  documentation.
- Stop packaging AUTHORS NEWS and README, present in src rpm in any
  case. However package COPYING, seems we lost it somewhere along
  the way.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Modernize the Autotools build and move away from Intltool.
  + Updated translations.
- Drop intltool BuildRequires: No longer needed.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505390400">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517572800">- Update to version 3.26.2:
  + Use 'var' for symbols that are exported.
  + Use the standard dialect of String.prototype.replace.
  + Explicitly specify the Gepub API version.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1517659200">- Update Url tag to https://wiki.gnome.org/Apps/Documents: current
  Documents' web page.
- Drop glib2_gsettings_schema_requires macro now that it is no
  longer needed since RPM File Triggers.
- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Add fdupes and its macro for replacement of duplicated files with
  links under the data directory.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mgorse@suse.com" date="1534766400">- Update to version 3.26.3:
  + Vertically centre text in the list view
  + Translation update
- Add gnome-documents-bsc1063428-garbage-collection.patch: be nice
  to the garbage collector during shutdown (bsc#1063428
  bgo#747506).</changelog>
</package>
<package pkgid="63bec00839754a163973c056820cf36b22d0c5c23282b54c7be902b0b05e3892" name="gnome-shell-search-provider-epiphany" arch="x86_64">
  <version epoch="0" ver="3.28.1.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.4:
  + Fix sync failure warnings appearing multiple times
    (bgo#790094).
  + Fix tab sync and device name on accounts.firefox.com
    (bgo#790370).
  + Make default sync device name translatable (bgo#790905).
  + Several additional misc. improvements to sync support
    (including bgo#790819).
  + Flatpak: custom stylesheets are now supported.
  + Flatpak: view page source is now supported.
- Add epiphany-session-rework-the-safety-check.patch: session:
  Rework the safety check.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 3.26.5:
  + Fix error in sync migration when migrating from 3.26.2 or
    earlier.
  + Improved logic to avoid corrupting session state.
- Drop epiphany-session-rework-the-safety-check.patch: Fixed
  upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Update to version 3.26.5.1:
  + Correct logic to avoid corrupting session state.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514808000">- Add epiphany-application-mode-fix-desktopfile.patch: application
  mode: use strstr() to get base name of the desktop file
  (bgo#790781).</changelog>
  <changelog author="zaitor@opensuse.org" date="1515844800">- Add epiphany-search-provider-fix.patch: Fix typos in
  serviceprovider, make it actually work (bgo#792502).
- Add epiphany-fix-download-of-blob-URIs.patch: Fix download of
  blob URIs. Epiphany doesn't recognize blob as a web scheme,
  causing it to try opening it in an external URI handler in it's
  policy decision callback (bgo#788576).
- Pass explicit developer_mode=false, https_everywhere=false and
  unit_tests=false options to meson, ensure we build the features
  we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518523200">- Update to version 3.26.6:
  + Fix download of blob URIs (bgo#788576).
  + Fix WhatsApp web app (bgo#790781).
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Hopefully fix the search provider.
- Drop epiphany-application-mode-fix-desktopfile.patch,
  epiphany-fix-download-of-blob-URIs.patch and
  epiphany-search-provider-fix.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1518609600">- Update to version 3.27.1:
  + Fix search engine dialog, which has been borked since 3.24.3
    (bgo#787458).
  - Allow overriding autofilled username in password forms
    (bgo#787498).
  - Fix non-HTML/MHTML files being saved as MHTML (bgo#788111).
  - Don't disable navigation actions when history is cleared
    (bgo#788329).
  - Various improvements to Flatpak support.
  - Fix bookmarks import crash when there's no Firefox profile.
  - Allow access to web inspector in application mode.
  - Add new address bar dropdown using libdazzle.
  - Add Google Safe Browsing support.
- Add pkgconfig(libdazzle-1.0) BuildRequires: new upstream
  dependency.</changelog>
  <changelog author="fezhang@suse.com" date="1518609601">- Update to version 3.27.2:
  + Hide Copy from context menu when appropriate (bgo#772106).
  + Hide home page button when appropriate (bgo#783299).
  + Fix multiple issues with the bookmark popover (bgo#788584).
  + Major change: web apps are now more like silos, rather than
    prisons (bgo#788845).
  + Various fixes for safe browsing implementation (bgo#788899).
  + Fix Firefox Sync crash on 32-bit systems (bgo#789656).
  + Move Firefox Sync settings to the right GSettings path.
    (bgo#789786).
  + Fix middle click on back/forward navigation buttons
    (bgo#790017).
  + Various fixes for Firefox Sync implementation.
  + Restore search engine support.
  + Fix incognito mode theme.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609602">- Update to version 3.27.3:
  + Several miscellaneous fixes for Firefox Sync and Google Safe
    Browsing.
  + Flatpak - Support added for custom stylesheets, downloading
    files and a view source page.
  + Bug fixes: bgo#776682, bgo#778843, bgo#790286, bgo#790693,
    bgo#790732, bgo#790905, bgo#790094, webkit#180365.
- Drop pkgconfig(libdazzle-1.0) BuildRequires following upstream's
  changes.
- Add pkgconfig(gio-2.0) BuildRequires. Note that it was being
  pulled with the other pkgconfig modules that comes from
  glib2-devel, e.g. glib-2.0, and used already.
- Uncomment pkgconfig(httpseverywhere-0.?) BuildRequires. It can
  already be tested under GNOME Next once upstream is planning to
  make its use unconditional rather than optional.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518609603">- Update to version 3.27.4:
  + Show desktop notification when download finishes (bgo#722142).
  + Expand tag view in bookmarks popover (bgo#778843).
  + Add protection against IDN homograph attacks (bgo#791168).
  + Improved logic to avoid corrupting session state
  + Fixes:
  - Downloading blob URLs (bgo#788576).
  - Launching WhatsApp web app (bgo#790781).
  - Error in sync migration when migrating from 3.26.2 or
    earlier.
- Update Url to https://wiki.gnome.org/Apps/Web: current Epiphany's
  web page.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609604">- Add epiphany-bump-httpseverywhere_dep.patch: Bump libhttpsevery
  dependency to current upstream release, following this, replace
  pkgconfig(httpseverywhere-0.6) with
  pkgconfig(httpseverywhere-0.8) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609605">- Disable pkgconfig(httpseverywhere-0.8) BuildRequires: Upstream
  regards it as too unstable for use (bgo#793389).</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609606">- Update to version 3.27.90:
  + Improve handling of zoom (bgo#621067, bgo#792949).
  + Bookmark properties button is now always visible (bgo#772268).
  + Drop gnome-desktop dependency, copying needed thumbnailer code
    (bgo#778578):
  + Save snapshot thumbnails under ~/.cache/epiphany instead of
    global directory.
  + Delete snapshot thumbnails when clearing history.
  + Fix profile migrator deleting bookmarks if run multiple times
    (bgo#792683).
  + Add touch support for address bar icons (bgo#792876).
  + Save Safe Browsing data only once, not once per web app
    (bgo#792929).
  + Fix crash caused by unexpected Safe Browsing data (bgo#792930).
  + Fix placement of select element with multiple monitors
    (bgo#792940).
  + Long press in address bar now selects the text (bgo#793267).
  + Hopefully fix the search provider.
  + Fix password prompt after bgo#742573.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: no longer
  needed.
- Drop epiphany-bump-httpseverywhere_dep.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Add middle click close support to tab bar.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520769600">- Update to version 3.28.0.1:
  + No changes, new release because 3.28.0 was mistagged.
- Changes from versoin 3.28.0:
  + Fix buffer overflow in profile migrator test.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 3.28.1:
  + Fix bookmarks migration from Epiphany 3.24 not working
    (bgo#794645).
  + Do not auto-open adblock filters in text editor after download
    (bgo#794646).
  + Fix crash when destroying sync service (bgo#794728).
  + Remove the experimental HTTPS Everywhere support (bgo#794803).
  + Fix width of bookmarks popover in certain locales (bgo#794861).
  + Don't activate search bar when pressing ' or / (bgo#795083).
  + Take snapshots only of most-visited web pages.
- Drop already disabled pkgconfig(httpseverywhere-0.8)
  BuildRequires and stop passing https_everywhere=false to meson,
  no longer supported nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524139200">- Update to version 3.28.1.1:
  + Fix two crashes (bgo#783756 and bgo#794784/bgo#795370).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1570622400">- Add CVE-2018-11396.patch: fix JS crash when opening an invalid
  URI (boo#1094464 CVE-2018-11396).</changelog>
</package>
<package pkgid="31ee0357fda0a616f2a4304088b8a64735517ed89d3ac4356f61a2075e783990" name="gnome-shell-search-provider-gnome-photos" arch="x86_64">
  <version epoch="0" ver="3.26.3" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1487332800">- Update to version 3.23.4:
  + Bugs fixed: bgo#690623, bgo#747123, bgo#763712, bgo#775700,
    bgo#776133, bgo#776565, bgo#776670.
  + Updated translations.
- Add pkgconfig(geocode-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487332801">- Update to version 3.23.90:
  + Try to avoid low resolution thumbnails (bgo#690255).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + tests: Wait for the UI to be drawn completely (bgo#777053).
  + Notify when an online account needs attention (bgo#777492).
  + Appdata uses screenshots of older version (bgo#778620).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Update to version 3.23.91:
  + Fix distorted and wrongly scaled thumbnails (bgo#690255).
  + Thumbnails don't reflect edited state (bgo#763329).
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Closing the properties before determining the edited state of
    an item shouldn't affect subsequent attempts to load the same
    item (bgo#777867).
  + appdata: Add screenshot of sharing feature (bgo#778620).
  + Exported and shared items have their orientation applied twice
    (bgo#778925).
  + po, source-notification: Fix typo (bgo#778967).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Update to version 3.23.92:
  + Bugs fixed: bgo#763712, bgo#777869, bgo#779380, bgo#779589.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493035200">- Update to version 3.24.1:
  + Changing the aspect ratio of the crop can make the selection
    larger than the image (bgo#765136).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1494417600">- Update to version 3.24.2:
  + Bugs fixed: bgo#778354.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748800">- Update to version 3.24.3:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#780692.
  + Updated translations.
- Replace pkgconfig(gnome-desktop-3.0) with
  pkgconfig(gsettings-desktop-schemas) BuildRequires following
  upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748801">- Update to version 3.25.1:
  + Bugs fixed: bgo#763712, bgo#765136, bgo#780424.
  + Updated translations.
- Add gnome-photos-revert-autocleanups.patch: Fix build with new
  gegl-unstable. Also add libtool BuildRequires since patch touches
  buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503748802">- Update to version 3.25.3:
  + Support zooming (bgo#742662).
  + Bugs fixed: bgo#763712, bgo#764423, bgo#776082, bgo#778354,
    bgo#780424, bgo#782012.
  + Updated translations.
- Drop gnome-photos-revert-autocleanups.patch: fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748803">- Update to version 3.25.4:
  + Support GEGL &gt;= 0.3.16.
  + Bugs fixed: bgo#763329, bgo#763712, bgo#781134.
  + Updated translations.
- Replace pkgconfig(tracker-control-1.0) and
  pkgconfig(tracker-sparql-1.0) with pkgconfig(tracker-control-2.0)
  and pkgconfig(tracker-sparql-2.0) BuildRequires following
  upstreams changes.
- Stop handling glib2_gsettings_schema_post(un),
  icon_theme_cache_post(un) and desktop_database_post(un) in
  post(un), no longer needed as we have file-triggers taking care
  of for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503748804">- Update to version 3.25.91:
  + Bugs fixed: bgo#780692.
  + Updated translations.
- Drop pkgconfig(gnome-desktop-3.0) BuildRequires: No longer
  needed, nor used.
- Add pkgconfig(gsettings-desktop-schemas) BuildRequires: New
  dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 3.25.92:
  + Use G_DECLARE_FINAL_TYPE (bgo#763712).
  + Various clean-ups and fixes to the searchbar handling code
    (bgo#786936).
  + Migrate from Intltool to Gettext (bgo#87105).
  + Updated translations.
- Drop intltool BuildRequires: no longer needed after the migration
  to gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Bugs fixed: bgo#785115, bgo#788042.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509796800">- Update to version 3.26.2:
  + Bugs fixed: Can't discard all edits directly from the overview
    without previewing the BaseItem (bgo#788715).
  + Updated translations.
- Update Url to https://wiki.gnome.org/Design/Apps/Photos: current
  Photos' web page.
- Drop %glib2_gsettings_schema_requires macro: the functionality is
  covered by file triggers now.
- Add fdupes BuildRequires and its macro for removal of duplicates
  under the data directory.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511438400">- Add upstream stable commits:
  + Add gnome-photos-properties-dialog-dont-leak.patch:
    properties-dialog: Don't leak the error.
  + Add gnome-photos-main-toolbar-dont-leak.patch: main-toolbar:
    Don't leak the preview's GMenu.
  + Add gnome-photos-nb-translations.patch: Add updated Norwegian
    bokmål translation.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.
- Drop hicolor-icon-theme BuildRequires: No longer needed.
- Replace update-desktop-files with desktop-file-utils
  BuildRequires and no longer pass suse_update_desktop_file macro:
  Align more closely with what upstream expects.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Update to version 3.26.3:
  + Bugs fixed: bgo#785376.
  + Updated translations.
- Drop upstream fixed patches:
  + gnome-photos-main-toolbar-dont-leak.patch.
  + gnome-photos-nb-translations.patch.
  + gnome-photos-properties-dialog-dont-leak.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517659200">- Add gnome-photos-Dont-leak-thumbnailer-path-string.patch:
  thumbnail-factory: Don't leak the thumbnailer path string.
- Add gnome-photos-application-fixes.patch: application: Avoid
  CRITICALs.
- Add gnome-photos-Check-RDF-type-before-using-it.patch: utils:
  Check the RDF type before using it, not the MIME type.</changelog>
  <changelog author="sckang@suse.com" date="1540814400">- Add gnome-photos-on-demand-activate-dleyna.patch: Don't activate
  dleyna-renderer-service when Photos starts up (bsc#992420,
  glgo#GNOME/gnome-photos#75).</changelog>
</package>
<package pkgid="a40f652d814328879e6a912bc214c4d26e04fccbb12f09669272a0a5ad96e428" name="gnome-shell-search-provider-nautilus" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Fix libgd warning.
  + Numerous batch renaming improvements and fixes.
  + Detect .bz and .xz as extensions for renaming.
  + Fix operations popover too small.
  + Add dummy --no-desktop option so Dropbox plugin works again.
  + Fix build when using the --disable-tracker compile time option.
  + Updated translations.
- Run spec-clean: Updates macros to current standard and adds
  pkgconfig BuildRequires, also removes obsolete clean section.
- Conditionally BuildRequire and apply gnome-patch-translate and
  translations-update-upstream for non-openSUSE only.
- Drop nautilus2-devel Obsoletes/Provides: We do not support
  upgrading from any version where this would apply.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Increase gtk+ depencency version.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1476014400">- Update nautilus-fix-desktop-icon-smash.patch:
  porting upstream's solution to work out the general aspect
  (bsc#979072, bgo#765601).</changelog>
  <changelog author="zaitor@opensuse.org" date="1476446400">- Update to version 3.22.1:
  + Multiple batch renaming fixes.
  + Multiple compression integration fixes.
  + Fix not showing "eject" and other options for devices in the
    context menu in the desktop.
  + Rework clipboard handling, fixing desktop&lt;-&gt;Nautilus
    interaction.
  + Fix overlaping icons on desktop in some cases, noticeabily in
    Ubuntu.
  + Fix wrong progress information in operations when skipping
    files.
  + Fix gnome-shell search only searching for whole words.
  + Show location as default for list view on Recent.
  + Fix context menu position in Wayland or other non-global
    coordinates systems.
  + Update man page of nautilus.
  + Add revealer for warnings in batch rename dialog.
  + Add tooltips to batch rename dialog file names.
  + Port nautilus classes to G_DECLARE.
  + Extend Nautilus File API for regular files.
  + Don't crash for simple leaks on the views.
  + Updated translations.
- Drop nautilus-enable-eject-option-on-selection-menu.patch and
  nautilus-fix-desktop-icon-smash.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481371200">- Update to version 3.22.2:
  + Fix opening menus with keyboard.
  + Fix batch rename failing to rename in some cases.
  + Remove Bookmarks manager shortcut from the shortcut window.
  + Reverse view icon logic to match design expectations.
  + Make icons on desktop work on Wayland sessions.
  + Fix popover animations.
  + Use the same setting for "directories first" both for file
    chooser and Nautilus.
  + Select entire names when renaming a folder.
  + Fix wrong progress information in operations due to races.
  + Fix wrong progress information in operations in non local
    files.
  + Fix regresion on speed when copying or moving files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Add &lt;ctrl&gt; Return as shortcut to open selected folder in new
    window.
  + &lt;ctrl&gt; N now opens the window in the same location as the
    current view.
  + Fixes on managing menus with keyboard.
  + Remove unused &lt;ctrl&gt; B shortcut.
  + Use a better empty state for trash.
  + Fix floating bar hide on hover when using tabs.
  + Syncronize gtk+ and Nautilus setting for sorting the folder
    first.
  + Select entire names for folder when renaming.
  + Support to open folders withouth permission using polkit and
    the admin backend.
  + Fix trash operations progress report.
  + Improve performance setting metadata only when necesary.
  + Fix progress reporting when copying.
  + Prevent toolbar menu dissapearing when "Hidden files" menu item
    is toggled.
  + Update app icon.
  + Fix icon scale computation when changing DPI.
  + Add &lt;ctrl&gt; M as alternate shortcut for renaming for those
    laptops withouth "f" keys.
  + Fix crash when pressing enter on search.
  + Fix failed build with tracker disabled.
  + Ask the user for using desktop files from unknown sources.
  + Improve the operations button animation in order to not need to
    show the operations popover.
  + Add an experimental icon view based on flow box with extra
    niceties under a gsetting preference.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488628800">- Update to version 3.23.91:
  + Fix long-time, hard to reproduce, and common crash on desktop
    with "auto layout" icons.
  + Port building system to meson.
  + Make F2 toggle between selection modes, full file name or only
    file name withouth extension.
  + Recent files are now always files that only the user used,
    rather than any program/daemon like Dropbox updating the access
    time.
  + Fix Nautilus tests with extexnsions points.
  + Fix crash on desktop when refreshing.</changelog>
  <changelog author="zaitor@opensuse.org" date="1489752000">- Update to version 3.23.92:
  + Fix count progress in operations when skipping files.
  + Improve meson build.
  + Selection and menus fixed for the experimental icon view.
  + Make Nautilus work with Flatpak and Builder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1493467200">- Update to version 3.24.1:
  + Focus when a new folder is created.
  + Do not consider directory names with dots as extensions.
  + Fix move to/copy to when searching.
  + Various fixes to the new experimental views.
  + Fix scripts order in submenu.
  + Fix open in new tab/window in Other Places.
  + Show new networks available while in Other Places view.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 3.23.2.1:
  + Release with autotools.
- Changes from version 3.24.2:
  + Hide desktop icons autostart in Ubuntu.
  + Confirm file name change in dialog conflicts with return.
  + Fix search activation not changing current directory.
  + Don't wrap names after . or _
  + Fix rubberband selection when using wacom tablets.
  + Fix crash in batch renaming.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 3.25.1:
  + Ported to Meson build system.
  + Fix replacing directory with symlink.
  + Avoid extraction of files if not enough space.
  + Fix not being able to drag the window from the path bar.
  + Add user preference for using the new views.
  + Fix DnD when using Google Drive.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Due to above change, no longer pass --disable-update-mimedb and
  - -enable-gtk-doc to configure, instead pass enable-exif=true,
  enable-gtk-doc=true and enable-xmp=true to meson macro. We want
  to build gtk-docs, exif and xmp support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500638400">- Add nautilus-tracker-2_0.patch: Fix build with tracker-2.0, patch
  from upstream git.
- Following above patch, replace pkgconfig(tracker-sparql-1.0) with
  pkgconfig(tracker-sparql-2.0) BuildRequires.
- Stop handling glib2_gsettings_schema_post(un),
  desktop_database_post(un), icon_theme_cache_post(un) and
  mime_database_post(un) in post(un), no longer needed as we have
  file-triggers to take care of this for us now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502712000">- Update to version 3.25.90:
  + Fix use of return key for conflict dialog.
  + Fix use of return key when searching not activating the
    selected file.
  + Add stable Flatpak builds.
  + Fix wrapping file names after a dot.
  + Use header bar for all dialogs.
  + Use portals for launching files in a sandbox with Flatpak.
  + Show error on empty name on batch rename dialog.
  + Change keyboard shortcuts for navigation of tabs similar to
    Firefox/Chrome etc.
  + Add a restore tab funcionality, similar to web browsers.
  + Fix rubberband with Wacom tablets.
  + Add Full Text Search (fts) to Nautilus so we search inside
    files content too.
  + Disable create link when clipboard is empty.
  + Disable zoom button if percentage is 100%.
  + Bump Tracker dependency to version 2.0.
  + Make Tracker a hard dependency.
  + Assume Nautilus project is GPL3+.
  + Allow decompressing archives on remote locations.
  + Add license (LGPL2.1+)to Nautilus extensions.
  + Only use location in description for GNOME Shell search.
  + Add tablet pad controllers for common actions.
  + Fix &lt;ctrl&gt;+z when renaming a file not undoing the text.
  + Use upstream and newer fallback icons.
  + Provide mime type support for compressed archives, so Nautilus
    can be used for handling compressed archives outside of
    Nautilus too.
- Drop nautilus-tracker-2_0.patch: Fixed upstream.
- Relicense spec following upstream changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504353600">- Update to version 3.25.92:
  + Fix desktop file parsing errors.
  + Bump GTK+ dependency version to 3.22.6.
  + Add mnemonic to replace button in file conflict dialog.
  + Show prefix matches first when searching.
  + Enable keyboard navigation in search type list.
  + Fix list view column picker not being centered in certain
    locales.
  + Make the path bar a drop target for files again.
  + Make sidebar visibility setting persistent.
  + Use spin button for thumbnailable file size limit setting.
  + Only allow directories to be dragged onto sidebar for
    bookmarking.
  + Make path bar clicks add new history entries.
  + Allow hiding unfocused search bar by pressing Escape.
  + Hide location entry after losing keyboard focus.
  + Allow deleting files with numpad delete key.
  + Forbid overwriting directories with files.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Update to version 3.26.2:
  + Fix crash in list view when expanding folders.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521720000">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="xwang@suse.com" date="1535371200">- Add set_trusted.desktop and set_trusted.sh: If using /etc/skel
  function, the script can set files in $HOME/Desktop as trusted
  automatically when user login (bsc#1103523).</changelog>
  <changelog author="xwang@suse.com" date="1538049600">- Update set_trusted.desktop and set_trusted.sh: Move
  set_trusted.desktop file to /etc/skel/.config/autostart
  (bsc#1103523 bsc#1107854).</changelog>
</package>
<package pkgid="c82ac6e17c782b4f78aa88f0b4c0df7c2f530da785c1de05e48fb3694b3d364e" name="gnu-compilers-hpc" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="f9cb83ed341086d00ef3bfc3b2d9503070aa52848a3cecb76e6ac1c7b79fecae" name="gnu-compilers-hpc" arch="src">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="6d56694b23361563fec9fd16bd921963d572a6f3cd03442cf6677ef6f7adfe8e" name="gnu-compilers-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="9a547e5b4442e3284c422bd04f7fa357ea8785384660d29b13eb34631fa43808" name="gnu-compilers-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="ca4e346f32359ee1f045a9949c5c4d4dd3601cb59ee696a116f9172e28c78c80" name="gnu8-compilers-hpc" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="60e73bc30cacd4cd91081cfb60d3912076863175b5b9600dd454fc11033ee897" name="gnu8-compilers-hpc" arch="src">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="e118b9812e80bc61fa51b589b003435258ac944556cb61f2e87db8275585a28d" name="gnu8-compilers-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="9facc8a23e28ff89ff1f9bc923bf8d4b37804d08c2453fa79153d9f4224dbcd0" name="gnu8-compilers-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="1.4" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1476360000">- Initial version of gnu compiler selection module
  FATE#321705.</changelog>
  <changelog author="eich@suse.com" date="1476964800">- Modified package to use a spec file template.</changelog>
  <changelog author="pmladek@suse.com" date="1479211200">- Add gcc-c++ into requires of the devel package
- Make the devel package to require the exact version of the main one</changelog>
  <changelog author="eich@suse.com" date="1480507200">- Fix group of devel package: Development/Languages</changelog>
  <changelog author="eich@suse.com" date="1493726400">- Remove ohpc-isms.
- Add support for gcc update versions.
- Pick correct compiler version.</changelog>
  <changelog author="eich@suse.com" date="1496923200">- Update spec_fix.pl: It is now able to produce multiple spec files
  from one replacement file.</changelog>
  <changelog author="eich@suse.com" date="1505217600">- Remove spec_fix.pl, use multibuild instead.
- Add RPM macros to be used together with macros.hpc from suse-hpc.</changelog>
  <changelog author="eich@suse.com" date="1505217601">- Rename: rpmlintrc -&gt; gnu-compilers-hpc-rpmlintrc</changelog>
  <changelog author="eich@suse.com" date="1507118400">- Fix LICENSE and copyright statement in LICENSE.</changelog>
  <changelog author="eich@suse.com" date="1507204800">- Make source files downloadable from git.
- Remove some debugging code.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Add Requires: for lua-lmod to base package.
- Add Provides/Conflicts: to macro package:
  only one version of this macro package can
  can be installed at the same time.</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Update to gcc v.7 for SLES-12 builds.
- Set the 'granularity' for selection to the
  granularity of GNU toolchain versions we
  distinguish: For major versions until 4,
  this is 2 versions, for anything above it
  is just the major version.
- On TW/Factory add explicit dependency to the
  compiler major version package. This is to make
  sure package gets rebuilt when this versions
  changes.</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Define _hpc_gnu_module (bsc#1116458).</changelog>
  <changelog author="eich@suse.com" date="1547640000">- Add links from the generic compiler binary names cc, cpp, c++
  and fc to the compiler specific names in the package private
  binary directory.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1564747200">- Add support for gcc v.6, v.8 and v.9.
  for SLE-12 HPC: v.6, v.7, v.8 (jsc#SLE-7765)
  for SLE-15 &amp; SLE-15-SP1: gcc v.7, v.8 (jsc#SLE-7766)
- For the base compiler add a Provides: for the versioned form.</changelog>
</package>
<package pkgid="b65f5cdde0dbfd19627a5e3389091f86bb1561a0cb137e957c8c86cb92fe475c" name="gnucash-docs" arch="noarch">
  <version epoch="0" ver="3.0" rel="lp150.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1391342400">- Update to version 2.6.1:
  + First documention updates for credit notes.
  + Adapt migration documentation to gsettings introduction.
  + Move most of the text regarding business features from guide to
    help, correct links and wording and many small improvements.
  + Add information about the Business tab in book options window.
  + Enable building Japanese PDF without requiring Debian or
    downloading fonts from anywhere.
  + Add Fedora font paths.
  + Adjust image after update.
  + Doc/guide/C: add cash account to accts-examples-organization2.
  + Docs/guide/de: minor corrections of spelling.
  + Updated translations.</changelog>
  <changelog author="ro@suse.de" date="1391515200">- Drop kdelibs3-doc BuildRequires: no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394798400">- Update to version 2.6.2:
  + Help text for Employee section missing (bgo#547386).
  + One error and some typos in documentation (bgo#723173).
  + Dividends reinvested example text doesn't match graphic. Also
    remove a useless figure and improve text (bgo#725013).
  + Assorted typos and version number corrections.</changelog>
  <changelog author="zaitor@opensuse.org" date="1396699200">- Update to version 2.6.3:
  + There have been no documentation changes since 2.6.2.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412078400">- Update to version 2.6.4:
  + Add sentence about manually editing payment information for
    customers.
  + Add warning and tip about account separator character.
  + Correct field format in python-import-fields.
  + Currency movements .. remain fully balanced if "Trading
    Accounts" is enabled; "double entry" was not sufficient.
  + Improve explanation that Credit does NOT decrease equity
    accounts.
  + Improve readability of "Credit does NOT decrease ...".
  + New chapters in the German translation: Overview, Basics, and
    Accounts.
  + Reduced proportional width of description column to increase
    overall font size for a 510 pixel width image.
  + Remove a few discrepancies between the german guide overview
    and other components.
  + Update of translators in gnucash-guide-de.omf
  + Updated documentation to explain how to tie dividends received
    in cash to the appropriate stock holding.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422446400">- Update to version 2.6.5:
  + Fix a path of freshly added XML files.
  + Add some comments about translation to the German documents
    where the translation wasn't updated to match the English
    version.
  + Apply &amp;untranslated property in German translations.
  + Fix bgo#739380: Release tarball build fails. Git builds OK.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428408000">- Update to version 2.6.6:
  + Explain sorting by TXF code within Tax Form Sections.
  + Insert Part designations and update the Basics Chapter.
  + Document latest changes to the Advanced Portfolio Report.
  + Remove obolete sections about "Cannot find default values" left
    over from gconf.</changelog>
  <changelog author="zaitor@opensuse.org" date="1436356800">- Update to version 2.6.7:
  + Fix typo.
  + Verbessere Erklärung Soll &amp; Haben.
  + Add source link and translator comment to
    Help_txf-categories.xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452600000">- Update to version 2.6.11:
  + Kep documentation in sync for latest release.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467028800">- Update to version 2.6.12:
  + Update instructions for updating quote prices by cron.
  + Add links to where common report preferences are set.
  + Setting number format details appear wrong in Help, section
    10.3.4. Counters Book Options Tab.
  + Update documentation for Invoice and Bill payments to reflect
    the new features.
  + Add missing sect Guide ch2.8: New book options in New Acct
    Hierarchy.
  + Remove Section 9.4.3 From Guide that offered simplistic advice
    about money and life that does nothing to explain GnuCash
    functionality or use.
  + Add note to Guide section 2.3.3 For Column Widths.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Update to version 2.6.14:
  + Update the list of Finance::Quote methods to 1.38.
  + Bugs fixed: bgo#115461, bgo#687290, bgo#769457, bgo#769746,
    bgo#771230, bgo#769663.
  + Updated translations.
- Changes from version 2.6.13:
  + Fix unclear statement re docbook stylesheets in README.
  + Fix the very stale Release Schedule link in the Guide.
  + Bugs fixed: bgo#637004, bgo#712764, bgo#751686, bgo#754239,
    bgo#754239, bgo#765131.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484913600">- Update to version 2.6.15:
  + Fix resolution of screenshots.
  + Bugs fixed: bgo#397135, bgo#633590, bgo#743671, bgo#755174,
    bgo#770371, bgo#775592, bgo#775919.
  + Updated translations.
- Drop rarian-scrollkeeper-compat BuildRequires: No longer strictly
  needed.
- Drop libgnome BuildRequires: Previously added just for for dir
  ownership. In stead just plainly own dirs in filelist.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487937600">- Fixup sourceurl and add proper tarball, the previous sub had the
  tarball named download.</changelog>
  <changelog author="sfalken@opensuse.org" date="1490788800">- Update to version 2.6.16:
  + Remove section "Changing the Register View" as better handled
    in Guide section 4.2.
  + Glossary: Transactions have at least 2 splits.
  + Bugs Fixed: bgo#755174, bgo#769457, bgo#774658, bgo#777318
    bgo#777287.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.6.17:
  + Improve internationalization of the Tutorial and Concepts
    Guide.
  + Bugs fixed: bgo#781711, bgo#781714.
- Fix source url.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 2.6.18:
  + The Italian Help translation, which uniquely uses a PO file,
    is frozen at commit 78cfa76 because of lack of a translator to
    maintain it.
  + Begin a Russian translation of the Guide by Dimitry Mangul.
  + Some spelling corrections in the German Guide.
  + Bugs fixed: bgo#120940.
- Change Source url to one that works correctly with source
  services: the previous url was downloading a tarball called
  "download"; in addition, the new url is also less clumsy
  looking.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513857600">- Update to version 2.6.19:
  + Help 10.2. Setting Preferences is outdated #105 (bgo#782423).
  + Changing text in Help to reflect changes in Preferences
    dialogs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523016000">- Update to version 3.0:
  + Correct field format in python-import-fields.
  + Clarify that creating a postponed SX will use the original
    date.
  + Remove 'Remainder To' from loan assistant page 2.
  + Update partial date entry documentation based on new default
    behaviour.
  + Fix chm mapfile target and cleanfiles. The mapfile target would
    fail if the directory was already built, apparently not
    recognizing that its target was complete.
  + Cleanfiles was missing several build targets.
  + New Transaction Report section in Guide.
  + Replace some screenshots with new ones reflecting Gtk3.
  + Bugs fixed: bgo#122895, bgo#634181, bgo#608098, bgo#760407,
    bgo#762088.
  + Updated translations.
- Changes from version 2.6.20:
  + Link the referenced 'Simple Transaction Example' in
    Transactions 'Opening Balances'.
  + Add a link from '8.5.1. Loan Specifications' to '8.3.
    Calculations' SX:XRO.
  + Add Preference Online Quotes.
  + Bugs fixed: bgo#793844, bgo#770132, bgo#770132, bgo#792756.</changelog>
  <changelog author="rpm@fthiessen.de" date="1545566400">-  Recommend gnome-help, so GnuCash is able to retrieve and open
  guide files (boo#1099804)</changelog>
</package>
<package pkgid="136cc51b07fe57e27e7cd9957a24e19729af6ac06a31e79e83f826308c617e5d" name="gnucash-docs" arch="src">
  <version epoch="0" ver="3.0" rel="lp150.4.1"/>
  <changelog author="dimstar@opensuse.org" date="1391342400">- Update to version 2.6.1:
  + First documention updates for credit notes.
  + Adapt migration documentation to gsettings introduction.
  + Move most of the text regarding business features from guide to
    help, correct links and wording and many small improvements.
  + Add information about the Business tab in book options window.
  + Enable building Japanese PDF without requiring Debian or
    downloading fonts from anywhere.
  + Add Fedora font paths.
  + Adjust image after update.
  + Doc/guide/C: add cash account to accts-examples-organization2.
  + Docs/guide/de: minor corrections of spelling.
  + Updated translations.</changelog>
  <changelog author="ro@suse.de" date="1391515200">- Drop kdelibs3-doc BuildRequires: no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1394798400">- Update to version 2.6.2:
  + Help text for Employee section missing (bgo#547386).
  + One error and some typos in documentation (bgo#723173).
  + Dividends reinvested example text doesn't match graphic. Also
    remove a useless figure and improve text (bgo#725013).
  + Assorted typos and version number corrections.</changelog>
  <changelog author="zaitor@opensuse.org" date="1396699200">- Update to version 2.6.3:
  + There have been no documentation changes since 2.6.2.</changelog>
  <changelog author="dimstar@opensuse.org" date="1412078400">- Update to version 2.6.4:
  + Add sentence about manually editing payment information for
    customers.
  + Add warning and tip about account separator character.
  + Correct field format in python-import-fields.
  + Currency movements .. remain fully balanced if "Trading
    Accounts" is enabled; "double entry" was not sufficient.
  + Improve explanation that Credit does NOT decrease equity
    accounts.
  + Improve readability of "Credit does NOT decrease ...".
  + New chapters in the German translation: Overview, Basics, and
    Accounts.
  + Reduced proportional width of description column to increase
    overall font size for a 510 pixel width image.
  + Remove a few discrepancies between the german guide overview
    and other components.
  + Update of translators in gnucash-guide-de.omf
  + Updated documentation to explain how to tie dividends received
    in cash to the appropriate stock holding.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1422446400">- Update to version 2.6.5:
  + Fix a path of freshly added XML files.
  + Add some comments about translation to the German documents
    where the translation wasn't updated to match the English
    version.
  + Apply &amp;untranslated property in German translations.
  + Fix bgo#739380: Release tarball build fails. Git builds OK.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428408000">- Update to version 2.6.6:
  + Explain sorting by TXF code within Tax Form Sections.
  + Insert Part designations and update the Basics Chapter.
  + Document latest changes to the Advanced Portfolio Report.
  + Remove obolete sections about "Cannot find default values" left
    over from gconf.</changelog>
  <changelog author="zaitor@opensuse.org" date="1436356800">- Update to version 2.6.7:
  + Fix typo.
  + Verbessere Erklärung Soll &amp; Haben.
  + Add source link and translator comment to
    Help_txf-categories.xml.</changelog>
  <changelog author="dimstar@opensuse.org" date="1452600000">- Update to version 2.6.11:
  + Kep documentation in sync for latest release.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467028800">- Update to version 2.6.12:
  + Update instructions for updating quote prices by cron.
  + Add links to where common report preferences are set.
  + Setting number format details appear wrong in Help, section
    10.3.4. Counters Book Options Tab.
  + Update documentation for Invoice and Bill payments to reflect
    the new features.
  + Add missing sect Guide ch2.8: New book options in New Acct
    Hierarchy.
  + Remove Section 9.4.3 From Guide that offered simplistic advice
    about money and life that does nothing to explain GnuCash
    functionality or use.
  + Add note to Guide section 2.3.3 For Column Widths.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1478174400">- Update to version 2.6.14:
  + Update the list of Finance::Quote methods to 1.38.
  + Bugs fixed: bgo#115461, bgo#687290, bgo#769457, bgo#769746,
    bgo#771230, bgo#769663.
  + Updated translations.
- Changes from version 2.6.13:
  + Fix unclear statement re docbook stylesheets in README.
  + Fix the very stale Release Schedule link in the Guide.
  + Bugs fixed: bgo#637004, bgo#712764, bgo#751686, bgo#754239,
    bgo#754239, bgo#765131.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484913600">- Update to version 2.6.15:
  + Fix resolution of screenshots.
  + Bugs fixed: bgo#397135, bgo#633590, bgo#743671, bgo#755174,
    bgo#770371, bgo#775592, bgo#775919.
  + Updated translations.
- Drop rarian-scrollkeeper-compat BuildRequires: No longer strictly
  needed.
- Drop libgnome BuildRequires: Previously added just for for dir
  ownership. In stead just plainly own dirs in filelist.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487937600">- Fixup sourceurl and add proper tarball, the previous sub had the
  tarball named download.</changelog>
  <changelog author="sfalken@opensuse.org" date="1490788800">- Update to version 2.6.16:
  + Remove section "Changing the Register View" as better handled
    in Guide section 4.2.
  + Glossary: Transactions have at least 2 splits.
  + Bugs Fixed: bgo#755174, bgo#769457, bgo#774658, bgo#777318
    bgo#777287.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Update to version 2.6.17:
  + Improve internationalization of the Tutorial and Concepts
    Guide.
  + Bugs fixed: bgo#781711, bgo#781714.
- Fix source url.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 2.6.18:
  + The Italian Help translation, which uniquely uses a PO file,
    is frozen at commit 78cfa76 because of lack of a translator to
    maintain it.
  + Begin a Russian translation of the Guide by Dimitry Mangul.
  + Some spelling corrections in the German Guide.
  + Bugs fixed: bgo#120940.
- Change Source url to one that works correctly with source
  services: the previous url was downloading a tarball called
  "download"; in addition, the new url is also less clumsy
  looking.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1513857600">- Update to version 2.6.19:
  + Help 10.2. Setting Preferences is outdated #105 (bgo#782423).
  + Changing text in Help to reflect changes in Preferences
    dialogs.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523016000">- Update to version 3.0:
  + Correct field format in python-import-fields.
  + Clarify that creating a postponed SX will use the original
    date.
  + Remove 'Remainder To' from loan assistant page 2.
  + Update partial date entry documentation based on new default
    behaviour.
  + Fix chm mapfile target and cleanfiles. The mapfile target would
    fail if the directory was already built, apparently not
    recognizing that its target was complete.
  + Cleanfiles was missing several build targets.
  + New Transaction Report section in Guide.
  + Replace some screenshots with new ones reflecting Gtk3.
  + Bugs fixed: bgo#122895, bgo#634181, bgo#608098, bgo#760407,
    bgo#762088.
  + Updated translations.
- Changes from version 2.6.20:
  + Link the referenced 'Simple Transaction Example' in
    Transactions 'Opening Balances'.
  + Add a link from '8.5.1. Loan Specifications' to '8.3.
    Calculations' SX:XRO.
  + Add Preference Online Quotes.
  + Bugs fixed: bgo#793844, bgo#770132, bgo#770132, bgo#792756.</changelog>
  <changelog author="rpm@fthiessen.de" date="1545566400">-  Recommend gnome-help, so GnuCash is able to retrieve and open
  guide files (boo#1099804)</changelog>
</package>
<package pkgid="e6841f00f27605f87eac9dbdda793937c40cdb3e99574b910e5e9a625535945d" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.10.1"/>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
</package>
<package pkgid="0e8db3beb90f3913d835f20b90aec60b584687bdaa6601ec29deea4ac10460c7" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.14.1"/>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- added bsdtar as requirement
  gnuhealth-control 3.2.5 (changed tar to bsdtar)</changelog>
</package>
<package pkgid="f853db103c92225eb526ef08556ca92f72a4efbe6de9d515b4bdaa5d851a9905" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.14.1"/>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542283200">- correction for gnuhealth-control (v 3.2.4)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1560254400">- added bsdtar as requirement
  gnuhealth-control 3.2.5 (changed tar to bsdtar)</changelog>
</package>
<package pkgid="15a980f037c75c9bc700eaedac875bff95d7ce3a93f1d0d785583f17eeead0d9" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="593e60718ec1660386570a51386fcab60cc9e4be955e939e156adb2c3e1203bf" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="8890c00ac8dbd79a6b62e6e2b19e55765aad528d73fa8b8dcf23e11197ef906d" name="gnuplot" arch="src">
  <version epoch="0" ver="5.2.2" rel="lp150.3.3.1"/>
  <changelog author="kruber@zib.de" date="1414497600">- Update to 4.6.6
  * NEW linetype keyword "nodraw" can be used to draw only the points in
    "with lp"
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW 'set fit prescale' normalized fit parameters before M-L refinement
  * NEW update svg terminal to grey out the key entry when a plot is
    toggled off
  * NEW allow keywords "comma" and "tab" for "set datafile separator"
  * CHANGE Accept "with image pixels" as a synonym for "with image failsafe"
  * CHANGE return NaN if a requested numerical data value finds a string
    instead
  * CHANGE Consume only one space following the font name in an enhanced
    test string
  * CHANGE respond to left mouse click on press rather than on release
  * FIX Faster recovery from outboard server gnuplot_qt being killed
  * FIX get rid of O(N^2) memory allocation for string data in long input
    lines
  * FIX large integers in iteration spec could cause overflow in end
    condition check
  * FIX object fillcolors should be consistent with the color of current
    linetypes
  * FIX LFS support on 64bit platforms (not backported for 32bit platforms)
  * FIX timecolumn() applied to non-axis data reports an error rather than
    faulting
  * FIX clipping could fail on integer overflow
  * FIX segfault resulting from strcol(N) applied to empty field in a *.csv
    file
  * FIX adjustment of key size to accommodate long key title
  * FIX treat data value read as "NaN" the same as we would "1/0"
  * FIX handling of events triggered by closing the qt plot window
  * FIX iteration failure due to integer overflow
  * FIX clip r axis tics to current plot boundary
  * FIX logscale cb axis with volatile data
  * FIX qt terminal timing problem with mouse click+release
  * FIX qt terminal handle window close events
  * FIX incorrect processing of certain loop [start:end:incr] combinations
  * FIX Fix y extent and clipping of rectangles with y coord &lt; 0 or inverted
    axes
  * FIX handle columnheaders in input to fit
  * FIX add sanity check in pdf.trm to avoid strcpy(fontname,fontname)</changelog>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
</package>
<package pkgid="bb6f213b1846411465a9f1287bc29f35832f73e337f0f9136d563f7f85a0e4d5" name="gnuplot" arch="x86_64">
  <version epoch="0" ver="5.2.2" rel="lp150.3.3.1"/>
  <changelog author="kruber@zib.de" date="1414497600">- Update to 4.6.6
  * NEW linetype keyword "nodraw" can be used to draw only the points in
    "with lp"
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW 'set fit prescale' normalized fit parameters before M-L refinement
  * NEW update svg terminal to grey out the key entry when a plot is
    toggled off
  * NEW allow keywords "comma" and "tab" for "set datafile separator"
  * CHANGE Accept "with image pixels" as a synonym for "with image failsafe"
  * CHANGE return NaN if a requested numerical data value finds a string
    instead
  * CHANGE Consume only one space following the font name in an enhanced
    test string
  * CHANGE respond to left mouse click on press rather than on release
  * FIX Faster recovery from outboard server gnuplot_qt being killed
  * FIX get rid of O(N^2) memory allocation for string data in long input
    lines
  * FIX large integers in iteration spec could cause overflow in end
    condition check
  * FIX object fillcolors should be consistent with the color of current
    linetypes
  * FIX LFS support on 64bit platforms (not backported for 32bit platforms)
  * FIX timecolumn() applied to non-axis data reports an error rather than
    faulting
  * FIX clipping could fail on integer overflow
  * FIX segfault resulting from strcol(N) applied to empty field in a *.csv
    file
  * FIX adjustment of key size to accommodate long key title
  * FIX treat data value read as "NaN" the same as we would "1/0"
  * FIX handling of events triggered by closing the qt plot window
  * FIX iteration failure due to integer overflow
  * FIX clip r axis tics to current plot boundary
  * FIX logscale cb axis with volatile data
  * FIX qt terminal timing problem with mouse click+release
  * FIX qt terminal handle window close events
  * FIX incorrect processing of certain loop [start:end:incr] combinations
  * FIX Fix y extent and clipping of rectangles with y coord &lt; 0 or inverted
    axes
  * FIX handle columnheaders in input to fit
  * FIX add sanity check in pdf.trm to avoid strcpy(fontname,fontname)</changelog>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
</package>
<package pkgid="ac63755e21bb1702346aa6b5ef478ec37ffcc382ce981b9f392b432ed359347a" name="gnuplot-doc" arch="noarch">
  <version epoch="0" ver="5.2.2" rel="lp150.3.3.1"/>
  <changelog author="kruber@zib.de" date="1414497600">- Update to 4.6.6
  * NEW linetype keyword "nodraw" can be used to draw only the points in
    "with lp"
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW 'set fit prescale' normalized fit parameters before M-L refinement
  * NEW update svg terminal to grey out the key entry when a plot is
    toggled off
  * NEW allow keywords "comma" and "tab" for "set datafile separator"
  * CHANGE Accept "with image pixels" as a synonym for "with image failsafe"
  * CHANGE return NaN if a requested numerical data value finds a string
    instead
  * CHANGE Consume only one space following the font name in an enhanced
    test string
  * CHANGE respond to left mouse click on press rather than on release
  * FIX Faster recovery from outboard server gnuplot_qt being killed
  * FIX get rid of O(N^2) memory allocation for string data in long input
    lines
  * FIX large integers in iteration spec could cause overflow in end
    condition check
  * FIX object fillcolors should be consistent with the color of current
    linetypes
  * FIX LFS support on 64bit platforms (not backported for 32bit platforms)
  * FIX timecolumn() applied to non-axis data reports an error rather than
    faulting
  * FIX clipping could fail on integer overflow
  * FIX segfault resulting from strcol(N) applied to empty field in a *.csv
    file
  * FIX adjustment of key size to accommodate long key title
  * FIX treat data value read as "NaN" the same as we would "1/0"
  * FIX handling of events triggered by closing the qt plot window
  * FIX iteration failure due to integer overflow
  * FIX clip r axis tics to current plot boundary
  * FIX logscale cb axis with volatile data
  * FIX qt terminal timing problem with mouse click+release
  * FIX qt terminal handle window close events
  * FIX incorrect processing of certain loop [start:end:incr] combinations
  * FIX Fix y extent and clipping of rectangles with y coord &lt; 0 or inverted
    axes
  * FIX handle columnheaders in input to fit
  * FIX add sanity check in pdf.trm to avoid strcpy(fontname,fontname)</changelog>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
</package>
<package pkgid="d45e9251c924ce3be7955c51a107cdaea6ab2aa03b5e8796463e2813b049898d" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.2" rel="lp150.6.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="dab30d3a1471211db809a424f1146ac4b61dbcfd296bb7a9b4920cd654b1d0be" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.6.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="31314f325f971037611830ed2a9439e4b29c924c8caf76ea8c4c111daace0e0c" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.7" rel="lp150.12.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="5ea686e51ee8fbf57c55b1c40d5e889d05e402a2eb5341ced3d9575f7d3ead59" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.12.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="48641a98e6dc0d0f4675df6ee90d0a0bbdd17004e1a286f80436b556bce39294" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.7" rel="lp150.9.1"/>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
</package>
<package pkgid="a8ccd6589c067ee65795b6608dc2d1bc52ee4513aba7a8de363bfa7c33e463ec" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.9.1"/>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
</package>
<package pkgid="d0e650d0929413edd81803a6aa69b21b6254718bf74cf1761c652abba6dc6ac8" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.2" rel="lp150.6.1"/>
  <changelog author="astieger@suse.com" date="1496577600">- GnuTLS 3.5.12:
  * libgnutls: gnutls_x509_crt_check_hostname2() no longer matches
    IP addresses against DNS fields of certificate (CN or DNSname).
    The previous behavior was to tolerate some misconfigured
    servers, but that was non-standard and skipped any IP
    constraints present in higher level certificates.
  * libgnutls: when converting to IDNA2008, fallback to IDNA2003
    (i.e., transitional encoding) if the domain cannot be converted.
    That provides maximum compatibility with browsers like firefox
    that perform the same conversion.
  * libgnutls: fix issue in RSA-PSK client callback which resulted
    in no username being sent to the peer
  * libgnutls: fix regression causing stapled extensions in trust
    modules not to be considered.
  * certtool: introduced the email_protection_key option.  This
    option was introduced in documentation for certtool without an
    implementation of it. It is a shortcut for option
  'key_purpose_oid = 1.3.6.1.5.5.7.3.4'.
  * certtool: made printing of key ID and key PIN consistent
    between certificates, public keys, and private keys. That is
    the private key printing now uses the same format as the rest.
  * gnutls-cli: introduced the --sni-hostname option. This allows
    overriding the hostname advertised to the peer.</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- GnuTLS 3.5.13:
  * libgnutls: fixed issue with AES-GCM in-place encryption and
    decryption in aarch64
  * libgnutls: no longer parse the ResponseID field of the status
    response TLS extension. The field is not used by GnuTLS nor is
    made available to calling applications. That addresses a null
    pointer dereference on server side caused by packets containing
    the ResponseID field. GNUTLS-SA-2017-4, bsc#1043398
  * libgnutls: tolerate certificates which do not have strict DER
    time encoding. It is possible using 3rd party tools to generate
    certificates with time fields that do not conform to DER
    requirements. Since 3.4.x these certificates were rejected and
    cannot be used with GnuTLS, however that caused problems with
    existing private certificate infrastructures, which were
    relying on such certificates. Tolerate reading and using these
    certificates.
  * minitasn1: updated to libtasn1 4.11.
  * certtool: allow multiple certificates to be used in --p7-sign
    with the --load-certificate option</changelog>
  <changelog author="astieger@suse.com" date="1499169600">- GnuTLS 3.5.14:
  * Handle specially HSMs which request explicit authentication
  * he GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a login on HSMs
  * do not set leading zeros when copying integers on HSMs
  * Fix issue discovering certain OCSP signers, and improved the
    discovery of OCSP signer in the case where the Subject Public
    Key identifier field matches
  * ensure OCSP responses are saved with --save-ocsp even if
    certificate verification fails.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
</package>
<package pkgid="f59dfd4a33b14f93f0338bb4bae1e472984f61eda31aee2970bc954bb8a41e26" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.12.1"/>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
</package>
<package pkgid="663d1bb637dea4ef39c3b382f09b78af0f43f333e49c5a91fd3ea1514cece087" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.9.1"/>
  <changelog author="tchvatal@suse.com" date="1499428800">- Drop the deprecated openssl compat ; discussed and suggested by
  vcizek
- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1499860800">- RPM group fix. Diversification of summaries.
- Avoid aims and future plans in description. Say what it does now.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- GnuTLS 3.5.15:
  * libgnutls: Disable hardware acceleration on aarch64/ilp32 mode
  * certtool: Keys with provable RSA and DSA parameters are now
    only exported in PKCS#8 form</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Buildrequire iproute2: the test suite calls /usr/bin/ss and as
  such we have to ensure to pull it in.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- GnuTLS 3.6.0:
  * Introduce a lock-free random generator which operates per-
    thread and eliminates random-generator related bottlenecks in
    multi-threaded operation.
  * Replace the Salsa20 random generator with one based on CHACHA.
    The goal is to reduce code needed in cache (CHACHA is also
    used for TLS), and the number of primitives used by the
    library. That does not affect the AES-DRBG random generator
    used in FIPS140-2 mode.
  * Add support for RSA-PSS key type as well as signatures in
    certificates, and TLS key exchange
  * Add support for Ed25519 signing in certificates and TLS key
    exchange following draft-ietf-tls-rfc4492bis-17
  * Enable X25519 key exchange by default, following
    draft-ietf-tls-rfc4492bis-17.
  * Add support for Diffie-Hellman group negotiation following
    RFC7919.
  * Introduce various sanity checks on certificate import
  * Introduce gnutls_x509_crt_set_flags(). This function can set
    flags in the crt structure. The only flag supported at the
    moment is GNUTLS_X509_CRT_FLAG_IGNORE_SANITY which skips the
    certificate sanity checks on import.
  * PKIX certificates with unknown critical extensions are rejected
    on verification with status GNUTLS_CERT_UNKNOWN_CRIT_EXTENSIONS
  * Refuse to generate a certificate with an illegal version, or an
    illegal serial number. That is, gnutls_x509_crt_set_version()
    and gnutls_x509_crt_set_serial(), will fail on input considered
    to be invalid in RFC5280.
  * Call to gnutls_record_send() and gnutls_record_recv() prior to
    handshake being complete are now refused
  * Add support for PKCS#12 files with no salt (zero length) in
    their password encoding, and PKCS#12 files using SHA384 and
    SHA512 as MAC.
  * libgnutls: Exported functions to encode and decode DSA and ECDSA
    r,s values.
  * Add new callback setting function to gnutls_privkey_t for
    external keys. The new function (gnutls_privkey_import_ext4),
    allows signing in addition to previous algorithms (RSA PKCS#1
    1.5, DSA, ECDSA), with RSA-PSS and Ed25519 keys.
  * Introduce the %VERIFY_ALLOW_BROKEN and
    %VERIFY_ALLOW_SIGN_WITH_SHA1 priority string options. These
    allows enabling all broken and SHA1-based signature algorithms
    in certificate verification, respectively.
  * 3DES-CBC is no longer included in the default priorities list.
    It has to be explicitly enabled, e.g., with a string like
    "NORMAL:+3DES-CBC".
  * SHA1 was marked as insecure for signing certificates.
    Verification of certificates signed with SHA1 is now considered
    insecure and will fail, unless flags intended to enable broken
    algorithms are set. Other uses of SHA1 are still allowed.
  * RIPEMD160 was marked as insecure for certificate signatures.
    Verification of certificates signed with RIPEMD160 hash
    algorithm is now considered insecure and will fail, unless
    flags intended to enable broken algorithms are set.
  * No longer enable SECP192R1 and SECP224R1 by default on TLS
    handshakes. These curves were rarely used for that purpose,
    provide no advantage over x25519 and were deprecated by TLS 1.3.
  * Remove support for DEFLATE, or any other compression method.
  * OpenPGP authentication was removed; the resulting library is ABI
    compatible, with the openpgp related functions being stubs that
    fail on invocation.
    Drop gnutls-broken-openpgp-tests.patch, no longer required.
  * Remove support for libidn (i.e., IDNA2003); gnutls can now be
    compiled only with libidn2 which provides IDNA2008.
  * certtool: The option '--load-ca-certificate' can now accept
    PKCS#11 URLs in addition to files.
  * certtool: The option '--load-crl' can now be used when
    generating PKCS#12 files (i.e., in conjunction with '--to-p12' option).
  * certtool: Keys with provable RSA and DSA parameters are now
    only read and exported from PKCS#8 form, following
    draft-mavrogiannopoulos-pkcs8-validated-parameters-00.txt.
    This removes support for the previous a non-standard key format.
  * certtool: Added support for generating, printing and handling
    RSA-PSS and Ed25519 keys and certificates.
  * certtool: the parameters --rsa, --dsa and --ecdsa to
  - -generate-privkey are now deprecated, replaced by the
  - -key-type option.
  * p11tool: The --generate-rsa, --generate-ecc and --generate-dsa
    options were replaced by the --generate-privkey option.
  * psktool: Generate 256-bit keys by default.
  * gnutls-server: Increase request buffer size to 16kb, and added
    the --alpn and --alpn-fatal options, allowing testing of ALPN
    negotiation.
  * Enables FIPS 140-2 mode during build</changelog>
  <changelog author="vcizek@suse.com" date="1505908800">- Disable flaky dtls_resume test on Power
  * add gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- GnuTLS 3.6.1:
  * Fix interoperability issue with openssl when safe renegotiation
    was used
  * gnutls_x509_crl_sign, gnutls_x509_crt_sign,
    gnutls_x509_crq_sign, were modified to sign with a better
    algorithm than SHA1. They will now sign with an algorithm that
    corresponds to the security level of the signer's key.
  * gnutls_x509_*_sign2() functions and gnutls_x509_*_privkey_sign()
    accept GNUTLS_DIG_UNKNOWN (0) as a hash function option. That
    will signal the function to auto-detect an appropriate hash
    algorithm to use.
  * Remove support for signature algorithms using SHA2-224 in TLS.
    TLS 1.3 no longer uses SHA2-224 and it was never a widespread
    algorithm in TLS 1.2
  * Refuse to use client certificates containing disallowed
    algorithms for a session, reverting a change on 3.5.5
  * Refuse to resume a session which had a different SNI advertised
    That improves RFC6066 support in server side.
  * p11tool: Mark all generated objects as sensitive by default.
  * p11tool: added options --sign-params and --hash. This allows
    testing signature with multiple algorithms, including RSA-PSS.</changelog>
  <changelog author="vcizek@suse.com" date="1518004800">- Sanity check key size in SSSE3 AES cipher implementation (bsc#1074303)
  * add gnutls-check_aes_keysize.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- GnuTLS 3.6.2:
  * libgnutls: When verifying against a self signed certificate ignore issuer.
    That is, ignore issuer when checking the issuer's parameters strength,
    resolving issue #347 which caused self signed certificates to be
    additionally marked as of insufficient security level.
  * libgnutls: Corrected MTU calculation for the CBC ciphersuites. The data
    MTU calculation now, it correctly accounts for the fixed overhead due to
    padding (as 1 byte), while at the same time considers the rest of the
    padding as part of data MTU.
  * libgnutls: Address issue of loading of all PKCS#11 modules on startup
    on systems with a PKCS#11 trust store (as opposed to a file trust store).
    Introduced a multi-stage initialization which loads the trust modules, and
    other modules are deferred for the first pure PKCS#11 request.
  * libgnutls: The SRP authentication will reject any parameters outside
    RFC5054. This protects any client from potential MitM due to insecure
    parameters. That also brings SRP in par with the RFC7919 changes to
    Diffie-Hellman.
  * libgnutls: Added the 8192-bit parameters of SRP to the accepted parameters
    for SRP authentication.
  * libgnutls: Addressed issue in the accelerated code affecting
    interoperability with versions of nettle &gt;= 3.4.
  * libgnutls: Addressed issue in the AES-GCM acceleration under aarch64.
  * libgnutls: Addressed issue in the AES-CBC acceleration under ssse3 (patch by
    Vitezslav Cizek).
  * srptool: the --create-conf option no longer includes 1024-bit parameters.
  * p11tool: Fixed the deletion of objects in batch mode.
- Dropped gnutls-check_aes_keysize.patch as it is included upstream now.</changelog>
  <changelog author="meissner@suse.com" date="1521115200">- gnutls.keyring: Nikos key refreshed to be unexpired</changelog>
  <changelog author="ro@suse.de" date="1521806400">- remove gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  patch does not apply any more and apparently the build
  suceeds even if the formerly flaky testcase is run (bsc#1086579)</changelog>
  <changelog author="vcizek@suse.com" date="1521806401">- add back refreshed gnutls-3.6.0-disable-flaky-dtls_resume-test.patch
  the dtls-resume test still keeps randomly failing on PPC</changelog>
  <changelog author="vcizek@suse.com" date="1521806402">- build without DANE support on SLE-15, as it doesn't have unbound
  (bsc#1086428)</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
</package>
<package pkgid="4ae2887f40b9888e80aa34e1f9b10a0e77f52f66a98e6bb295dcecfe5b026a35" name="go" arch="src">
  <version epoch="0" ver="1.10.4" rel="lp150.2.7.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="85648f4947bc3aca9cfdc1877f6c2cb3f3045afd361197cfecf9f4fa13523139" name="go" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="lp150.2.7.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="d084040621cb778cc7471a87c69421f2c3b7bce2ad5be5d314700913b727f6be" name="go" arch="src">
  <version epoch="0" ver="1.12" rel="lp150.2.11.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="d09fa2de8c5865c615ae8f438d0e2addf7489e3b0364d230ff29581aabd8a300" name="go" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp150.2.11.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="6e4296891fa3930bc58c341810caffc6343c42bd4062931450ab0de16df2baf7" name="go" arch="src">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="c937da2b89a66bbf002091ce6a8ca71360a78a06413a11dc9dde34d06b9c5d38" name="go" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="325d71e01359b8246ef5df89dc323ff26fdb3ddd2eb12d3dcfb226da2713a86a" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="lp150.2.7.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="2d9e58f36ef2177be849e96fa64ce4714e73ea0154ed8c0a0bdc7234225449d1" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp150.2.11.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="30288ed2b01b5088768a5eec61ec8d3e9b2fb7028d6a3d861b240352f24b0fa0" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="1015cc4c2ff13195adb7f18f811322dd2b56f9dd50abee5c44eeaffc38f05924" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="lp150.2.7.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
</package>
<package pkgid="6867308f5fc4318a86edca9e54338060a4048e13cbf3b2c3fef4ceafca47124f" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.12" rel="lp150.2.11.1"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Provide golang(API) = 1.9, so that this symbol can be required
  and provided, as preferred one, by the unversioned go package.</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.
- Changes in version 1.10:
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing string
    values directly between Go and C using cgo. A new compiler option whitelist may
    cause unexpected invalid flag errors in code that built successfully with older releases.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
</package>
<package pkgid="0bc7cdd4a8741768547635dac4714cb7ee024a7eb166e6cf5058f8d754af011f" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="a1d1b02dfe48628a82b05f982ecd4006b04aee789bb9756d33443b05aa312947" name="go1.10" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="lp150.2.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="411208c88a29af0ad06e2e9cf525f04ca37f6505f932459fff70dd31b5ffb7c2" name="go1.10-doc" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="lp150.2.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="d96078c00700d1d4d3bcc7c2bb287a6d8397b3a6ba8dc9b56c6a66cb1647ee75" name="go1.10-race" arch="x86_64">
  <version epoch="0" ver="1.10.7" rel="lp150.2.1"/>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Updated to go1.10.5 (released 2018/11/02)
  * includes fixes to the go command, linker, runtime and the database/sql
    package.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63 go#27247
  * panic: branch too far on arm64 go#25794
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27488
  * GOMIPS environment variable does not affect caching of mipsle code go#27421
  * build does not allow for assembly output to be displayed on cached builds go#25045
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27716
- database/sql:
  * segfault in connection pool when the driver frequently fails to connect go#25235
- mime/multipart:
  * setting `Content-Type` in multipart part prevents it being read in go 1.10 go#25040
- misc/cgo:
  * testplugin fails on Darwin with `runtime: bad pointer in frame` on the latest tip go#26202
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27419
- os/user:
  * LookupId panics on Linux+glibc static build go#24787
- plugin:
  * intermittent SIGSEGV with plugins that use multiple goroutines with cgo on ppc64le go#25800
- plugin:
  * net/http.Get fatals with "runtime: unexpected return pc for runtime.goexit called" go#25038
- syscall:
  * Go Build Fails on Windows With Long Paths go#25292
- x/sys/windows/svc:
  * servicemain argv pointer truncated go#25200</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.10.6 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.10.6 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.10.6</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.10.7 (released 2018/12/14) includes a fix to a bug introduced in
  Go 1.10.6 that broke go get for import path patterns containing "..." (boo#1119706).
  See the Go 1.10.7 milestone on upstream issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.10.7+label%3ACherryPickApproved
  * go#29247 cmd/go: "go get" fails on import path patterns with wildcards ("...")</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="14cc30280e490a88c952d4e4183f958d836825646f75017e9738f8301ecd60e4" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.10" rel="lp150.14.9"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="7988208c64c404390df42fb8cc8f8b1b02f365a7ddbb0426b60ecd7ad7179724" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.10" rel="lp150.14.9"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="46fe0565a234bef2a478f61577ca6f9ed44943261c98d994652db562458c96dc" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.13" rel="lp150.18.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="d3972ffd1304c86175f9148109e09494b9b63fd75d78d47b9b6ac29dc99b1464" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.13" rel="lp150.18.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="98d36af6fea2f46da85d7eda698f47491607e53372499f57d0e091edda1f7b35" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.4" rel="lp150.2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="abce558567eff8c0d8fb642c3e8c3dde31f4b54822532733102cb76a4b949cf0" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.5" rel="lp150.6.4"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
</package>
<package pkgid="a3ea1d1680f0f06c6cc0e79612e02a197246e1ed357245f29da49d3f925ff472" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.5" rel="lp150.6.4"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
</package>
<package pkgid="e1be038c1b8bf8a3ba0c0a6cb271091b71540709ff6e4b9e11046b2100ce9d8e" name="go1.11" arch="src">
  <version epoch="0" ver="1.11.9" rel="lp150.9.3"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="e6f41d9f06e4eb0d907ecd2112c9d83b85739e6e69c50a6d8f42a594a00208cb" name="go1.11" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp150.9.3"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="1fb101b2844008f678cfb669486e7b002f33dbae28023a542c8457798774bc36" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.10" rel="lp150.14.9"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="3c1c327826e37bf80d9c9784a0e89be77c284ef28f65c3de7dd01d99780b8ecd" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.13" rel="lp150.18.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="062dc3a00fd11c5576d000252ed6ad8cbbf4988271d817d8b6987ceb312f9451" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.4" rel="lp150.2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="d44a5a917c54b465d9a345ce9d1e35a30cc348f2e737ecebc06c27de8401a06f" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.5" rel="lp150.6.4"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
</package>
<package pkgid="a4cb00d8ca275cb120f0e201b9fe62f99eaa8181af2c24c784fd3a3aebcba3d1" name="go1.11-doc" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp150.9.3"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="69d439fd31ed06f002a53c3148dc8fb6ffb014be62c755dc6112b57a79762b2e" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.10" rel="lp150.14.9"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
</package>
<package pkgid="11e248e2b1d81cda30a066febe1a6aac61144bb6f1a916623f3324354c1c3b23" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.13" rel="lp150.18.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
  Refs boo#1141688.
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
    Refs boo#1141688.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
    Refs boo#1141688.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  Refs boo#1141688.
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  Refs boo#1141688.
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  Refs boo#1141688.
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  Refs boo#1141688.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  Refs boo#1141688.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141688.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.11.10 (released 2019/05/06) includes fixes to the runtime and
  the linker.
  Refs boo#1141688.
  * go#31195 cmd/go: pseudoversions can refer to external commits
  * go#30989 runtime: dll injection vulnerabilities on Windows</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package.
  Refs boo#1141688.
  * go#32366 net/http: make Transport ignore 408 timeout messages from server
  * go#32281 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#30525 cmd/go: MacOS binaries invalid for eventual Apple Notary
  * go#29618 cmd/go: downloads follow plain-HTTP redirects even when the -insecure flag is not set</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560859200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini.
  Originally from Dominique Leuenberger &lt;dimstar@opensuse.org&gt;</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562673600">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.11.12 (released 2019/07/08) includes fixes to the compiler and
  the linker.
  Refs boo#1141688.
  * go#32711 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32696 debug/dwarf: cgo produces malformed DWARF data
  * go#32582 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.11.13 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141688.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33632 net/url: URL.Parse Multiple Parsing Issues
  * go#33630 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
</package>
<package pkgid="a31a8d412823a45284a8a94e4bb9bdab924f4e3947251af231fdbba1dbeb11e8" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.4" rel="lp150.2.1"/>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
</package>
<package pkgid="a6c582de66d0ac72ac7482ea4f80f5e2490aefbaba00a5d59113fd7c9715b73d" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.5" rel="lp150.6.4"/>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
</package>
<package pkgid="7dfc028de301948471293906e46c843bb119fc1464f810890c9a324338022c14" name="go1.11-race" arch="x86_64">
  <version epoch="0" ver="1.11.9" rel="lp150.9.3"/>
  <changelog author="fcastelli@suse.com" date="1519992000">- Ensure go binaries are not stripped (eg: go tools trace), this cause
  some of them to misbehave
- Ensure go trace html template is shipped as part of the installation,
  otherwise the web UI won't work
- Fix license of go race</changelog>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552305600">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.11.6 (released 2019/03/14) includes fixes to includes fixes
  to cgo, the compiler, linker, runtime, go command, and the
  crypto/x509, encoding/json, net, and net/url packages.
  * go#30815 misc/cgo/test: failing TestCrossPackageTests
  * go#30444 crypto/x509: darwin-386 build is broken
  * go#30081 crypto/x509: certificates with AKID don't chain to parents without SKID
  * go#29967 cmd/cgo: -Waddress-of-packed-member warnings poping up with gcc9 in cgo-gcc-prolog
  * go#29944 x/tools/go/packages: TestLoadImportsGraph failure with custom GOCACHE
  * go#29923 net/url: URL allows malformed query round trip
  * go#29906 x/build/cmd/release: Go 1.11.5 amd64 tarball includes /gocache and /tmp Builders
  * go#29700 net: TestLookupGmailTXT is failing
  * go#29645 x/tools/godoc/redirect: offer Gerrit/Rietveld CL disambiguation when needed
  * go#29565 runtime: fatal error: found bad pointer in Go heap
  * go#29564 x/tools/cmd/godoc: add x/website redirect
  * go#29503 cmd/compile: incorrect code generation bug when taking slice[:0]
  * go#29447 x/sys/unix: go1.11 on mips64le fails at TestFstatat on Debian build
  * go#29442 cmd/go: go1.11.4 toolchain3 build fail with "slice bounds out of range" on 32-bit MIPS on Debian build
  * go#29364 encoding/json: custom UnmarshalTypeError no longer has struct context
  * go#29307 cmd/compile, cmd/link: relocation target go.builtin.error.Error not defined
  * go#28986 runtime: OS thread appears to be re-used despite never releasing runtime.LockOSThread()
  * go#28346 cmd/go: `go test -c` does not respect gcflags sometimes
  * go#26039 crypto/x509: root_cgo_darwin and root_nocgo_darwin omit some system certs
  * go#25041 runtime: runtime.Caller returns invalid zero frame</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554552000">- go1.11.7 (released 2019/04/05) includes fixes to the runtime
  and the net packages.
  * go#30872 runtime: write barrier incorrect on wasm</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.11.9 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.11.8 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.11.7, except for
  its version number. The intended fix is in go1.11.9. go1.11.8 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.11.7</changelog>
</package>
<package pkgid="3e41e58cc7ae736989bcb95126baccb570bbf0364e16a56290f088819554b2ec" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.4" rel="lp150.2.2"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="3bc14c1f877511f0f1e583e07f29328d1dfadd5f7792eeb283c1ca43eb776371" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp150.2.2"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="df62054e3e21a5a9a4dd76239cfdc9613450cc05d237404a08b57a0b300dd9f2" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.6" rel="lp150.5.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="d1eee4484a5338ae6162311530a63b352908adba16140a86952af752132189a6" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.6" rel="lp150.5.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="9e61fa4dc7e9975c5653377ebc9d877d6af1a4924839c7b7dcacf0d87bef26c3" name="go1.12" arch="src">
  <version epoch="0" ver="1.12.9" rel="lp150.8.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="807efe63a7c23624246cbefd10413a4018d2e5be71b64b1dbdd720daf1100871" name="go1.12" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp150.8.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="33cf8f20a482ddd82ecd4741f18167a2b37f1eb5924955a3e57f145bd0a109a4" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp150.2.2"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="1b5be1fb5af587bf63cdc9a70274e8a13b2d3c29b91453dfde1b481ec88a53e9" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.6" rel="lp150.5.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="a30cbf05a452bf2a50aa3197a86a210c6cc56785e57aede95cc3cd2b07c14887" name="go1.12-doc" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp150.8.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="3a11b49db1abd89c1828501b896675e163188a069afe7e21c961583602e9c859" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.4" rel="lp150.2.2"/>
  <changelog author="fcastelli@suse.com" date="1520078400">- Update to go1.10:
  * Most of its changes are in the implementation of the toolchain, runtime, and
    libraries. As always, the release maintains the Go 1 promise of compatibility.
    We expect almost all Go programs to continue to compile and run as before.
  * This release improves caching of built packages, adds caching of successful
    test results, runs vet automatically during tests, and permits passing
    string values directly between Go and C using cgo. A new compiler option
    whitelist may cause unexpected invalid flag errors in code that built
    successfully with older releases.
  * For more details check: https://golang.org/doc/go1.10
- Removed the following patches:
  * verbose-build.patch: build system changed, patch is no longer applies
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1523793600">- Removed
  * go-1.5-install-dont-reinstall-stdlibs.patch: patch no longer needed.
- Changed
  * gcc7-go.patch: go1.10 source code changed, patch is no longer applies.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1526558400">- Update to version 1.10.2:
  * includes fixes to the compiler, linker, and go command.
- Changes in version 1.10.1:
  * includes fixes to the compiler, runtime, and the archive/zip,
    crypto/tls, crypto/x509, encoding/json, net, net/http, and net/http/pprof packages.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version1.10.3:
  * go1.10.3 (released 2018/06/05) includes fixes to the go command,
    and the crypto/tls, crypto/x509, and strings packages. In particular,
    it adds minimal support to the go command for the vgo transition.
    See the Go 1.10.3 milestone on our issue tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
</package>
<package pkgid="426b79775d03faa87f9a6dc6d860e8e94fdb241dae20ae755fed02ed76350c19" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.6" rel="lp150.5.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1535457600">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1538481600">- Update to go1.11.1 (released 2018/10/01)
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1541419200">- Update to go1.11.2 (released 2018/11/02)
  * includes fixes to the compiler, linker, documentation, go command,
    and the database/sql and go/types packages.
- cmd/compile:
  * function argument hiding built-in function results in a compiler crash go#27399
  * go build panics when 'len' keyword was unintentionally shadowed go#27973
- cmd/go:
  * 'go test -coverprofile' emits slash-separated paths on Windows go#27487
  * `go help build` mentions -mod=release, which is not supported go#27398
  * for go mod download, -dir option does not exist go#27498
  * git export-subst causes hash mismatches go#28094
- cmd/trace:
  * SWEEP events' swept/reclaimed bytes info is not emitted go#27717
- database/sql:
  * confusing MaxIdleClosed statistic go#28325
- go/types:
  * embedded interface behavior now dependent on file name ordering go#28249
- misc/wasm:
  * Microsoft Edge 18 (latest) crashes due to TextEncoder not being supported go#27393
- net:
  * io.CopyN fails to copy from file to net.Conn on Windows go#27411
- runtime:
  * wasm: all goroutines asleep and no JavaScript callback pending - deadlock go#27425
- Fix formatting in go1.11.changes</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1544184000">- Remove obsolete patch:
  * armv6l.patch
- Enable %arm build
- Build with go1.4 instead of gccgo for Tumbleweed (fix %arm build)</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544443200">- Fix build error with PIE linker flags on ppc64le. bsc#1113978 boo#1098017
  * gccgo on ppc64le with default PIE enabled fails with:
    error while loading shared libraries:
    R_PPC64_ADDR16_HA re10143fb0c for symbol `' out of range
  * linuxppc-dev discussion:
    "PIE binaries are no longer mapped below 4 GiB on ppc64le"
    https://lists.ozlabs.org/pipermail/linuxppc-dev/2018-November/180862.html
  * Add for ppc64le only: #!BuildIgnore: gcc-PIE
  * OBS environment defaults to PIE
  * Upstream fix for go buildmode PIE desired, track upstream go#28531</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
</package>
<package pkgid="f083a9dedc065c9054edf19394a98cff78475bd84a44d911b774a1fcb0c35b5f" name="go1.12-race" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="lp150.8.1"/>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "..." (boo#1119706). See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1544875201">- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549627200">- Fix erroneous trailing backslash in %post script.
- Use better forms of -exec \; in some places.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1551441600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  Refs boo#1141689.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1552564800">- go1.12.1 (released 2019/03/14) includes fixes to cgo, the
  compiler, the go command, and the fmt, net/smtp, os,
  path/filepath, sync, and text/template packages.
  Refs boo#1141689.
  * go#30816 misc/cgo/test: failing TestCrossPackageTests
  * go#30684 cmd/go: duplicate symbols when including two main packages in -coverpkg in module mode
  * go#30665 cmd/go: module loader looks for the wrong tags if the "go-import" prefix includes the major-version suffix
  * go#30586 path/filepath: EvalSymlinks, incorrect traversal of relative paths
  * go#30579 os: RemoveAll doesn't remove nested un-readable directories
  * go#30567 cmd/compile: function inlining produces incorrect results in certain conditions
  * go#30493 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30484 fmt: map printing sort does not deterministically sort differing types
  * go#30478 cmd/compile: KeepAlive doesn't actually keep stack object alive
  * go#30470 sync: random errors on sync.Once running on MacOS Mojave or High Serra
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30464 text/template: panics on method on nil interface value
  * go#30447 cmd/go: error if GOCACHE is set but is not an absolute path
  * go#30403 net/smtp: SendMail AUTH error with PlainAuth and successful STARTTLS
  * go#30398 fmt: map printing sort does not deterministically sort differing types</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1552910400">- cleaning up the macros and conditionals for gcc go
  - use bcond_with(out) to decide whether we want to use gccgo or
    not. makes it easier to test both code paths as you can use
    osc build --with(out)=gccgo
  - add defines for which go version to use for different versions,
    that way we dont have to use the old 1.4 everywhere anymore.
    this allows us to use go for bootstrapping everywhere
  - do not use gcc go at all as even gcc-go 8 can not handle some
    newer constructs
  - define a gcc_go_version variable and use it through out the
    spec file, this simplifies some conditionals and makes them
    more understandable, and we have the complex if only once.
  - move architecture defines to the top</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1554465600">- go1.12.2 (released 2019/04/05) includes fixes to the compiler, the
  go command, the runtime, and the doc, net, net/http/httputil, and
  os packages.
  Refs boo#1141689.
  * go#31244 go 1.12 binaries rejected from mac app store due to ___getdirentries64
  * go#31211 ioutil: deadlock when WriteFile called with a 5&lt;&lt;30 byte buffer on Windows
  * go#31209 cmd/compile: struct interface{} value lost passing by value
  * go#31155 runtime: remove assumptions on Android Bionic's TLS layout
  * go#31144 net/http/httputil: ReverseProxy FlushInterval no longer flushes headers in go1.12
  * go#31062 net: Error when running concurrent DNS queries using cgo on MacOS
  * go#31028 Go 1.12.1 dsymutil segmentation fault on MacOS Sierra
  * go#30996 cmd/compile: miscompilation of codependent global `var` assigments in go1.12
  * go#30859 os: RemoveAll no longer returns *os.PathError
  * go#30666 runtime: dll injection vulnerabilities on Windows
  * go#30491 os: RemoveAll no longer returns *os.PathError
  * go#30266 cmd/go: executables are sometimes named after their module's last element, not directory</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1555329600">- go1.12.4 (released 2019/04/11) fixes an issue where using the prebuilt binary
  releases on older versions of GNU/Linux led to failures when linking programs
  that used cgo. Only Linux users who hit this issue need to update.
  Unpackaged go1.12.3 (released 2019/04/08) was accidentally released by
  upstream without its intended fix. It is identical to go1.12.2, except for
  its version number. The intended fix is in go1.12.4. go1.12.3 was never
  packaged for SUSE and openSUSE.
  Refs boo#1141689.
  * go#31293 runtime/cgo: unrecognized relocation with binaries shipped in go1.12.2</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1557230400">- go1.12.5 (released 2019/05/06) includes fixes to the compiler, the
  linker, the go command, the runtime, and the os package.
  Refs boo#1141689.
  * go#31783 cmd/go: go get -x prints to stdout
  * go#31763 cmd/go: module loader fails to resolve imports within symlinked source file
  * go#31679 runtime: high-percentile latency of memory allocations has regressed significantly
  * go#31677 runtime: treap implementation of find() doesn't return the best-fit span
  * go#31565 cmd/link: ppc64 broken NeedsFix
  * go#31474 os.RemoveAll failing silently in go 1.12.2 when removing non-empty directories at /
  * go#31469 x/build/cmd/gopherbot: gopherbot needs human intervention
  * go#31396 cmd/compile: &lt;autogenerated&gt;:1: symbol listed multiple times for same type across multiple packages
  * go#31196 cmd/go: pseudoversions can refer to external commits
  * go#31117 cmd/go: go directive is not only added during go mod init, but also under other conditions that are hard to deduce
  * go#30465 cmd/vet: Consider reverting tag conflict for embedded fields
  * go#30399 cmd/vet: possible to get a printf false positive with big.Int</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1560772800">- go1.12.6 (released 2019/06/11) includes fixes to the compiler, the linker,
  the go command, and the crypto/x509, net/http, and os packages.
  Refs boo#1141689.
  * go#32484 cmd/link: fix deferreturn detector
  * go#32367 net/http: make Transport ignore 408 timeout messages from server
  * go#32295 cmd/go: tests failing on linux-amd64-longtest
  * go#32282 crypto/x509: macos 10.14 SIGSEGV in crypto/x509._Cfunc_FetchPEMRoots
  * go#32261 syscall: Windows user32 function (SendInput) behaves incorrectly when called within golang environment
  * go#32168 cmd/go: accept -Wl,-R,path
  * go#32081 os: windows processes started with foreign token inherit the wrong environment [CVE-2019-11888]
  * go#32013 cmd/compile: sparse slices with struct items are not initialized
  * go#30526 cmd/go: MacOS binaries invalid for eventual Apple Notary</changelog>
  <changelog author="Pavol Cupka &lt;palica@liguros.net&gt;" date="1561464000">- adding Web Assembly stuff from misc/wasm to fix boo#1139210
- fixing some minor rpmlint warnings</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1561550400">- Use gcc9 by default by updating define gcc_go_version 9 (was 8)
  * drop unneeded patch gcc8-go.patch</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1562760000">- go1.12.7 (released 2019/07/08) includes fixes to cgo, the compiler,
  and the linker.
  Refs boo#1141689.
  * go#32756 cmd/cgo: generates code with inappropriate array copy
  * go#32712 cmd/compile: wrong calculation result for bit operation
    that's inlined and has all constant shifts in rewrite rules
  * go#32697 debug/dwarf: cgo produces malformed DWARF data
  * go#32583 cmd/compile: `switch` statement on a custom `int32` type
    with negative values behaves differently in two consecutive calls</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1562760001">- Set NO_BRP_AR in order to workaround issues when ar is used for
  a Go ELF file.</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565697600">- go1.12.8 (released 2019/08/13) includes security fixes to the
  net/http and net/url packages addressing CVEs:
  CVE-2019-9512 CVE-2019-9514 CVE-2019-14809
  Refs boo#1141689.
  * bnc#1146111 VUL-0: CVE-2019-9512: go: HTTP/2: flood using PING frames results in unbounded memory growth
  * bnc#1146115 VUL-0: CVE-2019-9514: go: HTTP/2 implementation is vulnerable to a reset flood, potentially leading to a denial of service
  * bnc#1146123 VUL-0: CVE-2019-14809: go: malformed hosts in URLs leads to authorization bypass
  * go#33633 net/url: URL.Parse Multiple Parsing Issues
  * go#33631 net/http: Denial of Service vulnerabilities in the HTTP/2 implementation</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1565870400">- go1.12.9 (released 2019/08/15) includes fixes to the linker and
  the os and math/big packages.
  Refs boo#1141689.
  * go#33557 cmd/link: stack depth check too shallow
  * go#33424 os.RemoveAll: openFdAt function without O_CLOEXEC and cause fd escape to child process
  * go#33040 cmd/link: missing section for relocation target
  * go#32940 math/big: arm64 assembly code for shlVU is incorrect
  * go#30401 doc: syscall: document Setrlimit behavior change on Go 1.12 on macOS</changelog>
</package>
<package pkgid="d15279818b314f92b33dd4092a62feb14da989650b2eb4c49a3892cbe313cda3" name="go1.9" arch="src">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="754326aae847ace7866a3eda0c9e06d7a1553552fd1a355d838af6150694ff0f" name="go1.9" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="4f365fd98532e2ea1b4fe1b6d19cbbce86ecb449258d01bf7922c97e42b3fe4f" name="go1.9-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="2dce175fdbfebc45182ffdc825e043ea3c58d5be7a04f757957e059e118082f0" name="go1.9-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="aa25cf67658e6906c4d0e6cde634d2da48e2389eaff9d603d96deae5d9d3e484" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="lp150.3.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="24b1042f4fff0be444a25a3e18c17708672a8ef2d45a5df30e81b1ef8ae28679" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2704_6da50d197830" rel="lp150.3.6.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
</package>
<package pkgid="663510e8741ff28f6e2f9921042d8b7b789a6abac42d8648d8df4c0b06e50567" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2711_2cfbf9b1f981" rel="lp150.3.10.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
</package>
<package pkgid="78b3e675809f4d18f539a5df6501873c238e13357f0177b38cf6236b909f0625" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp150.3.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="882ee18be3052d9e8129df90a4c10ced5cbdeb9481cdae4e5f735d7fa8a57bf5" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2726_872f0a83c98a" rel="lp150.3.14.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
</package>
<package pkgid="cf69f0ff463efa6220fabaa508ac5608830c5bd49f0ca0d289ba127dbc578e2b" name="golang-github-docker-libnetwork" arch="src">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp150.3.18.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="88631782d18af33bad0649493d84150af0b79e19b8b983866a86483e8150358c" name="golang-github-docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2800_fc5a7d91d54c" rel="lp150.3.18.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
</package>
<package pkgid="b3fe8cd028cf1c85d18ce8211cabfa59e46e63881e5bd35edba36a5afcdc2e8d" name="golang-github-docker-libnetwork-kubic" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2664_3ac297bc7fd0" rel="lp150.3.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1487592000">- initial import</changelog>
  <changelog author="thipp@suse.de" date="1487764800">- Fix build</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1487937600">- add the docker-libnetwork package which installs docker-proxy</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1489406400">- rename lintrc to %{name}-lintrc</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1491998400">- make sure we use go 1.7</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084800">- Update to version 0.0.0+git20161019.0f53435:
  * fix race in serializing sandbox to string
  * Run API check to assert xfrm modules
  * Check for presence before installing forward rules
  * add Created to NetworkInfo
  * Avoid controller/service lock AB/BA situation
  * libnetwork support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Fix map access race in populatedEndpoints
  * Do not use logrus for proxy</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1492084801">- Update to version 0.0.0+git20170119.7b2b1fe:
  * Separate pool parsing from pool auto-allocation
  * Handle containers with different network drivers
  * Remove driver endpoints on network deleting
  * Update loadDriver to use pluginv2.
  * validate network and endpoint name more strictly
  * overlay driver support for Solaris Signed-off-by: Puneet Pruthi &lt;puneetpruthi@gmail.com&gt;
  * Updated vagrant box, ubuntu/vivid64 was remove from atlas.hasicorp.com
  * Use monotonic clock for reaping networkDB entries
  * Reap failed nodes after 24 hours
  * Do not update hosts file with internal networks endpoint IP
  * Fix issue for `--fixed-cidr` when bridge has multiple addresses
  * Add sandbox API for task insertion to service LB and service discovery
  * Enable ping for service vip address
  * Block non exposed port traffic on ingress nw interfaces
  * Fix some typos
  * Respect icc option for internal networks
  * fix nits in comments and log
  * Modify the serial number from 1 to 9
  * Allow concurrent calls to agentClose
  * Fixing incorrect resovler error message shown on daemon startup
  * Add NetworkDB API to fetch the per network peer (gossip cluster) list
  * Vendoring hcsshim to pick overlay changes
  * Windows overlay driver support
  * Change vxlan-id start-idx to 4096
  * If enabling ip forwarding set the default forward policy to drop
  * Register remote network driver on Windows.
  * update reapNode interval
  * remove unused mConfig
  * Check subnet overlap when programming of sandbox interface
  * Refactoring logrus import and formatting This fix tries to fix logrus formatting by removing `f` from `logrus.[Error|Warn|Debug|Fatal|Panic|Info]f` when formatting string is not present. Also fix import name to use original project name 'logrus' instead of 'log'
  * Default GW support for overlay networks
  * Support attachable in network.
  * Update libkv @1d84310
  * Respect auto allocation for --ipv6
  * Increase timeout for local store client
  * Add GetIDInRange API in idm package
  * IDM need not be bound by default vxlan-id start index
  * fix unsafe acces on arm
  * Fix new golint reported errors
  * Fix bug in DeleteNeighbor
  * Add a nil check for sandbox.osSbox
  * Update netlink @17ea11b
  * Set a timeout on the netlink handle sockets
  * Allow spaces in network names
  * Separate service LB &amp; SD from network plumbing
  * Fix bug in needDefaultGW()
  * Revert "Enable ping for service vip address"
  * Add a ICMP reply rule for service VIP
  * Fix bug in link-local unmarshalling
  * Refactoring logrus import and formatting Fix import name to use original project name 'logrus' instead of 'log' Removing `f` from `logrus.Debugf` when formatting string is not present.
  * Serialize embedded resolver Start and Stop
  * Remove unnecessary string formats
  * Fix xtables_lock message probe
  * Control IPv6 on container's interface
  * Create vxlan-id space from 0 instead of starting from 1
  * Fixed misspelling
  * Fix a bug in idm.GetIDInRange()
  * Fix incorrect debug message
  * Add missing locks in agent and service code
  * networkdb: Properly format memberlist logs
  * fix review comments
  * Check for node's presence in networkDB's node map before accessing.
  * Correct regexp to match v6 addresses with zone ID
  * Fix fqdn hostnames not added to /etc/hosts
  * Handling the new experimental daemon flag
  * Handle the case of registering active plugins during remote init
  * Internal interface to differentiate built-in drivers from remote
  * drvregistry to allow overriding plugin
  * Defer PTR queries to external servers based on A/AAAA response
  * Add embedded DNS server support for host loopback resolver
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * make network connect error message readable
  * fix nits in comments
  * fix typos
  * docs/remote.md: Remove unnecessary backquote
  * ResolveName should return copy of IPs
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * fix json
  * Updating Godeps to pull in plugingetter dependancy
  * Make use of GetAllManagedPluginsForCap to avoid loading v1-plugins
  * return an error on overlay subnet is overlapped with hosts
  * Godep update for docker plugingetter pkg
  * carry docker/docker #29564
  * Use vndr for managing libnetwork dependencies
  * proxy: clean up code (addendum to #1598)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1493726400">- fix golang requirements</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1506513600">- fix bsc#1057743: this package provides the fix for this issue.
  I could not change the version of the libnetwork because that is
  attached to the upstream commits, and I can't control the release
  number, so I added this "symbol", fix_bsc_1057743 which is required
  by the latest docker package.</changelog>
  <changelog author="thipp@suse.de" date="1506600000">- always use -buildmode=default</changelog>
  <changelog author="asarai@suse.com" date="1508328000">- Update to version 0.7.0+git4a242dba7739 (required by Docker v17.07_ce):
  * optimize the rebroadcast for failure case
  * Revert "Fixes bug that mistook gw6 for gw."
  * Revert "Funnel peerAdd and peerDelete in a channel"
  * Avoid peerUpdate logic in swarm mode
  * Fixes bug which makes restoring endpoint mess
  * Revert "Avoid peerUpdate logic in swarm mode"
  * Funnel peerAdd and peerDelete in a channel
  * PeerInit for the sandbox init
  * PeerDbDelete was passing the wrong field
  * Lock goroutine to OS thread while changing NS
- Fix up _service file and versioning to actually be somewhat sane.</changelog>
  <changelog author="asarai@suse.com" date="1512993600">- Update to version git.7b2b1feb1de4817d522cc372af149ff48d25028e (required by
  Docker v17.09.1_ce):
  * proxy: clean up code (addendum to #1598)
  * Use vndr for managing libnetwork dependencies
  * carry docker/docker #29564
  * Godep update for docker plugingetter pkg
  * return an error on overlay subnet is overlapped with hosts
  * Prioritize nw endpoint which can provide both v4 and v6 connectivity
  * proxy: fix an issue about half-closing net.TCPConn after io.Copy()
  * Add embedded DNS server support for host loopback resolver
  * Fix fqdn hostnames not added to /etc/hosts</changelog>
  <changelog author="vrothberg@suse.com" date="1517227200">- Correct conflict with docker &lt; 17.09.0_ce to avoid a file conflict on
  docker-proxy.</changelog>
  <changelog author="vrothberg@suse.com" date="1517400000">- Make it conflict with the non-Kubic package to avoid a file conflict in
  Factory.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
</package>
<package pkgid="3466cfad64392b89e13aa747c2a25f980a3a180488738b657428813e30090429" name="golang-github-prometheus-alertmanager" arch="src">
  <version epoch="0" ver="0.16.2" rel="lp150.2.3.1"/>
  <changelog author="tserong@suse.com" date="1495713600">- Initial version
- Adjust default settings
- Added:
  * 0001-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
</package>
<package pkgid="c60e5e73c302e2b454cde86af467a927b3345ff010f4bbc2564e17815c41e198" name="golang-github-prometheus-alertmanager" arch="x86_64">
  <version epoch="0" ver="0.16.2" rel="lp150.2.3.1"/>
  <changelog author="tserong@suse.com" date="1495713600">- Initial version
- Adjust default settings
- Added:
  * 0001-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.13.0
  See https://github.com/prometheus/alertmanager/releases</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix argument for %fdupes
- Update to 0.14.0:
  + Enhancements:
  * Allow templating PagerDuty receiver severity
  * Include receiver name in failed notifications log messages
  * Add mesh metrics
  + Bug fixes:
  * Don't notify of resolved alerts if none were reported firing
  * Notify only when new firing alerts are added
  * Don't count alerts with EndTime in the future as resolved</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521115200">- fix config token in alermanager.yml hipchat_url -&gt; hipchat_api_url</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1549627200">- Update to 0.16.1:
  + Bug Fixes:
  * Do not populate cluster info if clustering is disabled in API v2
- Update to 0.16.0:
  + Deprecate API v1
  + Remove api/v1/alerts/groups GET endpoint
  + Revert Alertmanager working directory changes in Docker image back to /alertmanager
  + Using the recommended label syntax for maintainer in Dockerfile
  + Change alertmanager_notifications_total to count attempted notifications, not only successful ones (#1578)
  + Run as nobody inside container
  + Support w for weeks when creating silences, remove y for year
  + Features:
  * Introduce OpenAPI generated API v2
  * Lookup parts in strings using regexp.MatchString in templates
  * Support image/thumb url in attachment in Slack notifier
  * Support custom TLS certificates for the email notifier
  * Add support for images and links in the PagerDuty notification config
  * Add support for grouping by all labels
  * [amtool] Add timeout support to amtool commands
  * [amtool] Added config routes tools for vizualization and testing routes
  * [amtool] Support adding alerts using amtool
  + Enhancements:
  * Add support for --log.format
  * Add CORS support to API v2
  * Support HTML, URL title and custom sounds for Pushover
  * Update Alert compact view
  * Support adding custom fields to VictorOps notifications
  * Add help link in UI to Alertmanager documentation
  * Enforce HTTP or HTTPS URLs in Alertmanager config
  * Make OpsGenie API Key a templated string
  * Add name, value and SlackConfirmationField to action in Slack notifier
  * Show more alert information on silence form and silence view pages
  * Add cluster peers DNS refresh job
  + Bug Fixes:
  * Fix unmarshalling of secret URLs in config
  * Do not write groupbyall and groupby when marshaling config
  * Make a copy of firing alerts with EndsAt=0 when flushing
  * Respect regex matchers when recreating silences in UI
  * Change DefaultGlobalConfig to a function in Alertmanager configuration
  * Fix email template typo in alert-warning style
  * Fix silence redirect on silence creation UI page
  * Add missing callback_id parameter in Slack notifier
  * Throw error if no auth mechanism matches in email notifier
  * Use quoted-printable transfer encoding for the email notifier
  * Do not merge expired gossip messages
  * Fix "PLAIN" auth during notification via smtp-over-tls on port 465
  * [amtool] Support for assuming first label is alertname in silence add and query
  * [amtool] Support assuming first label is alertname in alert query with matchers
  * [amtool] Fix config path check in amtool
  * [amtool] Fix rfc3339 example texts
  * [amtool] Fixed issue with loading path of a default configs
- Update to 0.15.3
  + Bug Fixes:
  * Fix alert merging supporting both empty and set EndsAt property for firing alerts send by Prometheus
- Update to 0.15.2:
  + Enhancements:
  * [amtool] Add support for stdin to check-config
  * Log PagerDuty v1 response on BadRequest
  + Bug Fixes:
  * Correctly encode query strings in notifiers (#1516)
  * Add cache control headers to the API responses to avoid IE caching
  * Avoid listener blocking on unsubscribe
  * Fix a bunch of unhandled errors
  * Update PagerDuty API V2 to send full details on resolve
  * Validate URLs at config load time
  * Fix Settle() interval
  * Fix email to be green if only none firing
  * Handle errors in notify
  * Fix templating of hipchat room id
- Update to 0.15.1:
  + Bug Fixes:
  * Fix email template typo in alert-warning style
  * Fix regression in Pager Duty config
  * Catch templating errors in Wechat Notify
  * Fail when no private address can be found for cluster
  * Make sure we don't miss the first pushPull when joining cluster
  * Fix concurrent read and wirte group error in dispatch
- Update to 0.15.0:
  + [amtool] Update silence add and update flags
  + Replace deprecated InstrumentHandle
  + Validate Slack field config and only allow the necessary input
  + Remove legacy alert ingest endpoint
  + Move to memberlist as underlying gossip protocol including cluster flag changes from --mesh.xxx to --cluster.xxx
  + Move Alertmanager working directory in Docker image to /etc/alertmanager
  + The default group by is no labels.
  + Features:
  * [amtool] Filter alerts by receiver
  * Wait for mesh to settle before sending alerts
  * [amtool] Support basic auth in alertmanager url
  * Make HTTP clients used for integrations configurable
  + Enhancements:
  * Support receiving alerts with end time and zero start time
  * Sort dispatched alerts by job+instance
  * Support alert query filters active and unprocessed
  * [amtool] Expose alert query flags --active and --unprocessed
  * Add Slack actions to notifications
  + Bug Fixes:
  * Register nflog snapShotSize metric
  * Sort alerts in correct order before flushing to notifiers
  * Don't reset initial wait timer if flush is in-progress
  * Fix resolved alerts still inhibiting
  * Template wechat config fields
  * Notify resolved alerts properly
  * Fix parsing for label values with commas
  * Hide sensitive Wechat configuration
  * Prepopulate matchers when recreating a silence
  * Fix wechat panic
  * Allow empty matchers in silences/filtering
  * Properly configure HTTP client for Wechat integration</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1555416000">- Update to 0.16.2
  + Bug Fixes:
  * Redact notifier URL from logs to not leak secrets embedded in the URL
  * Allow sending of unauthenticated SMTP requests when smtp_auth_username is not supplied</changelog>
</package>
<package pkgid="d1c42e76b0dbf48d78c2453c6d3c5824b1e60ec2b88ebf83260348132111f1a0" name="golang-github-prometheus-node_exporter" arch="src">
  <version epoch="0" ver="0.17.0" rel="lp150.2.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
</package>
<package pkgid="750d194a6052fda1e8fc01eed588732786f8565f22c828bdf7c29c449bde558d" name="golang-github-prometheus-node_exporter" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.2.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
</package>
<package pkgid="40773e71fc35cb63f5bf3f604664fb59d7cc9bc769287534ce59619109802303" name="golang-github-prometheus-prometheus" arch="src">
  <version epoch="0" ver="2.11.1" rel="lp150.2.6.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1493208000">- Add BuildRequires: glibc-devel-static to fix aarch64 build</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file and default config (/etc/prometheus/prometheus.yml)
- Run as unprivileged "prometheus" user
- Default to /etc/prometheus for config and /var/lib/prometheus for metrics
  + Added 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1502884800">- Update to v2.0.0-beta.1
  + Includes a new storage layer, which reduces bottlenecks and shows
    considerable performance improvements, but does not work with old v1
    storage data.
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1503403200">- Update to v2.0.0-beta.2
  + vendor: update prometheus/tsdb (Fix panic caused by 0 division)</changelog>
  <changelog author="tserong@suse.com" date="1505736000">- Update to v2.0.0-beta.4:
  + Numerous changes to the new storage layer, the main changes being:
  * Single, compacted write ahead log
  * Single in-memory block with garbage collection
  * Improve compression of index files
  * Cache series dropped via metric_relabel_configs
  * Pool byte buffers for scraping
  + Overall the changes achieve a baseline reduction in memory consumption
    and reduce peak memory usage by 30-40% compared to 2.0.0-beta.2
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases</changelog>
  <changelog author="tserong@suse.com" date="1506081600">- Update to v2.0.0-beta.5:
  + Bug Fixes:
  * Remove deadlock on startup when restoring WAL
  * Fix semantical races resulting in invalid persisted files
  * Correctly read back WAL in certain edge cases
  * Prevent crashes caused by changing metric representations in target's
    /metrics
  + Enhancements:
  * Overall memory usage reduction
  * Serve debugging endpoints while TSDB is loading
  * Healthy endpoint correctly reflects liveness during startup
  * Switch to consistent usage of go-kit/log
  + This release may have issues with files written by previous beta releases
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1506254400">- Fix loopback address for REST API gateway (bsc#1059462)
  + Added pr-3174.patch</changelog>
  <changelog author="tserong@suse.com" date="1507723200">- Update to v2.0.0-rc.0:
  + Numerous changes to the new storage layer, the main changes being:
  * Remove `count_scalar`, `keep_common` and `drop_common_labels` functions
  * Breaking change in the index format for better consistency
  * Fix panic due garbage collected mmap'ed strings
  * Fix broken snapshots and admin APIs
  * Send HTTP Accept header when scraping
  * Use the WAL flush interval passed instead of the hardcoded value
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1508414400">- Update to v2.0.0-rc.1:
  + Features/Enhancements:
  * Added a warning for time-drift between the browser and the
    prometheus-server.
  * Much faster WAL read-back on restart.
  + Bug Fixes:
  * Fixed Remote-read to not drop the first series.
  * Validate recording-rule names.
  * Fix several races.
  * Only close blocks if there are no iterators accessing it.
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1509105600">- Update to v2.0.0-rc.2 (bsc#1065377):
  + Enhancements:
  * Handle WAL segments with corrupted header gracefully
  * Stabilize memory usage during WAL replay
  + Changes:
  * Prefix all storage metrics with prometheus_
  + Bug Fixes:
  * Correctly handle label removal in remote read
  * Fix chunk misalignment causing out-of-order samples
  * Fix connection leak in Consul SD
  * Handle invalid chunk dereferences gracefully
  * Prevent potential deadlock during failing querier construction</changelog>
  <changelog author="tserong@suse.com" date="1510056000">- Update to v2.0.0-rc.3 (bsc#1067030):
  + Enhancements:
  * Remove remote read from the query path if no remote storage
    is configured.
  * Bump Consul HTTP client timeout to not match the Consul SD
    watch timeout.
  * Bump up a too small max block duration to the min block
    duration instead of returning an error.
  + Bug Fixes:
  * Avoid needless padding of 4 zero bytes in index files.
  * Delete old blocks during reload (necessary on MS Windows).
  * Fix regression of alert rules state loss on config reload.
  * Serialize background WAL operations to avoid data races.
  + This also contains bugfixes and remote-storage features from
    the 1.8 branch.</changelog>
  <changelog author="tserong@suse.com" date="1510228800">- Update to final v2.0.0 release (bsc#1067341):
  + Compared to version 1.x, this release includes a completely rewritten
    storage engine, huge performance improvements, but also many backwards
    incompatible changes.  For more information, read the announcement blog
    post and migration guide:
  - https://prometheus.io/blog/2017/11/08/announcing-prometheus-2-0/
  - https://prometheus.io/docs/prometheus/2.0/migration/
  + Changes:
  * Completely rewritten storage layer, with WAL.  This is not backwards
    compatible with 1.x storage,  and many flags have changed/disappeared.
  * New staleness behavior. Series now marked stale after target scrapes
    no longer return them, and soon after targets disappear from service
    discovery.
  * Rules files use YAML syntax now.  Conversion tool added to promtool.
  * Removed count_scalar, drop_common_labels functions and keep_common
    modifier from PromQL.
  * Rewritten exposition format parser with much higher performance.  The
    Protobuf exposition format is no longer supported.
  * Example console templates updated for new storage and metrics names.
    Examples other than node exporter and Prometheus removed.
  * Admin and lifecycle APIs now disabled by default, can be reenabled via
    flags
  * Flags switched to using Kingpin, all flags are now --flagname rather
    than -flagname.
  + Features:
  * Remote read can be configured to not read data which is available
    locally.  This is enabled by default.
  * Rules can be grouped now.  Rules within a rule group are executed
    sequentially.
  * Added experimental GRPC apis
  * Add timestamp() function to PromQL.
  + Enhancements:
  * Remove remote read from the query path if no remote storage is
    configured.
  * Bump Consul HTTP client timeout to not match the Consul SD watch
    timeout.
  * Go-conntrack added to provide HTTP connection metrics.
  + Bug Fixes:
  * Fix connection leak in Consul SD.</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 2.1.0:
  + Features:
  * New Service Discovery UI showing labels before and after relabelling.
  * New Admin APIs added to v1 to delete, snapshot and remove tombstones.
  + Enhancements:
  * The graph UI autcomplete now includes your previous queries.
  * Federation is now much faster for large numbers of series.
  * Added new metrics to measure rule timings.
  * Rule evaluation times added to the rules UI.
  * Added metrics to measure modified time of file SD files.
  * Kubernetes SD now includes POD UID in discovery metadata.
  * The Query APIs now return optional stats on query execution times.
  * The index now no longer has the 4GiB size limit and is also smaller.
  + Bug Fixes:
  * Remote read read_recent option is now false by default.
  * Pass the right configuration to each Alertmanager (AM) when using
    multiple AM configs.
  * Fix not-matchers not selecting series with labels unset.
  * tsdb: Fix occasional panic in head block.
  * tsdb: Close files before deletion to fix retention issues on Windows
    and NFS.
  * tsdb: Cleanup and do not retry failing compactions.
  * tsdb: Close WAL while shutting down.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix directory for fdupes</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1549627200">- Update to 2.7.1:
  + Bug Fixes:
  * Fix a Stored DOM XSS vulnerability with query history (boo#1124610)
  * prometheus_rule_group_last_duration_seconds now reports seconds instead of nanoseconds
  * Make sure the targets are consistently sorted in the targets page
- Update to 2.7.0:
  + cli flag depreacted: storage.tsdb.retention use storage.tsdb.retention.time
    instead; depreacted flag will be removed in 3.0
  + Features:
  * Add subqueries to PromQL
  * Add support for disk size based retention. Note that we don't
    consider the WAL size which could be significant and the time
    based retention policy also applies (experimental)
  * Add CORS origin flag
  + Bug Fixes:
  * Don't depend on given order when comparing samples in alert unit testing
  * Make sure the retention period doesn't overflow
  * Don't generate blocks with no samples
- Update to 2.6.0:
  + Remove default flags from the container's entrypoint, run Prometheus from
    /etc/prometheus and symlink the storage directory to /etc/prometheus/data
  + Promtool: Remove the update command
  + Features:
  * Add JSON log format via the --log.format flag
  * API: Add /api/v1/labels endpoint to get all label names
  * Web: Allow setting the page's title via the --web.ui-title flag
  + Enhancements:
  * Add prometheus_tsdb_lowest_timestamp_seconds, prometheus_tsdb_head_min_time_seconds
    and prometheus_tsdb_head_max_time_seconds metrics
  * Add rule_group_last_evaluation_timestamp_seconds metric
  * Add prometheus_template_text_expansion_failures_total and prometheus_template_text_expansions_total metrics
  * Set consistent User-Agent header in outgoing requests
  * Azure SD: Error out at load time when authentication parameters are missing
  * EC2 SD: Add the machine's private DNS name to the discovery metadata
  * EC2 SD: Add the operating system's platform to the discovery metadata
  * Kubernetes SD: Add the pod's phase to the discovery metadata
  * Kubernetes SD: Log Kubernetes messages
  * Promtool: Collect CPU and trace profiles
  * Promtool: Support writing output as JSON
  * Remote Read: Return available data if remote read fails partially
  * Remote Write: Improve queue performance
  * Remote Write: Add min_shards parameter to set the minimum number of shards
  * TSDB: Improve WAL reading
  * TSDB: Memory improvements
  * Web: Log stack traces on panic
  * Web UI: Add copy to clipboard button for configuration
  * Web UI: Support console queries at specific times
  * Web UI: group targets by job then instance
  + Bug Fixes:
  * Deduplicate handler labels for HTTP metrics
  * Fix leaked queriers causing shutdowns to hang
  * Fix configuration loading panics on nil pointer slice elements
  * API: Correctly skip mismatching targets on /api/v1/targets/metadata
  * API: Better rounding for incoming query timestamps
  * Discovery: Remove all targets when the scrape configuration gets empty
  * PromQL: Fix a goroutine leak in the lexer/parser
  * Scrape: Fix deadlock in the scrape's manager
  * Scrape: Scrape targets at fixed intervals even after Prometheus restarts
  * TSDB: Support restored snapshots including the head properly
  * TSDB: Repair WAL when the last record in a segment is torn
- Update to 2.5.0
  + Group targets by scrape config instead of job name
  + Marathon SD: Various changes to adapt to Marathon 1.5+
  + Discovery: Split prometheus_sd_discovered_targets metric by scrape and
    notify (Alertmanager SD) as well as by section in the respective configuration
  + Enhancements:
  * Support s390x platform for Linux
  * API: Add prometheus_api_remote_read_queries metric tracking currently
    executed or waiting remote read API requests
  * Remote Read: Add prometheus_remote_storage_remote_read_queries metric
    tracking currently in-flight remote read queries
  * Remote Read: Reduced memory usage
  * Discovery: Add prometheus_sd_discovered_targets,
    prometheus_sd_received_updates_total, prometheus_sd_updates_delayed_total,
    and prometheus_sd_updates_total metrics for discovery subsystem
  * Discovery: Improve performance of previously slow updates of changes of targets
  * Kubernetes SD: Add extended metrics
  * OpenStack SD: Support discovering instances from all projects
  * OpenStack SD: Discover all interfaces
  * OpenStack SD: Support tls_config for the used HTTP client
  * Triton SD: Add ability to filter triton_sd targets by pre-defined groups
  * Web UI: Avoid browser spell-checking in expression field
  * Web UI: Add scrape duration and last evaluation time in targets and rules pages
  * Web UI: Improve rule view by wrapping lines
  * Rules: Error out at load time for invalid templates, rather than at evaluation time
  + Bug Fixes:
  * Change max/min over_time to handle NaNs properly
  * Check label name for count_values PromQL function
  * Ensure that vectors and matrices do not contain identical label-sets
- Update to 2.4.3
  + Bug Fixes:
    [BUGFIX] Fix panic when using custom EC2 API for SD #4672
    [BUGFIX] Fix panic when Zookeeper SD cannot connect to servers #4669
    [BUGFIX] Make the skip_head an optional parameter for snapshot API #4674
- Update to 2.4.2
  + Bug Fixes:
    [BUGFIX] Handle WAL corruptions properly prometheus/tsdb#389
    [BUGFIX] Handle WAL migrations correctly on Windows prometheus/tsdb#392
- Update to 2.4.1
  + New TSDB metrics
  + Bug Fixes:
  Render UI correctly for Windows
- Update to 2.4.0
  + The WAL implementation has been re-written so the storage is not forward
    compatible. Prometheus 2.3 storage will work on 2.4 but not vice-versa
  + Reduce remote write default retries
  + Remove /heap endpoint
  + Features:
  * Persist alert 'for' state across restarts
  * Add API providing per target metric metadata
  * Add API providing recording and alerting rules
  + Enhancements:
  * Brand new WAL implementation for TSDB. Forwards incompatible with previous WAL.
  * Show rule evaluation errors in UI
  * Throttle resends of alerts to Alertmanager
  * Send EndsAt along with the alert to Alertmanager
  * Limit the samples returned by remote read endpoint
  * Limit the data read in through remote read
  * Coalesce identical SD configuations
  * promtool: Add new commands for debugging and querying
  * Update console examples for node_exporter v0.16.0
  * Optimize PromQL aggregations
  * Remote read: Add Offset to hints
  * consul_sd: Add support for ServiceMeta field
  * ec2_sd: Maintain order of subnet_id label
  * ec2_sd: Add support for custom endpoint to support EC2 compliant APIs
  * ec2_sd: Add instance_owner label
  * azure_sd: Add support for VMSS discovery and multiple environments
  * gce_sd: Add instance_id label
  * Forbid rule-abiding robots from indexing
  * Log virtual memory limits on startup
  + Bug Fixes:
  * Wait for service discovery to stop before exiting
  * Render SD configs properly
  * Only add LookbackDelta to vector selectors
  * ec2_sd: Handle panic-ing nil pointer
  * consul_sd: Stop leaking connections
  * Use templated labels also to identify alerts
  * Reduce floating point errors in stddev and related functions
  * Log errors while encoding responses
- Update to 2.3.2
  + Bug Fixes:
  * Fix various tsdb bugs
  * Reorder startup and shutdown to prevent panics.
  * Exit with non-zero code on error
  * discovery/kubernetes/ingress: fix scheme discovery
  * Fix race in zookeeper sd
  * Better timeout handling in promql
  * Propogate errors when selecting series from the tsdb
- Update to 2.3.1
  + Bug Fixes:
  * Avoid infinite loop on duplicate NaN values.
  * Fix nil pointer deference when using various API endpoints
  * config: set target group source index during unmarshalling
  * discovery/file: fix logging
  * kubernetes_sd: fix namespace filtering
  * web: restore old path prefix behavior
  * web: remove security headers added in 2.3.0
- Update to 2.3.0
  + marathon_sd: use auth_token and auth_token_file for token-based authentication
    instead of bearer_token and bearer_token_file respectively
  + Metric names for HTTP server metrics changed
  + Features:
  * Add query commands to promtool
  * Add security headers to HTTP server responses
  * Pass query hints via remote read API
  * Basic auth passwords can now be configured via file across all configuration
  + Enhancements:
  * Optimise PromQL and API serialization for memory usage and allocations
  * Limit number of dropped targets in web UI
  * Consul and EC2 service discovery allow using server-side filtering for performance improvement
  * Add advanced filtering configuration to EC2 service discovery
  * marathon_sd: adds support for basic and bearer authentication, plus all
    other common HTTP client options (TLS config, proxy URL, etc.)
  * Provide machine type metadata and labels in GCE service discovery
  * Add pod controller kind and name to Kubernetes service discovery data
  * Move TSDB to flock-based log file that works with Docker containers
  + Bug Fixes:
  * Properly propagate storage errors in PromQL
  * Fix path prefix for web pages
  * Fix goroutine leak in Consul service discovery
  * Fix races in scrape manager
  * Fix OOM for very large k in PromQL topk() queries
  * Make remote write more resilient to unavailable receivers
  * Make remote write shutdown cleanly
  * Don't leak files on errors in TSDB's tombstone cleanup
  * Unary minus expressions now removes the metric name from results
  * Fix bug that lead to wrong amount of samples considered for time range expressions
- Update to 2.2.1
  + Bug Fixes:
  * Fix data loss in TSDB on compaction
  * Correctly stop timer in remote-write path
  * Fix deadlock triggered by loading targets page
  * Fix incorrect buffering of samples on range selection queries
  * Handle large index files on windows properly
- Update to 2.2.0
  + This release introduces improvements to the storage format and fixes a
    regression introduced in 2.1. As a result Prometheus servers upgraded
    to 2.2 cannot be downgraded to a lower version anymore!
  + Rename file SD mtime metric
  + Send target update on empty pod IP in Kubernetes SD
  + Features:
  * Add API endpoint for flags.
  * Add API endpoint for dropped targets.
  * Display annotations on alerts page.
  * Add option to skip head data when taking snapshots
  + Enhancements:
  * Federation performance improvement.
  * Read bearer token file on every scrape.
  * Improve typeahead on /graph page.
  * Change rule file formatting.
  * Set consul server default to localhost:8500.
  * Add dropped Alertmanagers to API info endpoint.
  * Add OS type meta label to Azure SD.
  * Validate required fields in SD configuration.
  + Bug Fixes:
  * Prevent stack overflow on deep recursion in TSDB.
  * Correctly read offsets in index files that are greater than 4GB.
  * Fix scraping behavior for empty labels.
  * Drop metric name for bool modifier.
  * Fix races in discovery.
  * Fix Kubernetes endpoints SD for empty subsets.
  * Throttle updates from SD providers, which caused increased CPU usage and allocations.
  * Fix TSDB block reload issue.
  * Fix PromQL printing of empty without().
  * Don't reset FiredAt for inactive alerts.
  * Fix erroneous file version changes and repair existing data.
- remove pr-3174.patch, has been fixed in https://github.com/prometheus/prometheus/pull/3517</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- fix spec file: actually ship promtool</changelog>
  <changelog author="Simon Crute &lt;simon.crute@grafana.com&gt;" date="1562241600">- rebase patch002-Default-settings.patch
- Update to 2.10.0:
  + Bug Fixes:
  * TSDB: Don't panic when running out of disk space and recover nicely from the condition
  * TSDB: Correctly handle empty labels.
  * TSDB: Don't crash on an unknown tombstone reference.
  * Storage/remote: Remove queue-manager specific metrics if queue no longer exists.
  * PromQL: Correctly display {__name__="a"}.
  * Discovery/kubernetes: Use service rather than ingress as the name for the service workqueue.
  * Discovery/azure: Don't panic on a VM with a public IP.
  * Web: Fixed Content-Type for js and css instead of using /etc/mime.types.
  * API: Encode alert values as string to correctly represent Inf/NaN.
  + Features:
  * Template expansion: Make external labels available as $externalLabels in alert and console template expansion.
  * TSDB: Add prometheus_tsdb_wal_segment_current metric for the WAL segment index that TSDB is currently writing to. tsdb
  * Scrape: Add scrape_series_added per-scrape metric. #5546
  + Enhancements
  * Discovery/kubernetes: Add labels __meta_kubernetes_endpoint_node_name and __meta_kubernetes_endpoint_hostname.
  * Discovery/azure: Add label __meta_azure_machine_public_ip.
  * TSDB: Simplify mergedPostings.Seek, resulting in better performance if there are many posting lists. tsdb
  * Log filesystem type on startup.
  * Cmd/promtool: Use POST requests for Query and QueryRange. client_golang
  * Web: Sort alerts by group name.
  * Console templates: Add convenience variables $rawParams, $params, $path.
- Upadte to 2.9.2
  + Bug Fixes:
  * Make sure subquery range is taken into account for selection
  * Exhaust every request body before closing it
  * Cmd/promtool: return errors from rule evaluations
  * Remote Storage: string interner should not panic in release
  * Fix memory allocation regression in mergedPostings.Seek tsdb
- Update to 2.9.1
  + Bug Fixes:
  * Discovery/kubernetes: fix missing label sanitization
  * Remote_write: Prevent reshard concurrent with calling stop
- Update to 2.9.0
  + Feature:
  * Add honor_timestamps scrape option.
  + Enhancements:
  * Update Consul to support catalog.ServiceMultipleTags.
  * Discovery/kubernetes: add present labels for labels/annotations.
  * OpenStack SD: Add ProjectID and UserID meta labels.
  * Add GODEBUG and retention to the runtime page.
  * Add support for POSTing to /series endpoint.
  * Support PUT methods for Lifecycle and Admin APIs.
  * Scrape: Add global jitter for HA server.
  * Check for cancellation on every step of a range evaluation.
  * String interning for labels &amp; values in the remote_write path.
  * Don't lose the scrape cache on a failed scrape.
  * Reload cert files from disk automatically. common
  * Use fixed length millisecond timestamp format for logs. common
  * Performance improvements for postings.
  Bug Fixes:
  * Remote Write: fix checkpoint reading.
  * Check if label value is valid when unmarshaling external labels from YAML.
  * Promparse: sort all labels when parsing.
  * Reload rules: copy state on both name and labels.
  * Exponentation operator to drop metric name in result of operation.
  * Config: resolve more file paths.
  * Promtool: resolve relative paths in alert test files.
  * Set TLSHandshakeTimeout in HTTP transport. common
  * Use fsync to be more resilient to machine crashes.
  * Keep series that are still in WAL in checkpoints.
- Update to 2.8.1
  + Bug Fixes
  * Display the job labels in /targets which was removed accidentally
- Update to 2.8.0
  + Change:
  * This release uses Write-Ahead Logging (WAL) for the remote_write API. This currently causes a slight increase in memory usage, which will be addressed in future releases.
  * Default time retention is used only when no size based retention is specified. These are flags where time retention is specified by the flag --storage.tsdb.retention and size retention by --storage.tsdb.retention.size.
  * prometheus_tsdb_storage_blocks_bytes_total is now prometheus_tsdb_storage_blocks_bytes.
  + Feature:
  * (EXPERIMENTAL) Time overlapping blocks are now allowed; vertical compaction and vertical query merge. It is an optional feature which is controlled by the --storage.tsdb.allow-overlapping-blocks flag, disabled by default.
  + Enhancements:
  * Use the WAL for remote_write API.
  * Query performance improvements.
  * UI enhancements with upgrade to Bootstrap 4.
  * Reduce time that Alertmanagers are in flux when reloaded.
  * Limit number of metrics displayed on UI to 10000.
  * (1) Remember All/Unhealthy choice on target-overview when reloading page. (2) Resize text-input area on Graph page on mouseclick.
  * In histogram_quantile merge buckets with equivalent le values.
  * Show list of offending labels in the error message in many-to-many scenarios.
  * Show Storage Retention criteria in effect on /status page.
  + Bug Fixes:
    + Fix sorting of rule groups.
    + Fix support for password_file and bearer_token_file in Kubernetes SD.
    + Scrape: catch errors when creating HTTP clients
    + Adds new metrics:
    prometheus_target_scrape_pools_total
    prometheus_target_scrape_pools_failed_total
    prometheus_target_scrape_pool_reloads_total
    prometheus_target_scrape_pool_reloads_failed_total
    + Fix panic when aggregator param is not a literal.</changelog>
  <changelog author="Simon Crute &lt;simon.crute@grafana.com&gt;" date="1563451200">- readded _service file removed in error.
- Update to 2.11.1
  + Bug Fix:
  * Fix potential panic when prometheus is watching multiple zookeeper paths.
- Update to 2.11.0
  + Bug Fix:
  * resolve race condition in maxGauge.
  * Fix ZooKeeper connection leak.
  * Improved atomicity of .tmp block replacement during compaction for usual case.
  * Fix "unknown series references" after clean shutdown.
  * Re-calculate block size when calling block.Delete.
  * Fix unsafe snapshots with head block.
  * prometheus_tsdb_compactions_failed_total is now incremented on any compaction failure.
  + Changes:
  * Remove max_retries from queue_config (it has been unused since rewriting remote-write to utilize the write-ahead-log)
  * The meta file BlockStats no longer holds size information. This is now dynamically calculated and kept in memory. It also includes the meta file size which was not included before
  * Renamed metric from prometheus_tsdb_wal_reader_corruption_errors to prometheus_tsdb_wal_reader_corruption_errors_total
  + Features:
  * Add option to use Alertmanager API v2.
  * Added humanizePercentage function for templates.
  * Include InitContainers in Kubernetes Service Discovery.
  * Provide option to compress WAL records using Snappy.
  + Enhancements:
  * Create new clean segment when starting the WAL.
  * Reduce allocations in PromQL aggregations.
  * Add storage warnings to LabelValues and LabelNames API results.
  * Add prometheus_http_requests_total metric.
  * Enable openbsd/arm build.
  * Remote-write allocation improvements.
  * Query performance improvement: Efficient iteration and search in HashForLabels and HashWithoutLabels.
  * Allow injection of arbitrary headers in promtool.
  * Allow passing external_labels in alert unit tests groups.
  * Allows globs for rules when unit testing.
  * Improved postings intersection matching.
  * Reduced disk usage for WAL for small setups.
  * Optimize queries using regexp for set lookups.</changelog>
  <changelog author="Joao Cavalheiro &lt;jcavalheiro@suse.com&gt;" date="1564056000">- Add support for Uyuni/SUSE Manager service discovery
  + Added 0003-Add-Uyuni-service-discovery</changelog>
</package>
<package pkgid="e66fc6ed57b71f70b2f0df4959b6f964f096aa606b3fe45fa59e81b6f8300138" name="golang-github-prometheus-prometheus" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.2.6.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1493208000">- Add BuildRequires: glibc-devel-static to fix aarch64 build</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file and default config (/etc/prometheus/prometheus.yml)
- Run as unprivileged "prometheus" user
- Default to /etc/prometheus for config and /var/lib/prometheus for metrics
  + Added 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1502884800">- Update to v2.0.0-beta.1
  + Includes a new storage layer, which reduces bottlenecks and shows
    considerable performance improvements, but does not work with old v1
    storage data.
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1503403200">- Update to v2.0.0-beta.2
  + vendor: update prometheus/tsdb (Fix panic caused by 0 division)</changelog>
  <changelog author="tserong@suse.com" date="1505736000">- Update to v2.0.0-beta.4:
  + Numerous changes to the new storage layer, the main changes being:
  * Single, compacted write ahead log
  * Single in-memory block with garbage collection
  * Improve compression of index files
  * Cache series dropped via metric_relabel_configs
  * Pool byte buffers for scraping
  + Overall the changes achieve a baseline reduction in memory consumption
    and reduce peak memory usage by 30-40% compared to 2.0.0-beta.2
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases</changelog>
  <changelog author="tserong@suse.com" date="1506081600">- Update to v2.0.0-beta.5:
  + Bug Fixes:
  * Remove deadlock on startup when restoring WAL
  * Fix semantical races resulting in invalid persisted files
  * Correctly read back WAL in certain edge cases
  * Prevent crashes caused by changing metric representations in target's
    /metrics
  + Enhancements:
  * Overall memory usage reduction
  * Serve debugging endpoints while TSDB is loading
  * Healthy endpoint correctly reflects liveness during startup
  * Switch to consistent usage of go-kit/log
  + This release may have issues with files written by previous beta releases
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1506254400">- Fix loopback address for REST API gateway (bsc#1059462)
  + Added pr-3174.patch</changelog>
  <changelog author="tserong@suse.com" date="1507723200">- Update to v2.0.0-rc.0:
  + Numerous changes to the new storage layer, the main changes being:
  * Remove `count_scalar`, `keep_common` and `drop_common_labels` functions
  * Breaking change in the index format for better consistency
  * Fix panic due garbage collected mmap'ed strings
  * Fix broken snapshots and admin APIs
  * Send HTTP Accept header when scraping
  * Use the WAL flush interval passed instead of the hardcoded value
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1508414400">- Update to v2.0.0-rc.1:
  + Features/Enhancements:
  * Added a warning for time-drift between the browser and the
    prometheus-server.
  * Much faster WAL read-back on restart.
  + Bug Fixes:
  * Fixed Remote-read to not drop the first series.
  * Validate recording-rule names.
  * Fix several races.
  * Only close blocks if there are no iterators accessing it.
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1509105600">- Update to v2.0.0-rc.2 (bsc#1065377):
  + Enhancements:
  * Handle WAL segments with corrupted header gracefully
  * Stabilize memory usage during WAL replay
  + Changes:
  * Prefix all storage metrics with prometheus_
  + Bug Fixes:
  * Correctly handle label removal in remote read
  * Fix chunk misalignment causing out-of-order samples
  * Fix connection leak in Consul SD
  * Handle invalid chunk dereferences gracefully
  * Prevent potential deadlock during failing querier construction</changelog>
  <changelog author="tserong@suse.com" date="1510056000">- Update to v2.0.0-rc.3 (bsc#1067030):
  + Enhancements:
  * Remove remote read from the query path if no remote storage
    is configured.
  * Bump Consul HTTP client timeout to not match the Consul SD
    watch timeout.
  * Bump up a too small max block duration to the min block
    duration instead of returning an error.
  + Bug Fixes:
  * Avoid needless padding of 4 zero bytes in index files.
  * Delete old blocks during reload (necessary on MS Windows).
  * Fix regression of alert rules state loss on config reload.
  * Serialize background WAL operations to avoid data races.
  + This also contains bugfixes and remote-storage features from
    the 1.8 branch.</changelog>
  <changelog author="tserong@suse.com" date="1510228800">- Update to final v2.0.0 release (bsc#1067341):
  + Compared to version 1.x, this release includes a completely rewritten
    storage engine, huge performance improvements, but also many backwards
    incompatible changes.  For more information, read the announcement blog
    post and migration guide:
  - https://prometheus.io/blog/2017/11/08/announcing-prometheus-2-0/
  - https://prometheus.io/docs/prometheus/2.0/migration/
  + Changes:
  * Completely rewritten storage layer, with WAL.  This is not backwards
    compatible with 1.x storage,  and many flags have changed/disappeared.
  * New staleness behavior. Series now marked stale after target scrapes
    no longer return them, and soon after targets disappear from service
    discovery.
  * Rules files use YAML syntax now.  Conversion tool added to promtool.
  * Removed count_scalar, drop_common_labels functions and keep_common
    modifier from PromQL.
  * Rewritten exposition format parser with much higher performance.  The
    Protobuf exposition format is no longer supported.
  * Example console templates updated for new storage and metrics names.
    Examples other than node exporter and Prometheus removed.
  * Admin and lifecycle APIs now disabled by default, can be reenabled via
    flags
  * Flags switched to using Kingpin, all flags are now --flagname rather
    than -flagname.
  + Features:
  * Remote read can be configured to not read data which is available
    locally.  This is enabled by default.
  * Rules can be grouped now.  Rules within a rule group are executed
    sequentially.
  * Added experimental GRPC apis
  * Add timestamp() function to PromQL.
  + Enhancements:
  * Remove remote read from the query path if no remote storage is
    configured.
  * Bump Consul HTTP client timeout to not match the Consul SD watch
    timeout.
  * Go-conntrack added to provide HTTP connection metrics.
  + Bug Fixes:
  * Fix connection leak in Consul SD.</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 2.1.0:
  + Features:
  * New Service Discovery UI showing labels before and after relabelling.
  * New Admin APIs added to v1 to delete, snapshot and remove tombstones.
  + Enhancements:
  * The graph UI autcomplete now includes your previous queries.
  * Federation is now much faster for large numbers of series.
  * Added new metrics to measure rule timings.
  * Rule evaluation times added to the rules UI.
  * Added metrics to measure modified time of file SD files.
  * Kubernetes SD now includes POD UID in discovery metadata.
  * The Query APIs now return optional stats on query execution times.
  * The index now no longer has the 4GiB size limit and is also smaller.
  + Bug Fixes:
  * Remote read read_recent option is now false by default.
  * Pass the right configuration to each Alertmanager (AM) when using
    multiple AM configs.
  * Fix not-matchers not selecting series with labels unset.
  * tsdb: Fix occasional panic in head block.
  * tsdb: Close files before deletion to fix retention issues on Windows
    and NFS.
  * tsdb: Cleanup and do not retry failing compactions.
  * tsdb: Close WAL while shutting down.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix directory for fdupes</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1549627200">- Update to 2.7.1:
  + Bug Fixes:
  * Fix a Stored DOM XSS vulnerability with query history (boo#1124610)
  * prometheus_rule_group_last_duration_seconds now reports seconds instead of nanoseconds
  * Make sure the targets are consistently sorted in the targets page
- Update to 2.7.0:
  + cli flag depreacted: storage.tsdb.retention use storage.tsdb.retention.time
    instead; depreacted flag will be removed in 3.0
  + Features:
  * Add subqueries to PromQL
  * Add support for disk size based retention. Note that we don't
    consider the WAL size which could be significant and the time
    based retention policy also applies (experimental)
  * Add CORS origin flag
  + Bug Fixes:
  * Don't depend on given order when comparing samples in alert unit testing
  * Make sure the retention period doesn't overflow
  * Don't generate blocks with no samples
- Update to 2.6.0:
  + Remove default flags from the container's entrypoint, run Prometheus from
    /etc/prometheus and symlink the storage directory to /etc/prometheus/data
  + Promtool: Remove the update command
  + Features:
  * Add JSON log format via the --log.format flag
  * API: Add /api/v1/labels endpoint to get all label names
  * Web: Allow setting the page's title via the --web.ui-title flag
  + Enhancements:
  * Add prometheus_tsdb_lowest_timestamp_seconds, prometheus_tsdb_head_min_time_seconds
    and prometheus_tsdb_head_max_time_seconds metrics
  * Add rule_group_last_evaluation_timestamp_seconds metric
  * Add prometheus_template_text_expansion_failures_total and prometheus_template_text_expansions_total metrics
  * Set consistent User-Agent header in outgoing requests
  * Azure SD: Error out at load time when authentication parameters are missing
  * EC2 SD: Add the machine's private DNS name to the discovery metadata
  * EC2 SD: Add the operating system's platform to the discovery metadata
  * Kubernetes SD: Add the pod's phase to the discovery metadata
  * Kubernetes SD: Log Kubernetes messages
  * Promtool: Collect CPU and trace profiles
  * Promtool: Support writing output as JSON
  * Remote Read: Return available data if remote read fails partially
  * Remote Write: Improve queue performance
  * Remote Write: Add min_shards parameter to set the minimum number of shards
  * TSDB: Improve WAL reading
  * TSDB: Memory improvements
  * Web: Log stack traces on panic
  * Web UI: Add copy to clipboard button for configuration
  * Web UI: Support console queries at specific times
  * Web UI: group targets by job then instance
  + Bug Fixes:
  * Deduplicate handler labels for HTTP metrics
  * Fix leaked queriers causing shutdowns to hang
  * Fix configuration loading panics on nil pointer slice elements
  * API: Correctly skip mismatching targets on /api/v1/targets/metadata
  * API: Better rounding for incoming query timestamps
  * Discovery: Remove all targets when the scrape configuration gets empty
  * PromQL: Fix a goroutine leak in the lexer/parser
  * Scrape: Fix deadlock in the scrape's manager
  * Scrape: Scrape targets at fixed intervals even after Prometheus restarts
  * TSDB: Support restored snapshots including the head properly
  * TSDB: Repair WAL when the last record in a segment is torn
- Update to 2.5.0
  + Group targets by scrape config instead of job name
  + Marathon SD: Various changes to adapt to Marathon 1.5+
  + Discovery: Split prometheus_sd_discovered_targets metric by scrape and
    notify (Alertmanager SD) as well as by section in the respective configuration
  + Enhancements:
  * Support s390x platform for Linux
  * API: Add prometheus_api_remote_read_queries metric tracking currently
    executed or waiting remote read API requests
  * Remote Read: Add prometheus_remote_storage_remote_read_queries metric
    tracking currently in-flight remote read queries
  * Remote Read: Reduced memory usage
  * Discovery: Add prometheus_sd_discovered_targets,
    prometheus_sd_received_updates_total, prometheus_sd_updates_delayed_total,
    and prometheus_sd_updates_total metrics for discovery subsystem
  * Discovery: Improve performance of previously slow updates of changes of targets
  * Kubernetes SD: Add extended metrics
  * OpenStack SD: Support discovering instances from all projects
  * OpenStack SD: Discover all interfaces
  * OpenStack SD: Support tls_config for the used HTTP client
  * Triton SD: Add ability to filter triton_sd targets by pre-defined groups
  * Web UI: Avoid browser spell-checking in expression field
  * Web UI: Add scrape duration and last evaluation time in targets and rules pages
  * Web UI: Improve rule view by wrapping lines
  * Rules: Error out at load time for invalid templates, rather than at evaluation time
  + Bug Fixes:
  * Change max/min over_time to handle NaNs properly
  * Check label name for count_values PromQL function
  * Ensure that vectors and matrices do not contain identical label-sets
- Update to 2.4.3
  + Bug Fixes:
    [BUGFIX] Fix panic when using custom EC2 API for SD #4672
    [BUGFIX] Fix panic when Zookeeper SD cannot connect to servers #4669
    [BUGFIX] Make the skip_head an optional parameter for snapshot API #4674
- Update to 2.4.2
  + Bug Fixes:
    [BUGFIX] Handle WAL corruptions properly prometheus/tsdb#389
    [BUGFIX] Handle WAL migrations correctly on Windows prometheus/tsdb#392
- Update to 2.4.1
  + New TSDB metrics
  + Bug Fixes:
  Render UI correctly for Windows
- Update to 2.4.0
  + The WAL implementation has been re-written so the storage is not forward
    compatible. Prometheus 2.3 storage will work on 2.4 but not vice-versa
  + Reduce remote write default retries
  + Remove /heap endpoint
  + Features:
  * Persist alert 'for' state across restarts
  * Add API providing per target metric metadata
  * Add API providing recording and alerting rules
  + Enhancements:
  * Brand new WAL implementation for TSDB. Forwards incompatible with previous WAL.
  * Show rule evaluation errors in UI
  * Throttle resends of alerts to Alertmanager
  * Send EndsAt along with the alert to Alertmanager
  * Limit the samples returned by remote read endpoint
  * Limit the data read in through remote read
  * Coalesce identical SD configuations
  * promtool: Add new commands for debugging and querying
  * Update console examples for node_exporter v0.16.0
  * Optimize PromQL aggregations
  * Remote read: Add Offset to hints
  * consul_sd: Add support for ServiceMeta field
  * ec2_sd: Maintain order of subnet_id label
  * ec2_sd: Add support for custom endpoint to support EC2 compliant APIs
  * ec2_sd: Add instance_owner label
  * azure_sd: Add support for VMSS discovery and multiple environments
  * gce_sd: Add instance_id label
  * Forbid rule-abiding robots from indexing
  * Log virtual memory limits on startup
  + Bug Fixes:
  * Wait for service discovery to stop before exiting
  * Render SD configs properly
  * Only add LookbackDelta to vector selectors
  * ec2_sd: Handle panic-ing nil pointer
  * consul_sd: Stop leaking connections
  * Use templated labels also to identify alerts
  * Reduce floating point errors in stddev and related functions
  * Log errors while encoding responses
- Update to 2.3.2
  + Bug Fixes:
  * Fix various tsdb bugs
  * Reorder startup and shutdown to prevent panics.
  * Exit with non-zero code on error
  * discovery/kubernetes/ingress: fix scheme discovery
  * Fix race in zookeeper sd
  * Better timeout handling in promql
  * Propogate errors when selecting series from the tsdb
- Update to 2.3.1
  + Bug Fixes:
  * Avoid infinite loop on duplicate NaN values.
  * Fix nil pointer deference when using various API endpoints
  * config: set target group source index during unmarshalling
  * discovery/file: fix logging
  * kubernetes_sd: fix namespace filtering
  * web: restore old path prefix behavior
  * web: remove security headers added in 2.3.0
- Update to 2.3.0
  + marathon_sd: use auth_token and auth_token_file for token-based authentication
    instead of bearer_token and bearer_token_file respectively
  + Metric names for HTTP server metrics changed
  + Features:
  * Add query commands to promtool
  * Add security headers to HTTP server responses
  * Pass query hints via remote read API
  * Basic auth passwords can now be configured via file across all configuration
  + Enhancements:
  * Optimise PromQL and API serialization for memory usage and allocations
  * Limit number of dropped targets in web UI
  * Consul and EC2 service discovery allow using server-side filtering for performance improvement
  * Add advanced filtering configuration to EC2 service discovery
  * marathon_sd: adds support for basic and bearer authentication, plus all
    other common HTTP client options (TLS config, proxy URL, etc.)
  * Provide machine type metadata and labels in GCE service discovery
  * Add pod controller kind and name to Kubernetes service discovery data
  * Move TSDB to flock-based log file that works with Docker containers
  + Bug Fixes:
  * Properly propagate storage errors in PromQL
  * Fix path prefix for web pages
  * Fix goroutine leak in Consul service discovery
  * Fix races in scrape manager
  * Fix OOM for very large k in PromQL topk() queries
  * Make remote write more resilient to unavailable receivers
  * Make remote write shutdown cleanly
  * Don't leak files on errors in TSDB's tombstone cleanup
  * Unary minus expressions now removes the metric name from results
  * Fix bug that lead to wrong amount of samples considered for time range expressions
- Update to 2.2.1
  + Bug Fixes:
  * Fix data loss in TSDB on compaction
  * Correctly stop timer in remote-write path
  * Fix deadlock triggered by loading targets page
  * Fix incorrect buffering of samples on range selection queries
  * Handle large index files on windows properly
- Update to 2.2.0
  + This release introduces improvements to the storage format and fixes a
    regression introduced in 2.1. As a result Prometheus servers upgraded
    to 2.2 cannot be downgraded to a lower version anymore!
  + Rename file SD mtime metric
  + Send target update on empty pod IP in Kubernetes SD
  + Features:
  * Add API endpoint for flags.
  * Add API endpoint for dropped targets.
  * Display annotations on alerts page.
  * Add option to skip head data when taking snapshots
  + Enhancements:
  * Federation performance improvement.
  * Read bearer token file on every scrape.
  * Improve typeahead on /graph page.
  * Change rule file formatting.
  * Set consul server default to localhost:8500.
  * Add dropped Alertmanagers to API info endpoint.
  * Add OS type meta label to Azure SD.
  * Validate required fields in SD configuration.
  + Bug Fixes:
  * Prevent stack overflow on deep recursion in TSDB.
  * Correctly read offsets in index files that are greater than 4GB.
  * Fix scraping behavior for empty labels.
  * Drop metric name for bool modifier.
  * Fix races in discovery.
  * Fix Kubernetes endpoints SD for empty subsets.
  * Throttle updates from SD providers, which caused increased CPU usage and allocations.
  * Fix TSDB block reload issue.
  * Fix PromQL printing of empty without().
  * Don't reset FiredAt for inactive alerts.
  * Fix erroneous file version changes and repair existing data.
- remove pr-3174.patch, has been fixed in https://github.com/prometheus/prometheus/pull/3517</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- fix spec file: actually ship promtool</changelog>
  <changelog author="Simon Crute &lt;simon.crute@grafana.com&gt;" date="1562241600">- rebase patch002-Default-settings.patch
- Update to 2.10.0:
  + Bug Fixes:
  * TSDB: Don't panic when running out of disk space and recover nicely from the condition
  * TSDB: Correctly handle empty labels.
  * TSDB: Don't crash on an unknown tombstone reference.
  * Storage/remote: Remove queue-manager specific metrics if queue no longer exists.
  * PromQL: Correctly display {__name__="a"}.
  * Discovery/kubernetes: Use service rather than ingress as the name for the service workqueue.
  * Discovery/azure: Don't panic on a VM with a public IP.
  * Web: Fixed Content-Type for js and css instead of using /etc/mime.types.
  * API: Encode alert values as string to correctly represent Inf/NaN.
  + Features:
  * Template expansion: Make external labels available as $externalLabels in alert and console template expansion.
  * TSDB: Add prometheus_tsdb_wal_segment_current metric for the WAL segment index that TSDB is currently writing to. tsdb
  * Scrape: Add scrape_series_added per-scrape metric. #5546
  + Enhancements
  * Discovery/kubernetes: Add labels __meta_kubernetes_endpoint_node_name and __meta_kubernetes_endpoint_hostname.
  * Discovery/azure: Add label __meta_azure_machine_public_ip.
  * TSDB: Simplify mergedPostings.Seek, resulting in better performance if there are many posting lists. tsdb
  * Log filesystem type on startup.
  * Cmd/promtool: Use POST requests for Query and QueryRange. client_golang
  * Web: Sort alerts by group name.
  * Console templates: Add convenience variables $rawParams, $params, $path.
- Upadte to 2.9.2
  + Bug Fixes:
  * Make sure subquery range is taken into account for selection
  * Exhaust every request body before closing it
  * Cmd/promtool: return errors from rule evaluations
  * Remote Storage: string interner should not panic in release
  * Fix memory allocation regression in mergedPostings.Seek tsdb
- Update to 2.9.1
  + Bug Fixes:
  * Discovery/kubernetes: fix missing label sanitization
  * Remote_write: Prevent reshard concurrent with calling stop
- Update to 2.9.0
  + Feature:
  * Add honor_timestamps scrape option.
  + Enhancements:
  * Update Consul to support catalog.ServiceMultipleTags.
  * Discovery/kubernetes: add present labels for labels/annotations.
  * OpenStack SD: Add ProjectID and UserID meta labels.
  * Add GODEBUG and retention to the runtime page.
  * Add support for POSTing to /series endpoint.
  * Support PUT methods for Lifecycle and Admin APIs.
  * Scrape: Add global jitter for HA server.
  * Check for cancellation on every step of a range evaluation.
  * String interning for labels &amp; values in the remote_write path.
  * Don't lose the scrape cache on a failed scrape.
  * Reload cert files from disk automatically. common
  * Use fixed length millisecond timestamp format for logs. common
  * Performance improvements for postings.
  Bug Fixes:
  * Remote Write: fix checkpoint reading.
  * Check if label value is valid when unmarshaling external labels from YAML.
  * Promparse: sort all labels when parsing.
  * Reload rules: copy state on both name and labels.
  * Exponentation operator to drop metric name in result of operation.
  * Config: resolve more file paths.
  * Promtool: resolve relative paths in alert test files.
  * Set TLSHandshakeTimeout in HTTP transport. common
  * Use fsync to be more resilient to machine crashes.
  * Keep series that are still in WAL in checkpoints.
- Update to 2.8.1
  + Bug Fixes
  * Display the job labels in /targets which was removed accidentally
- Update to 2.8.0
  + Change:
  * This release uses Write-Ahead Logging (WAL) for the remote_write API. This currently causes a slight increase in memory usage, which will be addressed in future releases.
  * Default time retention is used only when no size based retention is specified. These are flags where time retention is specified by the flag --storage.tsdb.retention and size retention by --storage.tsdb.retention.size.
  * prometheus_tsdb_storage_blocks_bytes_total is now prometheus_tsdb_storage_blocks_bytes.
  + Feature:
  * (EXPERIMENTAL) Time overlapping blocks are now allowed; vertical compaction and vertical query merge. It is an optional feature which is controlled by the --storage.tsdb.allow-overlapping-blocks flag, disabled by default.
  + Enhancements:
  * Use the WAL for remote_write API.
  * Query performance improvements.
  * UI enhancements with upgrade to Bootstrap 4.
  * Reduce time that Alertmanagers are in flux when reloaded.
  * Limit number of metrics displayed on UI to 10000.
  * (1) Remember All/Unhealthy choice on target-overview when reloading page. (2) Resize text-input area on Graph page on mouseclick.
  * In histogram_quantile merge buckets with equivalent le values.
  * Show list of offending labels in the error message in many-to-many scenarios.
  * Show Storage Retention criteria in effect on /status page.
  + Bug Fixes:
    + Fix sorting of rule groups.
    + Fix support for password_file and bearer_token_file in Kubernetes SD.
    + Scrape: catch errors when creating HTTP clients
    + Adds new metrics:
    prometheus_target_scrape_pools_total
    prometheus_target_scrape_pools_failed_total
    prometheus_target_scrape_pool_reloads_total
    prometheus_target_scrape_pool_reloads_failed_total
    + Fix panic when aggregator param is not a literal.</changelog>
  <changelog author="Simon Crute &lt;simon.crute@grafana.com&gt;" date="1563451200">- readded _service file removed in error.
- Update to 2.11.1
  + Bug Fix:
  * Fix potential panic when prometheus is watching multiple zookeeper paths.
- Update to 2.11.0
  + Bug Fix:
  * resolve race condition in maxGauge.
  * Fix ZooKeeper connection leak.
  * Improved atomicity of .tmp block replacement during compaction for usual case.
  * Fix "unknown series references" after clean shutdown.
  * Re-calculate block size when calling block.Delete.
  * Fix unsafe snapshots with head block.
  * prometheus_tsdb_compactions_failed_total is now incremented on any compaction failure.
  + Changes:
  * Remove max_retries from queue_config (it has been unused since rewriting remote-write to utilize the write-ahead-log)
  * The meta file BlockStats no longer holds size information. This is now dynamically calculated and kept in memory. It also includes the meta file size which was not included before
  * Renamed metric from prometheus_tsdb_wal_reader_corruption_errors to prometheus_tsdb_wal_reader_corruption_errors_total
  + Features:
  * Add option to use Alertmanager API v2.
  * Added humanizePercentage function for templates.
  * Include InitContainers in Kubernetes Service Discovery.
  * Provide option to compress WAL records using Snappy.
  + Enhancements:
  * Create new clean segment when starting the WAL.
  * Reduce allocations in PromQL aggregations.
  * Add storage warnings to LabelValues and LabelNames API results.
  * Add prometheus_http_requests_total metric.
  * Enable openbsd/arm build.
  * Remote-write allocation improvements.
  * Query performance improvement: Efficient iteration and search in HashForLabels and HashWithoutLabels.
  * Allow injection of arbitrary headers in promtool.
  * Allow passing external_labels in alert unit tests groups.
  * Allows globs for rules when unit testing.
  * Improved postings intersection matching.
  * Reduced disk usage for WAL for small setups.
  * Optimize queries using regexp for set lookups.</changelog>
  <changelog author="Joao Cavalheiro &lt;jcavalheiro@suse.com&gt;" date="1564056000">- Add support for Uyuni/SUSE Manager service discovery
  + Added 0003-Add-Uyuni-service-discovery</changelog>
</package>
<package pkgid="e3596f7eefe9dcbac134f905c911119a4bc03defb70ced9a2bed2c446be5ba6c" name="golang-github-prometheus-prometheus" arch="src">
  <version epoch="0" ver="2.7.1" rel="lp150.2.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1493208000">- Add BuildRequires: glibc-devel-static to fix aarch64 build</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file and default config (/etc/prometheus/prometheus.yml)
- Run as unprivileged "prometheus" user
- Default to /etc/prometheus for config and /var/lib/prometheus for metrics
  + Added 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1502884800">- Update to v2.0.0-beta.1
  + Includes a new storage layer, which reduces bottlenecks and shows
    considerable performance improvements, but does not work with old v1
    storage data.
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1503403200">- Update to v2.0.0-beta.2
  + vendor: update prometheus/tsdb (Fix panic caused by 0 division)</changelog>
  <changelog author="tserong@suse.com" date="1505736000">- Update to v2.0.0-beta.4:
  + Numerous changes to the new storage layer, the main changes being:
  * Single, compacted write ahead log
  * Single in-memory block with garbage collection
  * Improve compression of index files
  * Cache series dropped via metric_relabel_configs
  * Pool byte buffers for scraping
  + Overall the changes achieve a baseline reduction in memory consumption
    and reduce peak memory usage by 30-40% compared to 2.0.0-beta.2
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases</changelog>
  <changelog author="tserong@suse.com" date="1506081600">- Update to v2.0.0-beta.5:
  + Bug Fixes:
  * Remove deadlock on startup when restoring WAL
  * Fix semantical races resulting in invalid persisted files
  * Correctly read back WAL in certain edge cases
  * Prevent crashes caused by changing metric representations in target's
    /metrics
  + Enhancements:
  * Overall memory usage reduction
  * Serve debugging endpoints while TSDB is loading
  * Healthy endpoint correctly reflects liveness during startup
  * Switch to consistent usage of go-kit/log
  + This release may have issues with files written by previous beta releases
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1506254400">- Fix loopback address for REST API gateway (bsc#1059462)
  + Added pr-3174.patch</changelog>
  <changelog author="tserong@suse.com" date="1507723200">- Update to v2.0.0-rc.0:
  + Numerous changes to the new storage layer, the main changes being:
  * Remove `count_scalar`, `keep_common` and `drop_common_labels` functions
  * Breaking change in the index format for better consistency
  * Fix panic due garbage collected mmap'ed strings
  * Fix broken snapshots and admin APIs
  * Send HTTP Accept header when scraping
  * Use the WAL flush interval passed instead of the hardcoded value
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1508414400">- Update to v2.0.0-rc.1:
  + Features/Enhancements:
  * Added a warning for time-drift between the browser and the
    prometheus-server.
  * Much faster WAL read-back on restart.
  + Bug Fixes:
  * Fixed Remote-read to not drop the first series.
  * Validate recording-rule names.
  * Fix several races.
  * Only close blocks if there are no iterators accessing it.
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1509105600">- Update to v2.0.0-rc.2 (bsc#1065377):
  + Enhancements:
  * Handle WAL segments with corrupted header gracefully
  * Stabilize memory usage during WAL replay
  + Changes:
  * Prefix all storage metrics with prometheus_
  + Bug Fixes:
  * Correctly handle label removal in remote read
  * Fix chunk misalignment causing out-of-order samples
  * Fix connection leak in Consul SD
  * Handle invalid chunk dereferences gracefully
  * Prevent potential deadlock during failing querier construction</changelog>
  <changelog author="tserong@suse.com" date="1510056000">- Update to v2.0.0-rc.3 (bsc#1067030):
  + Enhancements:
  * Remove remote read from the query path if no remote storage
    is configured.
  * Bump Consul HTTP client timeout to not match the Consul SD
    watch timeout.
  * Bump up a too small max block duration to the min block
    duration instead of returning an error.
  + Bug Fixes:
  * Avoid needless padding of 4 zero bytes in index files.
  * Delete old blocks during reload (necessary on MS Windows).
  * Fix regression of alert rules state loss on config reload.
  * Serialize background WAL operations to avoid data races.
  + This also contains bugfixes and remote-storage features from
    the 1.8 branch.</changelog>
  <changelog author="tserong@suse.com" date="1510228800">- Update to final v2.0.0 release (bsc#1067341):
  + Compared to version 1.x, this release includes a completely rewritten
    storage engine, huge performance improvements, but also many backwards
    incompatible changes.  For more information, read the announcement blog
    post and migration guide:
  - https://prometheus.io/blog/2017/11/08/announcing-prometheus-2-0/
  - https://prometheus.io/docs/prometheus/2.0/migration/
  + Changes:
  * Completely rewritten storage layer, with WAL.  This is not backwards
    compatible with 1.x storage,  and many flags have changed/disappeared.
  * New staleness behavior. Series now marked stale after target scrapes
    no longer return them, and soon after targets disappear from service
    discovery.
  * Rules files use YAML syntax now.  Conversion tool added to promtool.
  * Removed count_scalar, drop_common_labels functions and keep_common
    modifier from PromQL.
  * Rewritten exposition format parser with much higher performance.  The
    Protobuf exposition format is no longer supported.
  * Example console templates updated for new storage and metrics names.
    Examples other than node exporter and Prometheus removed.
  * Admin and lifecycle APIs now disabled by default, can be reenabled via
    flags
  * Flags switched to using Kingpin, all flags are now --flagname rather
    than -flagname.
  + Features:
  * Remote read can be configured to not read data which is available
    locally.  This is enabled by default.
  * Rules can be grouped now.  Rules within a rule group are executed
    sequentially.
  * Added experimental GRPC apis
  * Add timestamp() function to PromQL.
  + Enhancements:
  * Remove remote read from the query path if no remote storage is
    configured.
  * Bump Consul HTTP client timeout to not match the Consul SD watch
    timeout.
  * Go-conntrack added to provide HTTP connection metrics.
  + Bug Fixes:
  * Fix connection leak in Consul SD.</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 2.1.0:
  + Features:
  * New Service Discovery UI showing labels before and after relabelling.
  * New Admin APIs added to v1 to delete, snapshot and remove tombstones.
  + Enhancements:
  * The graph UI autcomplete now includes your previous queries.
  * Federation is now much faster for large numbers of series.
  * Added new metrics to measure rule timings.
  * Rule evaluation times added to the rules UI.
  * Added metrics to measure modified time of file SD files.
  * Kubernetes SD now includes POD UID in discovery metadata.
  * The Query APIs now return optional stats on query execution times.
  * The index now no longer has the 4GiB size limit and is also smaller.
  + Bug Fixes:
  * Remote read read_recent option is now false by default.
  * Pass the right configuration to each Alertmanager (AM) when using
    multiple AM configs.
  * Fix not-matchers not selecting series with labels unset.
  * tsdb: Fix occasional panic in head block.
  * tsdb: Close files before deletion to fix retention issues on Windows
    and NFS.
  * tsdb: Cleanup and do not retry failing compactions.
  * tsdb: Close WAL while shutting down.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix directory for fdupes</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1549627200">- Update to 2.7.1:
  + Bug Fixes:
  * Fix a Stored DOM XSS vulnerability with query history (boo#1124610)
  * prometheus_rule_group_last_duration_seconds now reports seconds instead of nanoseconds
  * Make sure the targets are consistently sorted in the targets page
- Update to 2.7.0:
  + cli flag depreacted: storage.tsdb.retention use storage.tsdb.retention.time
    instead; depreacted flag will be removed in 3.0
  + Features:
  * Add subqueries to PromQL
  * Add support for disk size based retention. Note that we don't
    consider the WAL size which could be significant and the time
    based retention policy also applies (experimental)
  * Add CORS origin flag
  + Bug Fixes:
  * Don't depend on given order when comparing samples in alert unit testing
  * Make sure the retention period doesn't overflow
  * Don't generate blocks with no samples
- Update to 2.6.0:
  + Remove default flags from the container's entrypoint, run Prometheus from
    /etc/prometheus and symlink the storage directory to /etc/prometheus/data
  + Promtool: Remove the update command
  + Features:
  * Add JSON log format via the --log.format flag
  * API: Add /api/v1/labels endpoint to get all label names
  * Web: Allow setting the page's title via the --web.ui-title flag
  + Enhancements:
  * Add prometheus_tsdb_lowest_timestamp_seconds, prometheus_tsdb_head_min_time_seconds
    and prometheus_tsdb_head_max_time_seconds metrics
  * Add rule_group_last_evaluation_timestamp_seconds metric
  * Add prometheus_template_text_expansion_failures_total and prometheus_template_text_expansions_total metrics
  * Set consistent User-Agent header in outgoing requests
  * Azure SD: Error out at load time when authentication parameters are missing
  * EC2 SD: Add the machine's private DNS name to the discovery metadata
  * EC2 SD: Add the operating system's platform to the discovery metadata
  * Kubernetes SD: Add the pod's phase to the discovery metadata
  * Kubernetes SD: Log Kubernetes messages
  * Promtool: Collect CPU and trace profiles
  * Promtool: Support writing output as JSON
  * Remote Read: Return available data if remote read fails partially
  * Remote Write: Improve queue performance
  * Remote Write: Add min_shards parameter to set the minimum number of shards
  * TSDB: Improve WAL reading
  * TSDB: Memory improvements
  * Web: Log stack traces on panic
  * Web UI: Add copy to clipboard button for configuration
  * Web UI: Support console queries at specific times
  * Web UI: group targets by job then instance
  + Bug Fixes:
  * Deduplicate handler labels for HTTP metrics
  * Fix leaked queriers causing shutdowns to hang
  * Fix configuration loading panics on nil pointer slice elements
  * API: Correctly skip mismatching targets on /api/v1/targets/metadata
  * API: Better rounding for incoming query timestamps
  * Discovery: Remove all targets when the scrape configuration gets empty
  * PromQL: Fix a goroutine leak in the lexer/parser
  * Scrape: Fix deadlock in the scrape's manager
  * Scrape: Scrape targets at fixed intervals even after Prometheus restarts
  * TSDB: Support restored snapshots including the head properly
  * TSDB: Repair WAL when the last record in a segment is torn
- Update to 2.5.0
  + Group targets by scrape config instead of job name
  + Marathon SD: Various changes to adapt to Marathon 1.5+
  + Discovery: Split prometheus_sd_discovered_targets metric by scrape and
    notify (Alertmanager SD) as well as by section in the respective configuration
  + Enhancements:
  * Support s390x platform for Linux
  * API: Add prometheus_api_remote_read_queries metric tracking currently
    executed or waiting remote read API requests
  * Remote Read: Add prometheus_remote_storage_remote_read_queries metric
    tracking currently in-flight remote read queries
  * Remote Read: Reduced memory usage
  * Discovery: Add prometheus_sd_discovered_targets,
    prometheus_sd_received_updates_total, prometheus_sd_updates_delayed_total,
    and prometheus_sd_updates_total metrics for discovery subsystem
  * Discovery: Improve performance of previously slow updates of changes of targets
  * Kubernetes SD: Add extended metrics
  * OpenStack SD: Support discovering instances from all projects
  * OpenStack SD: Discover all interfaces
  * OpenStack SD: Support tls_config for the used HTTP client
  * Triton SD: Add ability to filter triton_sd targets by pre-defined groups
  * Web UI: Avoid browser spell-checking in expression field
  * Web UI: Add scrape duration and last evaluation time in targets and rules pages
  * Web UI: Improve rule view by wrapping lines
  * Rules: Error out at load time for invalid templates, rather than at evaluation time
  + Bug Fixes:
  * Change max/min over_time to handle NaNs properly
  * Check label name for count_values PromQL function
  * Ensure that vectors and matrices do not contain identical label-sets
- Update to 2.4.3
  + Bug Fixes:
    [BUGFIX] Fix panic when using custom EC2 API for SD #4672
    [BUGFIX] Fix panic when Zookeeper SD cannot connect to servers #4669
    [BUGFIX] Make the skip_head an optional parameter for snapshot API #4674
- Update to 2.4.2
  + Bug Fixes:
    [BUGFIX] Handle WAL corruptions properly prometheus/tsdb#389
    [BUGFIX] Handle WAL migrations correctly on Windows prometheus/tsdb#392
- Update to 2.4.1
  + New TSDB metrics
  + Bug Fixes:
  Render UI correctly for Windows
- Update to 2.4.0
  + The WAL implementation has been re-written so the storage is not forward
    compatible. Prometheus 2.3 storage will work on 2.4 but not vice-versa
  + Reduce remote write default retries
  + Remove /heap endpoint
  + Features:
  * Persist alert 'for' state across restarts
  * Add API providing per target metric metadata
  * Add API providing recording and alerting rules
  + Enhancements:
  * Brand new WAL implementation for TSDB. Forwards incompatible with previous WAL.
  * Show rule evaluation errors in UI
  * Throttle resends of alerts to Alertmanager
  * Send EndsAt along with the alert to Alertmanager
  * Limit the samples returned by remote read endpoint
  * Limit the data read in through remote read
  * Coalesce identical SD configuations
  * promtool: Add new commands for debugging and querying
  * Update console examples for node_exporter v0.16.0
  * Optimize PromQL aggregations
  * Remote read: Add Offset to hints
  * consul_sd: Add support for ServiceMeta field
  * ec2_sd: Maintain order of subnet_id label
  * ec2_sd: Add support for custom endpoint to support EC2 compliant APIs
  * ec2_sd: Add instance_owner label
  * azure_sd: Add support for VMSS discovery and multiple environments
  * gce_sd: Add instance_id label
  * Forbid rule-abiding robots from indexing
  * Log virtual memory limits on startup
  + Bug Fixes:
  * Wait for service discovery to stop before exiting
  * Render SD configs properly
  * Only add LookbackDelta to vector selectors
  * ec2_sd: Handle panic-ing nil pointer
  * consul_sd: Stop leaking connections
  * Use templated labels also to identify alerts
  * Reduce floating point errors in stddev and related functions
  * Log errors while encoding responses
- Update to 2.3.2
  + Bug Fixes:
  * Fix various tsdb bugs
  * Reorder startup and shutdown to prevent panics.
  * Exit with non-zero code on error
  * discovery/kubernetes/ingress: fix scheme discovery
  * Fix race in zookeeper sd
  * Better timeout handling in promql
  * Propogate errors when selecting series from the tsdb
- Update to 2.3.1
  + Bug Fixes:
  * Avoid infinite loop on duplicate NaN values.
  * Fix nil pointer deference when using various API endpoints
  * config: set target group source index during unmarshalling
  * discovery/file: fix logging
  * kubernetes_sd: fix namespace filtering
  * web: restore old path prefix behavior
  * web: remove security headers added in 2.3.0
- Update to 2.3.0
  + marathon_sd: use auth_token and auth_token_file for token-based authentication
    instead of bearer_token and bearer_token_file respectively
  + Metric names for HTTP server metrics changed
  + Features:
  * Add query commands to promtool
  * Add security headers to HTTP server responses
  * Pass query hints via remote read API
  * Basic auth passwords can now be configured via file across all configuration
  + Enhancements:
  * Optimise PromQL and API serialization for memory usage and allocations
  * Limit number of dropped targets in web UI
  * Consul and EC2 service discovery allow using server-side filtering for performance improvement
  * Add advanced filtering configuration to EC2 service discovery
  * marathon_sd: adds support for basic and bearer authentication, plus all
    other common HTTP client options (TLS config, proxy URL, etc.)
  * Provide machine type metadata and labels in GCE service discovery
  * Add pod controller kind and name to Kubernetes service discovery data
  * Move TSDB to flock-based log file that works with Docker containers
  + Bug Fixes:
  * Properly propagate storage errors in PromQL
  * Fix path prefix for web pages
  * Fix goroutine leak in Consul service discovery
  * Fix races in scrape manager
  * Fix OOM for very large k in PromQL topk() queries
  * Make remote write more resilient to unavailable receivers
  * Make remote write shutdown cleanly
  * Don't leak files on errors in TSDB's tombstone cleanup
  * Unary minus expressions now removes the metric name from results
  * Fix bug that lead to wrong amount of samples considered for time range expressions
- Update to 2.2.1
  + Bug Fixes:
  * Fix data loss in TSDB on compaction
  * Correctly stop timer in remote-write path
  * Fix deadlock triggered by loading targets page
  * Fix incorrect buffering of samples on range selection queries
  * Handle large index files on windows properly
- Update to 2.2.0
  + This release introduces improvements to the storage format and fixes a
    regression introduced in 2.1. As a result Prometheus servers upgraded
    to 2.2 cannot be downgraded to a lower version anymore!
  + Rename file SD mtime metric
  + Send target update on empty pod IP in Kubernetes SD
  + Features:
  * Add API endpoint for flags.
  * Add API endpoint for dropped targets.
  * Display annotations on alerts page.
  * Add option to skip head data when taking snapshots
  + Enhancements:
  * Federation performance improvement.
  * Read bearer token file on every scrape.
  * Improve typeahead on /graph page.
  * Change rule file formatting.
  * Set consul server default to localhost:8500.
  * Add dropped Alertmanagers to API info endpoint.
  * Add OS type meta label to Azure SD.
  * Validate required fields in SD configuration.
  + Bug Fixes:
  * Prevent stack overflow on deep recursion in TSDB.
  * Correctly read offsets in index files that are greater than 4GB.
  * Fix scraping behavior for empty labels.
  * Drop metric name for bool modifier.
  * Fix races in discovery.
  * Fix Kubernetes endpoints SD for empty subsets.
  * Throttle updates from SD providers, which caused increased CPU usage and allocations.
  * Fix TSDB block reload issue.
  * Fix PromQL printing of empty without().
  * Don't reset FiredAt for inactive alerts.
  * Fix erroneous file version changes and repair existing data.
- remove pr-3174.patch, has been fixed in https://github.com/prometheus/prometheus/pull/3517</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- fix spec file: actually ship promtool</changelog>
</package>
<package pkgid="e39f7b0e4835c756d67629d94cf4691ff4c0c8ebc23891a658bc5023d85cc6b7" name="golang-github-prometheus-prometheus" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="lp150.2.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1493208000">- Add BuildRequires: glibc-devel-static to fix aarch64 build</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file and default config (/etc/prometheus/prometheus.yml)
- Run as unprivileged "prometheus" user
- Default to /etc/prometheus for config and /var/lib/prometheus for metrics
  + Added 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1502884800">- Update to v2.0.0-beta.1
  + Includes a new storage layer, which reduces bottlenecks and shows
    considerable performance improvements, but does not work with old v1
    storage data.
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1503403200">- Update to v2.0.0-beta.2
  + vendor: update prometheus/tsdb (Fix panic caused by 0 division)</changelog>
  <changelog author="tserong@suse.com" date="1505736000">- Update to v2.0.0-beta.4:
  + Numerous changes to the new storage layer, the main changes being:
  * Single, compacted write ahead log
  * Single in-memory block with garbage collection
  * Improve compression of index files
  * Cache series dropped via metric_relabel_configs
  * Pool byte buffers for scraping
  + Overall the changes achieve a baseline reduction in memory consumption
    and reduce peak memory usage by 30-40% compared to 2.0.0-beta.2
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases</changelog>
  <changelog author="tserong@suse.com" date="1506081600">- Update to v2.0.0-beta.5:
  + Bug Fixes:
  * Remove deadlock on startup when restoring WAL
  * Fix semantical races resulting in invalid persisted files
  * Correctly read back WAL in certain edge cases
  * Prevent crashes caused by changing metric representations in target's
    /metrics
  + Enhancements:
  * Overall memory usage reduction
  * Serve debugging endpoints while TSDB is loading
  * Healthy endpoint correctly reflects liveness during startup
  * Switch to consistent usage of go-kit/log
  + This release may have issues with files written by previous beta releases
- Refresh 0002-Default-settings.patch to apply cleanly again</changelog>
  <changelog author="tserong@suse.com" date="1506254400">- Fix loopback address for REST API gateway (bsc#1059462)
  + Added pr-3174.patch</changelog>
  <changelog author="tserong@suse.com" date="1507723200">- Update to v2.0.0-rc.0:
  + Numerous changes to the new storage layer, the main changes being:
  * Remove `count_scalar`, `keep_common` and `drop_common_labels` functions
  * Breaking change in the index format for better consistency
  * Fix panic due garbage collected mmap'ed strings
  * Fix broken snapshots and admin APIs
  * Send HTTP Accept header when scraping
  * Use the WAL flush interval passed instead of the hardcoded value
  + This release requires a clean storage directory and is not compatible
    with files created by previous beta releases
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1508414400">- Update to v2.0.0-rc.1:
  + Features/Enhancements:
  * Added a warning for time-drift between the browser and the
    prometheus-server.
  * Much faster WAL read-back on restart.
  + Bug Fixes:
  * Fixed Remote-read to not drop the first series.
  * Validate recording-rule names.
  * Fix several races.
  * Only close blocks if there are no iterators accessing it.
- Refresh 0002-Default-settings.patch</changelog>
  <changelog author="tserong@suse.com" date="1509105600">- Update to v2.0.0-rc.2 (bsc#1065377):
  + Enhancements:
  * Handle WAL segments with corrupted header gracefully
  * Stabilize memory usage during WAL replay
  + Changes:
  * Prefix all storage metrics with prometheus_
  + Bug Fixes:
  * Correctly handle label removal in remote read
  * Fix chunk misalignment causing out-of-order samples
  * Fix connection leak in Consul SD
  * Handle invalid chunk dereferences gracefully
  * Prevent potential deadlock during failing querier construction</changelog>
  <changelog author="tserong@suse.com" date="1510056000">- Update to v2.0.0-rc.3 (bsc#1067030):
  + Enhancements:
  * Remove remote read from the query path if no remote storage
    is configured.
  * Bump Consul HTTP client timeout to not match the Consul SD
    watch timeout.
  * Bump up a too small max block duration to the min block
    duration instead of returning an error.
  + Bug Fixes:
  * Avoid needless padding of 4 zero bytes in index files.
  * Delete old blocks during reload (necessary on MS Windows).
  * Fix regression of alert rules state loss on config reload.
  * Serialize background WAL operations to avoid data races.
  + This also contains bugfixes and remote-storage features from
    the 1.8 branch.</changelog>
  <changelog author="tserong@suse.com" date="1510228800">- Update to final v2.0.0 release (bsc#1067341):
  + Compared to version 1.x, this release includes a completely rewritten
    storage engine, huge performance improvements, but also many backwards
    incompatible changes.  For more information, read the announcement blog
    post and migration guide:
  - https://prometheus.io/blog/2017/11/08/announcing-prometheus-2-0/
  - https://prometheus.io/docs/prometheus/2.0/migration/
  + Changes:
  * Completely rewritten storage layer, with WAL.  This is not backwards
    compatible with 1.x storage,  and many flags have changed/disappeared.
  * New staleness behavior. Series now marked stale after target scrapes
    no longer return them, and soon after targets disappear from service
    discovery.
  * Rules files use YAML syntax now.  Conversion tool added to promtool.
  * Removed count_scalar, drop_common_labels functions and keep_common
    modifier from PromQL.
  * Rewritten exposition format parser with much higher performance.  The
    Protobuf exposition format is no longer supported.
  * Example console templates updated for new storage and metrics names.
    Examples other than node exporter and Prometheus removed.
  * Admin and lifecycle APIs now disabled by default, can be reenabled via
    flags
  * Flags switched to using Kingpin, all flags are now --flagname rather
    than -flagname.
  + Features:
  * Remote read can be configured to not read data which is available
    locally.  This is enabled by default.
  * Rules can be grouped now.  Rules within a rule group are executed
    sequentially.
  * Added experimental GRPC apis
  * Add timestamp() function to PromQL.
  + Enhancements:
  * Remove remote read from the query path if no remote storage is
    configured.
  * Bump Consul HTTP client timeout to not match the Consul SD watch
    timeout.
  * Go-conntrack added to provide HTTP connection metrics.
  + Bug Fixes:
  * Fix connection leak in Consul SD.</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 2.1.0:
  + Features:
  * New Service Discovery UI showing labels before and after relabelling.
  * New Admin APIs added to v1 to delete, snapshot and remove tombstones.
  + Enhancements:
  * The graph UI autcomplete now includes your previous queries.
  * Federation is now much faster for large numbers of series.
  * Added new metrics to measure rule timings.
  * Rule evaluation times added to the rules UI.
  * Added metrics to measure modified time of file SD files.
  * Kubernetes SD now includes POD UID in discovery metadata.
  * The Query APIs now return optional stats on query execution times.
  * The index now no longer has the 4GiB size limit and is also smaller.
  + Bug Fixes:
  * Remote read read_recent option is now false by default.
  * Pass the right configuration to each Alertmanager (AM) when using
    multiple AM configs.
  * Fix not-matchers not selecting series with labels unset.
  * tsdb: Fix occasional panic in head block.
  * tsdb: Close files before deletion to fix retention issues on Windows
    and NFS.
  * tsdb: Cleanup and do not retry failing compactions.
  * tsdb: Close WAL while shutting down.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1521028800">- spec: fix directory for fdupes</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1549627200">- Update to 2.7.1:
  + Bug Fixes:
  * Fix a Stored DOM XSS vulnerability with query history (boo#1124610)
  * prometheus_rule_group_last_duration_seconds now reports seconds instead of nanoseconds
  * Make sure the targets are consistently sorted in the targets page
- Update to 2.7.0:
  + cli flag depreacted: storage.tsdb.retention use storage.tsdb.retention.time
    instead; depreacted flag will be removed in 3.0
  + Features:
  * Add subqueries to PromQL
  * Add support for disk size based retention. Note that we don't
    consider the WAL size which could be significant and the time
    based retention policy also applies (experimental)
  * Add CORS origin flag
  + Bug Fixes:
  * Don't depend on given order when comparing samples in alert unit testing
  * Make sure the retention period doesn't overflow
  * Don't generate blocks with no samples
- Update to 2.6.0:
  + Remove default flags from the container's entrypoint, run Prometheus from
    /etc/prometheus and symlink the storage directory to /etc/prometheus/data
  + Promtool: Remove the update command
  + Features:
  * Add JSON log format via the --log.format flag
  * API: Add /api/v1/labels endpoint to get all label names
  * Web: Allow setting the page's title via the --web.ui-title flag
  + Enhancements:
  * Add prometheus_tsdb_lowest_timestamp_seconds, prometheus_tsdb_head_min_time_seconds
    and prometheus_tsdb_head_max_time_seconds metrics
  * Add rule_group_last_evaluation_timestamp_seconds metric
  * Add prometheus_template_text_expansion_failures_total and prometheus_template_text_expansions_total metrics
  * Set consistent User-Agent header in outgoing requests
  * Azure SD: Error out at load time when authentication parameters are missing
  * EC2 SD: Add the machine's private DNS name to the discovery metadata
  * EC2 SD: Add the operating system's platform to the discovery metadata
  * Kubernetes SD: Add the pod's phase to the discovery metadata
  * Kubernetes SD: Log Kubernetes messages
  * Promtool: Collect CPU and trace profiles
  * Promtool: Support writing output as JSON
  * Remote Read: Return available data if remote read fails partially
  * Remote Write: Improve queue performance
  * Remote Write: Add min_shards parameter to set the minimum number of shards
  * TSDB: Improve WAL reading
  * TSDB: Memory improvements
  * Web: Log stack traces on panic
  * Web UI: Add copy to clipboard button for configuration
  * Web UI: Support console queries at specific times
  * Web UI: group targets by job then instance
  + Bug Fixes:
  * Deduplicate handler labels for HTTP metrics
  * Fix leaked queriers causing shutdowns to hang
  * Fix configuration loading panics on nil pointer slice elements
  * API: Correctly skip mismatching targets on /api/v1/targets/metadata
  * API: Better rounding for incoming query timestamps
  * Discovery: Remove all targets when the scrape configuration gets empty
  * PromQL: Fix a goroutine leak in the lexer/parser
  * Scrape: Fix deadlock in the scrape's manager
  * Scrape: Scrape targets at fixed intervals even after Prometheus restarts
  * TSDB: Support restored snapshots including the head properly
  * TSDB: Repair WAL when the last record in a segment is torn
- Update to 2.5.0
  + Group targets by scrape config instead of job name
  + Marathon SD: Various changes to adapt to Marathon 1.5+
  + Discovery: Split prometheus_sd_discovered_targets metric by scrape and
    notify (Alertmanager SD) as well as by section in the respective configuration
  + Enhancements:
  * Support s390x platform for Linux
  * API: Add prometheus_api_remote_read_queries metric tracking currently
    executed or waiting remote read API requests
  * Remote Read: Add prometheus_remote_storage_remote_read_queries metric
    tracking currently in-flight remote read queries
  * Remote Read: Reduced memory usage
  * Discovery: Add prometheus_sd_discovered_targets,
    prometheus_sd_received_updates_total, prometheus_sd_updates_delayed_total,
    and prometheus_sd_updates_total metrics for discovery subsystem
  * Discovery: Improve performance of previously slow updates of changes of targets
  * Kubernetes SD: Add extended metrics
  * OpenStack SD: Support discovering instances from all projects
  * OpenStack SD: Discover all interfaces
  * OpenStack SD: Support tls_config for the used HTTP client
  * Triton SD: Add ability to filter triton_sd targets by pre-defined groups
  * Web UI: Avoid browser spell-checking in expression field
  * Web UI: Add scrape duration and last evaluation time in targets and rules pages
  * Web UI: Improve rule view by wrapping lines
  * Rules: Error out at load time for invalid templates, rather than at evaluation time
  + Bug Fixes:
  * Change max/min over_time to handle NaNs properly
  * Check label name for count_values PromQL function
  * Ensure that vectors and matrices do not contain identical label-sets
- Update to 2.4.3
  + Bug Fixes:
    [BUGFIX] Fix panic when using custom EC2 API for SD #4672
    [BUGFIX] Fix panic when Zookeeper SD cannot connect to servers #4669
    [BUGFIX] Make the skip_head an optional parameter for snapshot API #4674
- Update to 2.4.2
  + Bug Fixes:
    [BUGFIX] Handle WAL corruptions properly prometheus/tsdb#389
    [BUGFIX] Handle WAL migrations correctly on Windows prometheus/tsdb#392
- Update to 2.4.1
  + New TSDB metrics
  + Bug Fixes:
  Render UI correctly for Windows
- Update to 2.4.0
  + The WAL implementation has been re-written so the storage is not forward
    compatible. Prometheus 2.3 storage will work on 2.4 but not vice-versa
  + Reduce remote write default retries
  + Remove /heap endpoint
  + Features:
  * Persist alert 'for' state across restarts
  * Add API providing per target metric metadata
  * Add API providing recording and alerting rules
  + Enhancements:
  * Brand new WAL implementation for TSDB. Forwards incompatible with previous WAL.
  * Show rule evaluation errors in UI
  * Throttle resends of alerts to Alertmanager
  * Send EndsAt along with the alert to Alertmanager
  * Limit the samples returned by remote read endpoint
  * Limit the data read in through remote read
  * Coalesce identical SD configuations
  * promtool: Add new commands for debugging and querying
  * Update console examples for node_exporter v0.16.0
  * Optimize PromQL aggregations
  * Remote read: Add Offset to hints
  * consul_sd: Add support for ServiceMeta field
  * ec2_sd: Maintain order of subnet_id label
  * ec2_sd: Add support for custom endpoint to support EC2 compliant APIs
  * ec2_sd: Add instance_owner label
  * azure_sd: Add support for VMSS discovery and multiple environments
  * gce_sd: Add instance_id label
  * Forbid rule-abiding robots from indexing
  * Log virtual memory limits on startup
  + Bug Fixes:
  * Wait for service discovery to stop before exiting
  * Render SD configs properly
  * Only add LookbackDelta to vector selectors
  * ec2_sd: Handle panic-ing nil pointer
  * consul_sd: Stop leaking connections
  * Use templated labels also to identify alerts
  * Reduce floating point errors in stddev and related functions
  * Log errors while encoding responses
- Update to 2.3.2
  + Bug Fixes:
  * Fix various tsdb bugs
  * Reorder startup and shutdown to prevent panics.
  * Exit with non-zero code on error
  * discovery/kubernetes/ingress: fix scheme discovery
  * Fix race in zookeeper sd
  * Better timeout handling in promql
  * Propogate errors when selecting series from the tsdb
- Update to 2.3.1
  + Bug Fixes:
  * Avoid infinite loop on duplicate NaN values.
  * Fix nil pointer deference when using various API endpoints
  * config: set target group source index during unmarshalling
  * discovery/file: fix logging
  * kubernetes_sd: fix namespace filtering
  * web: restore old path prefix behavior
  * web: remove security headers added in 2.3.0
- Update to 2.3.0
  + marathon_sd: use auth_token and auth_token_file for token-based authentication
    instead of bearer_token and bearer_token_file respectively
  + Metric names for HTTP server metrics changed
  + Features:
  * Add query commands to promtool
  * Add security headers to HTTP server responses
  * Pass query hints via remote read API
  * Basic auth passwords can now be configured via file across all configuration
  + Enhancements:
  * Optimise PromQL and API serialization for memory usage and allocations
  * Limit number of dropped targets in web UI
  * Consul and EC2 service discovery allow using server-side filtering for performance improvement
  * Add advanced filtering configuration to EC2 service discovery
  * marathon_sd: adds support for basic and bearer authentication, plus all
    other common HTTP client options (TLS config, proxy URL, etc.)
  * Provide machine type metadata and labels in GCE service discovery
  * Add pod controller kind and name to Kubernetes service discovery data
  * Move TSDB to flock-based log file that works with Docker containers
  + Bug Fixes:
  * Properly propagate storage errors in PromQL
  * Fix path prefix for web pages
  * Fix goroutine leak in Consul service discovery
  * Fix races in scrape manager
  * Fix OOM for very large k in PromQL topk() queries
  * Make remote write more resilient to unavailable receivers
  * Make remote write shutdown cleanly
  * Don't leak files on errors in TSDB's tombstone cleanup
  * Unary minus expressions now removes the metric name from results
  * Fix bug that lead to wrong amount of samples considered for time range expressions
- Update to 2.2.1
  + Bug Fixes:
  * Fix data loss in TSDB on compaction
  * Correctly stop timer in remote-write path
  * Fix deadlock triggered by loading targets page
  * Fix incorrect buffering of samples on range selection queries
  * Handle large index files on windows properly
- Update to 2.2.0
  + This release introduces improvements to the storage format and fixes a
    regression introduced in 2.1. As a result Prometheus servers upgraded
    to 2.2 cannot be downgraded to a lower version anymore!
  + Rename file SD mtime metric
  + Send target update on empty pod IP in Kubernetes SD
  + Features:
  * Add API endpoint for flags.
  * Add API endpoint for dropped targets.
  * Display annotations on alerts page.
  * Add option to skip head data when taking snapshots
  + Enhancements:
  * Federation performance improvement.
  * Read bearer token file on every scrape.
  * Improve typeahead on /graph page.
  * Change rule file formatting.
  * Set consul server default to localhost:8500.
  * Add dropped Alertmanagers to API info endpoint.
  * Add OS type meta label to Azure SD.
  * Validate required fields in SD configuration.
  + Bug Fixes:
  * Prevent stack overflow on deep recursion in TSDB.
  * Correctly read offsets in index files that are greater than 4GB.
  * Fix scraping behavior for empty labels.
  * Drop metric name for bool modifier.
  * Fix races in discovery.
  * Fix Kubernetes endpoints SD for empty subsets.
  * Throttle updates from SD providers, which caused increased CPU usage and allocations.
  * Fix TSDB block reload issue.
  * Fix PromQL printing of empty without().
  * Don't reset FiredAt for inactive alerts.
  * Fix erroneous file version changes and repair existing data.
- remove pr-3174.patch, has been fixed in https://github.com/prometheus/prometheus/pull/3517</changelog>
  <changelog author="Jan Fajerski &lt;jan.fajerski@suse.com&gt;" date="1550836800">- fix spec file: actually ship promtool</changelog>
</package>
<package pkgid="77641ee8b0666ce088db8e5b0acc917d1e95ebbc32514a29c9a3e6d070b1bc5a" name="golang-packaging" arch="noarch">
  <version epoch="0" ver="15.0.11" rel="lp150.2.3.1"/>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
</package>
<package pkgid="0431d77d65fdf3b340773aef4d358b1d3ce912a6a86f1a6fc89b76c590af6f1b" name="golang-packaging" arch="src">
  <version epoch="0" ver="15.0.11" rel="lp150.2.3.1"/>
  <changelog author="tboerger@suse.com" date="1466510400">- Update to version 14.9.2:
  + [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  + [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  + fix a typo in cli.rb
  + increate timeout to 300s or go install can't finish
  + Remove runtime dependency for Go API
  + simplify rpmsysinfo.rb
  + release 14.9.1
  + Added go_nostrip macro</changelog>
  <changelog author="i@marguerite.su" date="1467979200">- can't be noarch. we detected %%go_arch at build time. it has to be
  architecture-dependent, or it'll be published randomly with one
  from i586/x86_64, whose content (/etc/rpm/macros.go) is unique.</changelog>
  <changelog author="tboerger@suse.com" date="1469188800">- Added refactoring.patch while trying new code base
- Dropped the sed for static architecture detection
- Updated files list to reflect new file structure</changelog>
  <changelog author="thipp@suse.de" date="1487160000">- Update to version 15.0.0:
  * [SLE11]some commands need time to finish, immediate close will get wrong status, so use timeout 30s
  * [SLE]ditch named group in regexp in golang.req, the oniguruma in ruby 1.8.7 doesn't support named group
  * fix a typo in cli.rb
  * increate timeout to 300s or go install can't finish
  * Remove runtime dependency for Go API
  * simplify rpmsysinfo.rb
  * release 14.9.1
  * Added go_nostrip macro
  * Refactor using plain bash
  * small fixes</changelog>
  <changelog author="thipp@suse.de" date="1489492800">- Update to version 15.0.1:
  * Handle extra_flags for build/test correctly
  * bump version to v15.0.1</changelog>
  <changelog author="thipp@suse.de" date="1490184000">- Update to version 15.0.2:
  * set correct modifier if no arguments are provided
  * bump version to v15.0.2</changelog>
  <changelog author="thipp@suse.de" date="1490788800">- Update to version 15.0.3:
  * Remove duplicates when finding Requires
  * bump version to v15.0.3</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1495368000">- fix gopath after updating go to 1.8. With go 1.8, there is no more
  /usr/share/go/contrib but /usr/share/go/1.8/contrib
  gopath.patch: contains the fix</changelog>
  <changelog author="thipp@suse.de" date="1495540800">- fix GOPATH issue</changelog>
  <changelog author="thipp@suse.de" date="1495627200">- Fix all %go_*dir macros</changelog>
  <changelog author="thipp@suse.de" date="1496318400">- fix GOPATH for Provides and Requires</changelog>
  <changelog author="thipp@suse.de" date="1496836800">- Update to version 15.0.4:
  * Handle extra_flags for build/test correctly
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds</changelog>
  <changelog author="thipp@suse.de" date="1498651200">- Update to version 15.0.5:
  * set correct modifier if no arguments are provided
  * Remove duplicates when finding Requires
  * fix GOPATH and macros
  * Fix Provides and Requires for some builds
  * Fix Requires/Provides issue with split packages
  * Remove unused variables</changelog>
  <changelog author="thipp@suse.de" date="1504094400">- Update to version 15.0.7:
  * *: always use -buildmode=pie
  * fix changelog
  * golang.sh: Fix arch for aarch64</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518436800">- Update to version 15.0.8:
  * Fix Requires/Provides issue with split packages
  * Remove unused variables
  * Bump version to v15.0.5
  * *: always use -buildmode=pie
  * bump version to v15.0.6
  * fix changelog
  * golang.sh: Fix arch for aarch64
  * bump version to v15.0.7
  * Fix the handling of quoted extra args
  * Bump version 15.0.8</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527595200">- Update to version 15.0.9:
  * Pass linker flag via ldflags</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527768000">- Update to version 15.0.10:
  * update changelog to v15.0.10
  * This flag does not exist for go 1.10 because this is an extra flag that openSUSE was adding into the go packages in order to fix
  * Revert "only add the s flag if go is less than 1.10"
  * only add the s flag if go is less than 1.10
  * Revert "Pass linker flag via ldflags"
  * update changelog: add 15.0.9 version
  * Pass linker flag via ldflags
  * Bump version 15.0.8
  * Fix the handling of quoted extra args
  * bump version to v15.0.7
- Add Requires rpmdev-tools as this is used to compare versions in the
  golang.sh script</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528718400">- Update to version 15.0.11:
  * Replace rpmdev-vercmp by "sort -V" to remove rpmdev-vercmp dependency</changelog>
  <changelog author="msuchanek@suse.com" date="1528804800">- fix ppc64 (be) build. No pie baking support there.
  + ppc64-nopie.patch</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1528891200">- We don't need to require rpmdev, because we updated to 15.0.11
  to remove that requirement. I missed to remove the req from
  the spec file.</changelog>
</package>
<package pkgid="5e7a30dafd1ebbf3c8bfb6aeed5b161530722bb0b34bcdc4343067e9dcec5f93" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="1a379333f9829710e815a6c01c6c79283f20f69d4a5d34b8c37ae53f635ada79" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="6ed1bcc3b465b98c19160df8db8c6b6ad7c73b6e0ec0a6b8c134fa1d1a78d952" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190416" rel="lp150.2.19.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="4ca220c01621780c884ffcd4ce7bbbeb0b3a8a1a6dc6f71c41b89ead0a35bf76" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190522" rel="lp150.2.22.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="78df7f12cdd9c33f1335fc5119a5212e07247678596e53affce9004c94d9f0ff" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190801" rel="lp150.2.26.1"/>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
</package>
<package pkgid="91d7607c2a6899b9684081a3e3e2615e5a97a0fb2a86b08ae9b903272f6d2a73" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20190801" rel="lp150.2.29.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="6bfc559c24bf9e6d11953bf261dec6ef5d3a73567bb7547fbbd82828f8b18bde" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="ea245aa06ab7aa3c379e8198d66e19be21d01eda5dc87d3708cb2e6a862c9d79" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="9029d3b54ad0868abb250f9997c9cede8d2d794ba2074a9bd57dde71f07ce6a6" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="01c6be75e56457bab3b536b2dbae581d0086414416eb614eef057ba0cdef798b" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20181206" rel="lp150.2.12.1"/>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
</package>
<package pkgid="98b4bf43deb60055b61c4139956d199a4ee612820b140cb3c8deb98f16c89c1d" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190124" rel="lp150.2.15.1"/>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
</package>
<package pkgid="fafc1712827df1cbaf28b77790833413c5854f06a1bd4fb39680ee931df034dd" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190416" rel="lp150.2.19.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="204359a7ff1fc0611f769cac91ab5a325e204c7771d53cb0a39fb2dc588f357b" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190522" rel="lp150.2.22.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="122523e1b663dd0c27d301e365fd63c0941f8ca858894335fe8f67d6c4da3934" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190801" rel="lp150.2.26.1"/>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
</package>
<package pkgid="c4568b751042cdb957eb9bd676466a23f5aac33e09f5f1cc7dd495291a4a88cd" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20190801" rel="lp150.2.29.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="acc3ba610058e52b75897734a22a530bd031443d2ff60082859acda378a744fa" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="4651cfb5540c9e444871eb9b6b794f03877d25b989c484d8a54123a38a09df00" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="136e0e8915226d8331c7ca74590e9610f4cb112576429908c155786be6ff553d" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="64272bb63cf3b4568a2df2332d117036636c01b697c3fb341abc8830338151aa" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20181206" rel="lp150.2.12.1"/>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
</package>
<package pkgid="6ce046fcd8c4e72b540f81b0d0000cf3bb44ea11bcdeadf1c74e1ef64e54cb55" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190124" rel="lp150.2.15.1"/>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
</package>
<package pkgid="1847e6f1de7ea30b33f9d49a9a7b3548f3ac4330d3c2f1803c9aa887f53b1470" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190416" rel="lp150.2.19.1"/>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
</package>
<package pkgid="ae4ec3e167357f3786b5c3f27ae6d76b7836844c90c915ccd6175af281c16bf9" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190522" rel="lp150.2.22.1"/>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
</package>
<package pkgid="0ade46d7bdcb29f6317d44cb297b3d96db74bf81f25a07be03738107e9140444" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp150.2.26.1"/>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
</package>
<package pkgid="7678f50da964c879dae090378c59e098ef89dbe2f66fbcd2a6d9ce2f6a846a66" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp150.2.29.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
</package>
<package pkgid="23fa6c152b4ca4b88529c0c66e1c2a66e7ae00b4db921b3c9efeb014d0c5241f" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="04cc04096236a1d86eac99b1fd70b92ba6e8b091e17f7424df2c8c848b5c6385" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="dd4cc59169cce1ebc697a97fc26d48447159e715d7da0b214bd8396d4dbc9360" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.10.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="dc328cd5ee76a975b64b3bfc1967cbbf1adf9fec3aebe7aeb80c3c7ff7663e95" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.10.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="ddabaa05f3ec1d4e9e3655ccaf158ae646648340eb8c644443916e9c2ed3a425" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="40c55fb0337a0725dbd13eba1a3e0f5b5983d4738b15e811a6663061b24950f0" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="4c5da8c8ea3c6e455d7ba85a35319116a6960f6dc0b3baf9f2c71b9434acade6" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
</package>
<package pkgid="ceb68fca0e9d61534c4b22f3cc4deceaeb24b60042765f911148394d5df558f7" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
</package>
<package pkgid="a3a54421ea902661d390f617a65c7b66ce6f6dbd43e5dd0d4b7b63ce09be4f6e" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp150.3.10.1"/>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
</package>
<package pkgid="f81373b4e91754e2b3bb9cbca37fd783c326884f986cc3e37636b84090ce25d4" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="ac96635f218916dad64371fbe93673042b7e78a03c2adc3b20bc87ea031b342f" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp150.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
</package>
<package pkgid="75ac284b8d77b88ea70bd8c1f3d06211d86ba6bc780cdbf8729f19f8607b55f0" name="gpgme" arch="src">
  <version epoch="0" ver="1.10.0" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1440590400">- gpgme 1.6.0:
  * Added gpgme_set_offline to do a key listinging w/o requiring
  CRL.
  * Added gpgme_set_status_cb to allow a user to see some status
  messages.
  * Added an export mode for secret keys.
  * More precise error codes are returned if GnuPG &gt;= 2.1.8 is used.
  * The passphrase handler for the loopback mode has been improved and may
  also be used with genkey.
  * Interface changes relative to the 1.5.1 release:
  gpgme_set_offline              NEW.
  gpgme_get_offline              NEW.
  gpgme_set_status_cb            NEW.
  gpgme_get_status_cb            NEW.
  GPGME_EXPORT_MODE_SECRET       NEW
  GPGME_EXPORT_MODE_RAW          NEW.
  GPGME_EXPORT_MODE_PKCS12       NEW.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- restore taking build timestamp from changelog date</changelog>
  <changelog author="astieger@suse.com" date="1474891200">- gpgme 1.7.0:
  * Python2 bindings
  * C++ bindings
  * disabled: Python3, Qt-Framework API
  * New functions gpgme_op_createkey and gpgme_op_createsubkey to make
    key creation easier (requires GnuPG 2.1).
  * New functions gpgme_op_adduid and gpgme_op_revuid to make user id
    management easier (requires GnuPG 2.1).
  * New function gpgme_op_keysign to make key signing easier (requires
    GnuPG 2.1).
  * New function gpgme_op_interact to replace the now deprecated
    functions gpgme_op_edit and gpgme_op_card_edit.
  * New function gpgme_pubkey_algo_string to convert a public key
    algorithm into a GnuPG 2.1 style string.
  * Support for GnuPG 2.1's TOFU trust model.
  * Notation flags are now correctly set on verify.
  * New global flag "require-gnupg" to set a minimal gnupg version.
  * More supported items in gpgme_get_dirinfo.
  * New function gpgme_data_set_flag and flag "size-hint".
  * New function gpgme_set_ctx_flag and flags "full-status" and
    "raw-description".
  * Improved gpgme_data_identify to distinguish more file types.
  * New flag GPGME_ENCRYPT_SYMMETRIC for gpgme_op_encrypt to allow
    mixed public key and symmetric encryption.
  * New field KEYGRIP in gpgme_subkey_t.  New fields FPR in gpgme_key_t.
  * New flag GPGME_DATA_ENCODING_MIME to declare that the encrypted or
    signed data is a valid MIME part.  This is to support future GnuPG
    versions.
  * Interface changes relative to the 1.6.0 release:
    gpgme_pubkey_algo_string       NEW.
    GPGME_PK_EDDSA                 NEW.
    gpgme_set_ctx_flag             NEW.
    gpgme_data_set_flag            NEW.
    gpgme_op_createkey             NEW.
    gpgme_op_createkey_start       NEW.
    gpgme_op_createsubkey          NEW.
    gpgme_op_createsubkey_start    NEW.
    gpgme_op_adduid_start          NEW.
    gpgme_op_adduid                NEW.
    gpgme_op_revuid_start          NEW.
    gpgme_op_revuid                NEW.
    gpgme_op_keysign_start         NEW.
    gpgme_op_keysign               NEW.
    gpgme_op_tofu_policy_start     NEW.
    gpgme_op_tofu_policy           NEW.
    gpgme_op_interact_start        NEW.
    gpgme_op_interact              NEW.
    gpgme_interact_cb_t            NEW.
    gpgme_op_edit_start            DEPRECATED.
    gpgme_op_edit                  DEPRECATED.
    gpgme_op_card_edit_start       DEPRECATED.
    gpgme_op_card_edit             DEPRECATED.
    gpgme_edit_cb_t                DEPRECATED.
    gpgme_status_code_t            DEPRECATED.
    gpgme_genkey_result_t          EXTENDED: New fields pubkey and seckey.
    gpgme_signature_t              EXTENDED: New field key.
    gpgme_key_t                    EXTENDED: New field fpr.
    gpgme_subkey_t                 EXTENDED: New field keygrip.
    gpgme_user_id_t                EXTENDED: New field tofu.
    gpgme_tofu_policy_t            NEW.
    gpgme_tofu_info_t              NEW.
    GPGME_STATUS_KEY_CONSIDERED    NEW.
    GPGME_STATUS_TOFU_USER         NEW.
    GPGME_STATUS_TOFU_STATS        NEW.
    GPGME_STATUS_TOFU_STATS_LONG   NEW.
    GPGME_STATUS_NOTATION_FLAGS    NEW.
    GPGME_KEYLIST_MODE_WITH_TOFU   NEW.
    GPGME_DATA_TYPE_PGP_ENCRYPTED  NEW.
    GPGME_DATA_TYPE_PGP_SIGNATURE  NEW.
    GPGME_DATA_ENCODING_MIME       NEW.
    GPGME_ENCRYPT_SYMMETRIC        NEW.
    GPGME_CREATE_SIGN              NEW.
    GPGME_CREATE_ENCR              NEW.
    GPGME_CREATE_CERT              NEW.
    GPGME_CREATE_AUTH              NEW.
    GPGME_CREATE_NOPASSWD          NEW.
    GPGME_CREATE_SELFSIGNED        NEW.
    GPGME_CREATE_NOSTORE           NEW.
    GPGME_CREATE_WANTPUB           NEW.
    GPGME_CREATE_WANTSEC           NEW.
    GPGME_CREATE_FORCE             NEW.
    GPGME_KEYSIGN_LOCAL            NEW.
    GPGME_KEYSIGN_LFSEP            NEW.
    GPGME_INTERACT_CARD            NEW.
  * Add patches to fix build:
    + gpgme-1.7.0-nonvoid-returns.patch
    + gpgme-1.7.0-cpp-qt-Include-config.h.patch
    + gpgme-1.7.0-python-Include-config.h.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1476187200">- Conflict libgpgmepp-devel with kdepimlibs4-devel as they both
  install the same header (kdepimlibs4 for historical reasons)</changelog>
  <changelog author="lbeltrame@kde.org" date="1476273600">- Switch on the Qt bindings
- Add missing buildrequires, files, and needed adjustments for the
  Qt build</changelog>
  <changelog author="lbeltrame@kde.org" date="1476792000">- New upstream release 1.7.1
  * Fixed problems with the new language bindings.
  * New helper function gpgme_addrspec_from_uid.
  * Use option --exit-on-status-write-error with newer gpg versions.
  * qt: Missed API from the Qt Binding inclusion has
    been added again.
  * qt: abstractimportjob.h is now installed to that
    ImportJobs can be used again.
  * qt: Fixed spelling error in API (startReceive).
  * Interface changes relative to the 1.7.0 release:
    gpgme_addrspec_from_uid         NEW.
    qt: WksPublishJob::startRecieve RENAMED to ::startReceive.
    qt: MultiDeleteJob              NEW.
    qt: AbstractImportJob           NEW.
    qt: SpecialJob                  NEW.
    cpp: Signature::key(bool, bool)              NEW.
    cpp: UserID::addrSpecFromString(const char*) NEW.
    cpp: UserID::addrSpec()                      NEW.
- Drop conflict (handled on kdepimlibs4 side)
- Drop upstreamed patches:
  * gpgme-1.7.0-nonvoid-returns.patch
  * gpgme-1.7.0-cpp-qt-Include-config.h.patch
  * gpgme-1.7.0-python-Include-config.h.patch</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Trim and update descriptions</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- in addition to dropping gpgme-1.7.0-python-Include-config.h.patch
  remove automake depdendency and autogen.sh call
- build QT lib only on Factory</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- gpgme 1.8:
  * The module of the Python bindings has been renamed to 'gpg'.
  * New interface to query current software versions.
  * New feature to use gpg's --{show,override}session-key options.
  * New interface to set the sender of a mail.
  * qt: Added Distinguished Name parser from libkleo
  * The --homedir option is now used with recent gpgconf versions.
  * The internal locking functions have been replaced by libgpg-error
    locking functions.
  * Interface changes relative to the 1.7.1 release:
    gpgme_set_sender                NEW.
    gpgme_get_sender                NEW.
    gpgme_op_query_swdb             NEW.
    gpgme_op_query_swdb_result      NEW.
    gpgme_query_swdb_result_t       NEW.
    gpgme_get_ctx_flag              NEW.
    gpgme_decrypt_result_t          EXTENDED: New field session_key.
    qt: DN                          NEW.
    qt: DN::Attribute               NEW.
    qt: Job::context(Job*)          NEW.
    cpp: EngineInfo::Version::Version(const char*) NEW.
    cpp: EngineInfo::Version::Version()            NEW.
    cpp: SwdbResult                                NEW.
    cpp: Context::setSender(const char*)           NEW.
    cpp: Context::getSender()                      NEW.</changelog>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
</package>
<package pkgid="fbf7cef774beb0ef5b1f612fceb9c60b8c1069a335c6f1ea71876f2673501890" name="gpgme" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1440590400">- gpgme 1.6.0:
  * Added gpgme_set_offline to do a key listinging w/o requiring
  CRL.
  * Added gpgme_set_status_cb to allow a user to see some status
  messages.
  * Added an export mode for secret keys.
  * More precise error codes are returned if GnuPG &gt;= 2.1.8 is used.
  * The passphrase handler for the loopback mode has been improved and may
  also be used with genkey.
  * Interface changes relative to the 1.5.1 release:
  gpgme_set_offline              NEW.
  gpgme_get_offline              NEW.
  gpgme_set_status_cb            NEW.
  gpgme_get_status_cb            NEW.
  GPGME_EXPORT_MODE_SECRET       NEW
  GPGME_EXPORT_MODE_RAW          NEW.
  GPGME_EXPORT_MODE_PKCS12       NEW.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- restore taking build timestamp from changelog date</changelog>
  <changelog author="astieger@suse.com" date="1474891200">- gpgme 1.7.0:
  * Python2 bindings
  * C++ bindings
  * disabled: Python3, Qt-Framework API
  * New functions gpgme_op_createkey and gpgme_op_createsubkey to make
    key creation easier (requires GnuPG 2.1).
  * New functions gpgme_op_adduid and gpgme_op_revuid to make user id
    management easier (requires GnuPG 2.1).
  * New function gpgme_op_keysign to make key signing easier (requires
    GnuPG 2.1).
  * New function gpgme_op_interact to replace the now deprecated
    functions gpgme_op_edit and gpgme_op_card_edit.
  * New function gpgme_pubkey_algo_string to convert a public key
    algorithm into a GnuPG 2.1 style string.
  * Support for GnuPG 2.1's TOFU trust model.
  * Notation flags are now correctly set on verify.
  * New global flag "require-gnupg" to set a minimal gnupg version.
  * More supported items in gpgme_get_dirinfo.
  * New function gpgme_data_set_flag and flag "size-hint".
  * New function gpgme_set_ctx_flag and flags "full-status" and
    "raw-description".
  * Improved gpgme_data_identify to distinguish more file types.
  * New flag GPGME_ENCRYPT_SYMMETRIC for gpgme_op_encrypt to allow
    mixed public key and symmetric encryption.
  * New field KEYGRIP in gpgme_subkey_t.  New fields FPR in gpgme_key_t.
  * New flag GPGME_DATA_ENCODING_MIME to declare that the encrypted or
    signed data is a valid MIME part.  This is to support future GnuPG
    versions.
  * Interface changes relative to the 1.6.0 release:
    gpgme_pubkey_algo_string       NEW.
    GPGME_PK_EDDSA                 NEW.
    gpgme_set_ctx_flag             NEW.
    gpgme_data_set_flag            NEW.
    gpgme_op_createkey             NEW.
    gpgme_op_createkey_start       NEW.
    gpgme_op_createsubkey          NEW.
    gpgme_op_createsubkey_start    NEW.
    gpgme_op_adduid_start          NEW.
    gpgme_op_adduid                NEW.
    gpgme_op_revuid_start          NEW.
    gpgme_op_revuid                NEW.
    gpgme_op_keysign_start         NEW.
    gpgme_op_keysign               NEW.
    gpgme_op_tofu_policy_start     NEW.
    gpgme_op_tofu_policy           NEW.
    gpgme_op_interact_start        NEW.
    gpgme_op_interact              NEW.
    gpgme_interact_cb_t            NEW.
    gpgme_op_edit_start            DEPRECATED.
    gpgme_op_edit                  DEPRECATED.
    gpgme_op_card_edit_start       DEPRECATED.
    gpgme_op_card_edit             DEPRECATED.
    gpgme_edit_cb_t                DEPRECATED.
    gpgme_status_code_t            DEPRECATED.
    gpgme_genkey_result_t          EXTENDED: New fields pubkey and seckey.
    gpgme_signature_t              EXTENDED: New field key.
    gpgme_key_t                    EXTENDED: New field fpr.
    gpgme_subkey_t                 EXTENDED: New field keygrip.
    gpgme_user_id_t                EXTENDED: New field tofu.
    gpgme_tofu_policy_t            NEW.
    gpgme_tofu_info_t              NEW.
    GPGME_STATUS_KEY_CONSIDERED    NEW.
    GPGME_STATUS_TOFU_USER         NEW.
    GPGME_STATUS_TOFU_STATS        NEW.
    GPGME_STATUS_TOFU_STATS_LONG   NEW.
    GPGME_STATUS_NOTATION_FLAGS    NEW.
    GPGME_KEYLIST_MODE_WITH_TOFU   NEW.
    GPGME_DATA_TYPE_PGP_ENCRYPTED  NEW.
    GPGME_DATA_TYPE_PGP_SIGNATURE  NEW.
    GPGME_DATA_ENCODING_MIME       NEW.
    GPGME_ENCRYPT_SYMMETRIC        NEW.
    GPGME_CREATE_SIGN              NEW.
    GPGME_CREATE_ENCR              NEW.
    GPGME_CREATE_CERT              NEW.
    GPGME_CREATE_AUTH              NEW.
    GPGME_CREATE_NOPASSWD          NEW.
    GPGME_CREATE_SELFSIGNED        NEW.
    GPGME_CREATE_NOSTORE           NEW.
    GPGME_CREATE_WANTPUB           NEW.
    GPGME_CREATE_WANTSEC           NEW.
    GPGME_CREATE_FORCE             NEW.
    GPGME_KEYSIGN_LOCAL            NEW.
    GPGME_KEYSIGN_LFSEP            NEW.
    GPGME_INTERACT_CARD            NEW.
  * Add patches to fix build:
    + gpgme-1.7.0-nonvoid-returns.patch
    + gpgme-1.7.0-cpp-qt-Include-config.h.patch
    + gpgme-1.7.0-python-Include-config.h.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1476187200">- Conflict libgpgmepp-devel with kdepimlibs4-devel as they both
  install the same header (kdepimlibs4 for historical reasons)</changelog>
  <changelog author="lbeltrame@kde.org" date="1476273600">- Switch on the Qt bindings
- Add missing buildrequires, files, and needed adjustments for the
  Qt build</changelog>
  <changelog author="lbeltrame@kde.org" date="1476792000">- New upstream release 1.7.1
  * Fixed problems with the new language bindings.
  * New helper function gpgme_addrspec_from_uid.
  * Use option --exit-on-status-write-error with newer gpg versions.
  * qt: Missed API from the Qt Binding inclusion has
    been added again.
  * qt: abstractimportjob.h is now installed to that
    ImportJobs can be used again.
  * qt: Fixed spelling error in API (startReceive).
  * Interface changes relative to the 1.7.0 release:
    gpgme_addrspec_from_uid         NEW.
    qt: WksPublishJob::startRecieve RENAMED to ::startReceive.
    qt: MultiDeleteJob              NEW.
    qt: AbstractImportJob           NEW.
    qt: SpecialJob                  NEW.
    cpp: Signature::key(bool, bool)              NEW.
    cpp: UserID::addrSpecFromString(const char*) NEW.
    cpp: UserID::addrSpec()                      NEW.
- Drop conflict (handled on kdepimlibs4 side)
- Drop upstreamed patches:
  * gpgme-1.7.0-nonvoid-returns.patch
  * gpgme-1.7.0-cpp-qt-Include-config.h.patch
  * gpgme-1.7.0-python-Include-config.h.patch</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Trim and update descriptions</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- in addition to dropping gpgme-1.7.0-python-Include-config.h.patch
  remove automake depdendency and autogen.sh call
- build QT lib only on Factory</changelog>
  <changelog author="astieger@suse.com" date="1479556800">- gpgme 1.8:
  * The module of the Python bindings has been renamed to 'gpg'.
  * New interface to query current software versions.
  * New feature to use gpg's --{show,override}session-key options.
  * New interface to set the sender of a mail.
  * qt: Added Distinguished Name parser from libkleo
  * The --homedir option is now used with recent gpgconf versions.
  * The internal locking functions have been replaced by libgpg-error
    locking functions.
  * Interface changes relative to the 1.7.1 release:
    gpgme_set_sender                NEW.
    gpgme_get_sender                NEW.
    gpgme_op_query_swdb             NEW.
    gpgme_op_query_swdb_result      NEW.
    gpgme_query_swdb_result_t       NEW.
    gpgme_get_ctx_flag              NEW.
    gpgme_decrypt_result_t          EXTENDED: New field session_key.
    qt: DN                          NEW.
    qt: DN::Attribute               NEW.
    qt: Job::context(Job*)          NEW.
    cpp: EngineInfo::Version::Version(const char*) NEW.
    cpp: EngineInfo::Version::Version()            NEW.
    cpp: SwdbResult                                NEW.
    cpp: Context::setSender(const char*)           NEW.
    cpp: Context::getSender()                      NEW.</changelog>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
</package>
<package pkgid="8a2ad30b5c97f664b707f257896bff2eab981354b0adfa612f5d85d995007ecb" name="graphviz" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="4da44e2c47d9ec3da7dea9102164bfdaf7a6011ca83337e4c9d7b10f18b16fba" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="b8551ad3becc7bc8e2bf084630104f5f3131c121b940cd002924e5b7b43bd1f3" name="graphviz-addons" arch="src">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="pth@suse.de" date="1383048000">- Add graphviz-getaddrinfo.patch to use getaddrinfo instead of
  gethostbyname.</changelog>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ed1190adeee3a804d95dfbcde59103f9c5f4f1192d753b32f72789f78c527e54" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="edd9a169c8c19fc09a5e7e8b8498a126e6286567916cd661c9b8a038b3c31707" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="57232dfd4e567278b05f5bbb51866cf0a06953226da33d92dbf007358b2a34d0" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9264d088ac855d4cad7e823274cc7b1185bf13fc45cf45f8927abb505f3ff479" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0bd6034a5df70884416cd9f087c9b0ed9269d910378550167e81ee919f81eab4" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a4c129515f84c1c99e92b4d54a612a5735c90fbee7de110f0816c0bc739c26aa" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="b3b0efcbac453928d5adc05ba48c0ab9f276666cefba1f819db358517fb35152" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="cf028707a65ea802f97ffe3033ef5b5b1efc6a3ee0dc3c42b57653fbb6ca9c84" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="52b1263dd5aee062c428ad8d9a298f27a71fcd705678f422211fb635a07ad9a2" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="e82a49ec112b54472aec22a4c9897e4678373b987ba2e61d14cc619ccf8aad6d" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a5cae505fcc689724e56a731c9c38879b1eeb8f5628b6c9d94bde72d1bac6623" name="graphviz-plugins-core" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="041e8e007e47dd831f8f3ed8e065be03f70d7e9a36d90a8ad505d1a08ec3d961" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3b653b3d07381bf30a847703999a4ca764512e58315e0bf535c51ee20f6c3c12" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5373c313c041d55886127234fd62562736eebfc78de7ed37549661bbf04a55fd" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="161bef8b9470a756a0baea579472acea2914838357c31a1c84e80f1b0eb9a2a5" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp150.5.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9ba13e99942ced2ce86ee6f3aced216df6f5390e522d437678db0fb62f1e5c32" name="gri" arch="x86_64">
  <version epoch="0" ver="2.12.23" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1313755200">- Initial package (version 2.12.23)</changelog>
  <changelog author="scorot@free.fr" date="1330257600">- fix build for SLE-11</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1339848000">- add explicit build requirement for perl(Time::CTime)
- fix doc/texinfo2HTML perl script: ctime and getopts
- fix warning about touched buildroot in %build section</changelog>
  <changelog author="werner@suse.de" date="1341921600">- Make it build with latest TeXLive 2012 with new package layout</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add gri-texinfo-5.0.patch: Fix build with texinfo 5.0.</changelog>
  <changelog author="bwiedemann@suse.com" date="1457438400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="bwiedemann@suse.com" date="1457524800">- Drop timestamp from texinfo to fix build-compare</changelog>
  <changelog author="badshah400@gmail.com" date="1498478400">- Add gri-invalid-char-to-pointer.patch: Fix a char to char*
  conversion by replacing '\0' with NULL.
- Cleanup spec file by removing conditionals for outdated openSUSE
  versions, running spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509019200">- Add gri-perl-5.26.patch: Fix usage of texinfo2HTML for usage with
  perl 5.26.</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1538395200">- allow PS decoder for build [bsc#1109976]</changelog>
</package>
<package pkgid="37dcc27b68f394da57d47c489460d9af534b546ae66f6bc2b100dcdbe16e3e78" name="growpart" arch="noarch">
  <version epoch="0" ver="0.30" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="3bfe7a8c1dd606eca3ca0089f598a0ce789309c533abfb88d9473e0495f11033" name="growpart-rootgrow" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="ffc08f63eee02bb0ff09f8226c9051296b59569608f55cb6b0eae06d624ad740" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="c6563840d2b0c76b0b29ca3ecfa264b22a8950746f1d5529e9b0d4a5b0a17a3d" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="456e41bae25005b9a9e66ae41babf550e5896849a6cfc6e4941d161d2c56da2e" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="ed4e02e66983c58d22afdafd868c9342f23ba810a172285426014d5e579ff387" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="cb16a3350d1f2564d1ea39e3e0e04e93893e173f425bc4aba5187c43c102eb4e" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="f6b59d7655666d61ad223ca192ae9b66a4a775cd3589bda2ade5a8a660f65b9a" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="1aed84c16def1be16b783ddc755b9718548954847af59f556dbd3ea8335309eb" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="30abf84ff75dbd307e0e9653c4a046ffab564e783cad18191691e71cebabbb57" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="10dc8eeb056536283dd02b1d6d382ff0e5b1a26fa820f74abad2ca52f0cf3702" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="5f9a5eb03d0b360a18749932710b46796c68359ed60830bf681f89868c4c8985" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="4a2d2d81e34dbe6baef251e41a9ac751d02ae9134d4a2cdf2a4a54675fa7b2dd" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c2a4052eaa141aef549e5f85851cbc1cc53c3bea995becd65a8c7884bac18dde" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="4260f4d90a9dcd707395a671f35edcf08ef63617225773e2fb85ee984c266337" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="9ddc39ce3b27551e0ccce0b7cf1f517ebf8f04b7c64b46624f6c2b8c607b5231" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="48b92f5937b9d688912f63d1fee1d959d97bd9c0a046b2df6eeb2e0f7fcc903b" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="d1e3b87747d55ae805c1ffcb775d5528bd5323a1d7ad1252ccefce8d0077516f" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="7f49fcac3640ecc6a7f6a6429fd0f8831934d37196b657d0f3e26c37cc6e05be" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="2e5bca82e42faa669c68cb9ab5dd61ad9bb44d940830bcb1ae2bccda28724463" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="7612ba878afa20b474771c7c45fd7be4285eefd1bb1d06589863d5ff8b99f8b9" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="f992ce470bc1a74eff65faa043475ebb25b1a5f17b8b8592d603a03555be2af7" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="9dccc278adfdea1129ad6ec341e9e29d50ac6782eb02c19ae9d3f276aa8544e4" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="77041c48e473f7ae08d1cb7d326b43828cd7202d80710a7bf4f1faa37ce6109d" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="f23dfae5c9fd68b002c6e712e013aef7de996374c51a0e14ad9236891a05370b" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="a480e95b2d99df8ef2faf7c92e70d852f6c231e9ea970dbec8ee9fb29b28071d" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="27e75cab851efc4c576384ff243806318cdd2e2be709b67f14e619aeaa114643" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="9944d193b9e390b682d7485f3b1c26f961f57b997de9c03d2e69bb43add48460" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="1ce1a7830836e246c8ce506336e08d94133332012774f8e3c0964b8c99d05702" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="fe8fa964e0ca3f4ea1a9587d240aab46a56604d19143ca944f5591143db3d777" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="86c11d6d852cd5915544ca5a0b5cc45f8541268a7d2256c05dd15ed185e03532" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="4c56eac7281b085cb343a7b750dd6a7fd3724be8f548f3a2ffcdee2be36a053a" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="6cf96349e1310b4598334493457cd555b3a165e7d30f01aae232f8ec361a1c5a" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="0fd30ad5b457bc87da386f8c9f8c1e8a8f95558753f1535d247242495ea35d3a" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="1590b84b1db6de5e4832852fca2cf28227ba342c1d0440149a3869593c4f0aaa" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="6e7c8a5c1b06d0866621e419b01f2f799e1adeb3788d102bd4e58a2486b45b7c" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="9c150e92b63c6a5adc015e937e832eab9bd04ae3c249dab75580938b4987e8e9" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="557f13d390ef6562f1f36719c79fcf9dd1202d82fdce7b18b7f94e09e78c3c9a" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="f9196c5541b86452bd47c0f459adcfc5dae3995b3055a640680bcf34ba3108db" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="33cb902e06702e3694c1ebfe1bdcfde7d95a5a48deb6983f71333eba282e9b73" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="37f73350bfcba44329a1cbe5fb1d65c49799b2c64d58c09d7cf8d72b764eaf68" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="0fb41c1bb5ecea8aa9c2d39b0a96b70b3186524f93e94b4d98b90d4092caa8f6" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="58c0f0aa7b7e42e06d3a330db707b441327a2d7ab6b7d7b8f7c481615e58bf01" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="f046785e27bb7f65adde16f9f94055c6b84ee2b1bee51355767aa74d02a83c7e" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="d93bc4bf6571dc84c32ab88750a1a2ddc044dd9bfb9a7e3eda284ba5faf80969" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="2c1b9b9c81bc60c89651b9a2ec07f1a4d8267cff94d5834209584b4ef8b9c1c5" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="85af21edd976d7c501ad400d54ad96cbd121dbaa4bed395462de4408c09f99fa" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="4cba5db2828e482ee317d6233fcaa9f5c5872ffc50002a442fde07087a94615d" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="fceaebcd0b2eb6026e4ea2ae5e672543dccd57ee612a3f677b88e8a3c8f3a824" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="ccdac356c73d9f99e3a6d5696ef7ef59ae969eeaab1c142c38a0a5e420b99835" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="c0f70c63107ec052b9def260976623541199510d8438a74779096bf99275929e" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="83bcf58e5c57e9c7a5801220add9cf7a6790fda81e22386dfbc40854ebcf1849" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="6e772d3d5cdf5bfc077d22aa81bac10561d89c9541d1893ebcd599b1536709c9" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="7c329fb0dd2fc0c938914f6b5bf00db7953e986bfa62c1218b43d9f121b46b18" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="3ec11b8cf7645a37b0deff918a255f53d31323f2edfc2b398936001db1fa2e5d" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="1256e5959ad3a3fecfb859208addaabc1d57d3e7b20a9570e832816644a6bc24" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="c6bb9fe885d1b112fe0c165b55ea40075b282844691d9e5dc45e0dbc923dd5cc" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="164fd9bcf602018e0e512a52813cc6cadd24b8303f48ff906aca50fdc9283cb0" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="28e9bbe670d9e4bc4118eeb41085a2fd7975111652b9941fe4dc2e411def04d1" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.10.1"/>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
</package>
<package pkgid="cac0c2310d8062e9085e851c44503781acabd4b94d8d992d10f4039babd51a7a" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.13.1"/>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
</package>
<package pkgid="b3898fc600a202283dfe32c2258681d67cc18a222b5f25905601216202b75daf" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.16.1"/>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
</package>
<package pkgid="bca10017618b59889e20a08209fe94a36cea5e84130ff1b6daebc1d885e8f54e" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.20.2"/>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="780186e809c487d7c0646835717d3a2a5f3b2e667868c058b06bc9afbcb0d9a6" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.23.1"/>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
</package>
<package pkgid="a6bb0c381a10e83618acf6c869fc658c3004a19f8f438e9c8ff3743da44fc3ff" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.26.1"/>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="glin@suse.com" date="1538654400">- Support NVDIMM device names (bsc#1110073)
  * grub2-getroot-support-nvdimm.patch</changelog>
  <changelog author="mchang@suse.com" date="1539950400">- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch</changelog>
  <changelog author="mchang@suse.com" date="1543233600">- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch</changelog>
  <changelog author="mchang@suse.com" date="1550664000">- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)</changelog>
  <changelog author="mchang &lt;mchang@suse.com&gt;" date="1552996800">- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
  <changelog author="rw@suse.com" date="1558094400">- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
  * grub2-s390x-04-grub2-install.patch
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)
  * grub2-s390x-09-improve-zipl-setup.patch
- Refresh
  * grub2-zipl-setup-fix-btrfs-multipledev.patch</changelog>
  <changelog author="rw@suse.com" date="1558094401">- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
  * grub2-systemd-sleep.sh</changelog>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
</package>
<package pkgid="eca0ebd11298d7680a9fe00fe87f59d68f25f92d3edffc755354a7ea7f57a62a" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="fc679b3250c04caef6aac287247ec8797862beb40c5fc077e1f7b6a07863b286" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.7.1"/>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
  <changelog author="mchang@suse.com" date="1537963200">- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch</changelog>
</package>
<package pkgid="77ffeb0634ff6551f812dd82358e78ae4a333f129633e45fd70649a97ee94936" name="gsettings-desktop-schemas" arch="src">
  <version epoch="0" ver="3.24.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Use system font in titlebar by default.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Fix typographical errors.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.1:
  + Add instructions and scripts for building on Win32.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 3.19.2:
  + Add setting to show battery percentage.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450353600">- Update to version 3.19.3:
  + Remove scroll-method key, and add edge-scroll-enabled key
    for touchpads.
  + Revert natural scrolling being applies to non-touchpad devices
    by default.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Update desktop file IDs for search providers.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + Add a setting to enable caret mode.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove gsettings-desktop-schemas-bnc872820-wm-button-layout.patch
  upstreamed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Update to version 3.21.2:
  + Add a setting to enable weekdates in calendars.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 3.21.3:
  + Add a setting to store input sources MRU list.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.21.4:
  + Add tablet/stylus/pad schemas.
  + Add mouse/trackpad accel profile keys.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484136000">- Update to version 3.23.3:
  + Add "Disable while typing" touchpad setting.
  + Add a gsetting to back Gtk/EnablePrimaryPaste.
  + Add "tap-and-drag" for touchpads.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Use more fancy characters in translatable strings.
  + Fix "&lt;super&gt;s" shortcut being used for 2 separate actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.24.1:
  + Update GConf convert scripts to cater for peripherals.
  + Win32 build fixes.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1542283200">- Add gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + Add settings for org.gnome.desktop.background.lockdialog:
    This key is for the background of lockDialogGroup which makes
    login / lock background configurable. The default behavior
    will be retained to what it is currently.
  + This patch applies to SLE15-SP1/Leap15.1 or later and Tumbleweed.
  + This patch is required by a patch in GNOME Shell
    gnome-shell-fate324570-Make-GDM-background-image-configurable.patch
    (fate#324570, glgo#GNOME/gnome-shell#680, bsc#1120178).</changelog>
  <changelog author="qkzhu@suse.com" date="1550232000">- Update the spec file section for
  gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
</package>
<package pkgid="f2bd0f541f4462966dc93666826e870c04abfe422de16b62b4baf96a2ac3d5fc" name="gsettings-desktop-schemas" arch="x86_64">
  <version epoch="0" ver="3.24.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Use system font in titlebar by default.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Fix typographical errors.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.1:
  + Add instructions and scripts for building on Win32.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 3.19.2:
  + Add setting to show battery percentage.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450353600">- Update to version 3.19.3:
  + Remove scroll-method key, and add edge-scroll-enabled key
    for touchpads.
  + Revert natural scrolling being applies to non-touchpad devices
    by default.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Update desktop file IDs for search providers.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + Add a setting to enable caret mode.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove gsettings-desktop-schemas-bnc872820-wm-button-layout.patch
  upstreamed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Update to version 3.21.2:
  + Add a setting to enable weekdates in calendars.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 3.21.3:
  + Add a setting to store input sources MRU list.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.21.4:
  + Add tablet/stylus/pad schemas.
  + Add mouse/trackpad accel profile keys.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484136000">- Update to version 3.23.3:
  + Add "Disable while typing" touchpad setting.
  + Add a gsetting to back Gtk/EnablePrimaryPaste.
  + Add "tap-and-drag" for touchpads.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Use more fancy characters in translatable strings.
  + Fix "&lt;super&gt;s" shortcut being used for 2 separate actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.24.1:
  + Update GConf convert scripts to cater for peripherals.
  + Win32 build fixes.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1542283200">- Add gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + Add settings for org.gnome.desktop.background.lockdialog:
    This key is for the background of lockDialogGroup which makes
    login / lock background configurable. The default behavior
    will be retained to what it is currently.
  + This patch applies to SLE15-SP1/Leap15.1 or later and Tumbleweed.
  + This patch is required by a patch in GNOME Shell
    gnome-shell-fate324570-Make-GDM-background-image-configurable.patch
    (fate#324570, glgo#GNOME/gnome-shell#680, bsc#1120178).</changelog>
  <changelog author="qkzhu@suse.com" date="1550232000">- Update the spec file section for
  gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
</package>
<package pkgid="bc81be5c84b51372014cdba97a4cded8742b9288b9b7262523fae2261cf4aaf3" name="gsettings-desktop-schemas-devel" arch="x86_64">
  <version epoch="0" ver="3.24.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Use system font in titlebar by default.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Fix typographical errors.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.1:
  + Add instructions and scripts for building on Win32.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 3.19.2:
  + Add setting to show battery percentage.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450353600">- Update to version 3.19.3:
  + Remove scroll-method key, and add edge-scroll-enabled key
    for touchpads.
  + Revert natural scrolling being applies to non-touchpad devices
    by default.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Update desktop file IDs for search providers.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + Add a setting to enable caret mode.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove gsettings-desktop-schemas-bnc872820-wm-button-layout.patch
  upstreamed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Update to version 3.21.2:
  + Add a setting to enable weekdates in calendars.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 3.21.3:
  + Add a setting to store input sources MRU list.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.21.4:
  + Add tablet/stylus/pad schemas.
  + Add mouse/trackpad accel profile keys.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484136000">- Update to version 3.23.3:
  + Add "Disable while typing" touchpad setting.
  + Add a gsetting to back Gtk/EnablePrimaryPaste.
  + Add "tap-and-drag" for touchpads.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Use more fancy characters in translatable strings.
  + Fix "&lt;super&gt;s" shortcut being used for 2 separate actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.24.1:
  + Update GConf convert scripts to cater for peripherals.
  + Win32 build fixes.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1542283200">- Add gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + Add settings for org.gnome.desktop.background.lockdialog:
    This key is for the background of lockDialogGroup which makes
    login / lock background configurable. The default behavior
    will be retained to what it is currently.
  + This patch applies to SLE15-SP1/Leap15.1 or later and Tumbleweed.
  + This patch is required by a patch in GNOME Shell
    gnome-shell-fate324570-Make-GDM-background-image-configurable.patch
    (fate#324570, glgo#GNOME/gnome-shell#680, bsc#1120178).</changelog>
  <changelog author="qkzhu@suse.com" date="1550232000">- Update the spec file section for
  gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
</package>
<package pkgid="a3c70cef40e0bf16582cef446f07d045ee117339ee1060a49bdad50acf325f22" name="gsettings-desktop-schemas-lang" arch="noarch">
  <version epoch="0" ver="3.24.1" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1429012800">- Update to version 3.16.1:
  + Use system font in titlebar by default.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 3.17.92:
  + Fix typographical errors.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442836800">- Update to version 3.18.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445342400">- Update to version 3.18.1:
  + Add instructions and scripts for building on Win32.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448539200">- Update to version 3.19.2:
  + Add setting to show battery percentage.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1450353600">- Update to version 3.19.3:
  + Remove scroll-method key, and add edge-scroll-enabled key
    for touchpads.
  + Revert natural scrolling being applies to non-touchpad devices
    by default.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455624000">- Update to version 3.19.90:
  + Update desktop file IDs for search providers.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458216000">- Update to version 3.19.92:
  + Add a setting to enable caret mode.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458561600">- Update to version 3.20.0:
  + Updated translations.</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove gsettings-desktop-schemas-bnc872820-wm-button-layout.patch
  upstreamed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1464436800">- Update to version 3.21.2:
  + Add a setting to enable weekdates in calendars.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 3.21.3:
  + Add a setting to store input sources MRU list.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 3.21.4:
  + Add tablet/stylus/pad schemas.
  + Add mouse/trackpad accel profile keys.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1484136000">- Update to version 3.23.3:
  + Add "Disable while typing" touchpad setting.
  + Add a gsetting to back Gtk/EnablePrimaryPaste.
  + Add "tap-and-drag" for touchpads.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Use more fancy characters in translatable strings.
  + Fix "&lt;super&gt;s" shortcut being used for 2 separate actions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.24.1:
  + Update GConf convert scripts to cater for peripherals.
  + Win32 build fixes.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1542283200">- Add gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + Add settings for org.gnome.desktop.background.lockdialog:
    This key is for the background of lockDialogGroup which makes
    login / lock background configurable. The default behavior
    will be retained to what it is currently.
  + This patch applies to SLE15-SP1/Leap15.1 or later and Tumbleweed.
  + This patch is required by a patch in GNOME Shell
    gnome-shell-fate324570-Make-GDM-background-image-configurable.patch
    (fate#324570, glgo#GNOME/gnome-shell#680, bsc#1120178).</changelog>
  <changelog author="qkzhu@suse.com" date="1550232000">- Update the spec file section for
  gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch:
  + We inherit binaries from 15:Update in 15-SP1 so the if condition
    in specfile won't enable the patch in 15-SP1.
  + Remove the if condition to apply this patch to SLE15/Leap15.0 or
    later and Tumbleweed (bsc#1120178).</changelog>
</package>
<package pkgid="8d419b9fa068caa0a3cbf70c68e7591cb4373b5b3446dde81be732eb868321c5" name="gstreamer-plugins-bad" arch="src">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="81323e8660bfce9d78b4e144e8571dafdb232a0914277ace4eff04628ddc3526" name="gstreamer-plugins-bad" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="0f8e75667d6192ba5e90edf7e450028e63159582dee6b0e19294325fd1025007" name="gstreamer-plugins-bad-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="2841fc229f80a9bdf0b7b77ec25231e48ef93f695fb3fe5adac1c6f4d2798465" name="gstreamer-plugins-bad-chromaprint" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="58dd7c6aaff17f507208615e49068e8997e7dda3a9b037c0eadf2d758905b4f2" name="gstreamer-plugins-bad-chromaprint-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="1273b3afbab75f0f0dcfa6ba36c7e7e05600dc067cc09e6454e548711ca0e6aa" name="gstreamer-plugins-bad-devel" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="254a423badfa8c3ece9a58e128ff5eed3bf04b8b81b8cd36c5fbc0aeaaea526f" name="gstreamer-plugins-bad-doc" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="0faf873bd1919e6d9d823f1da9c83d6d87a5c25a94fee315cf4c6842f6d18a69" name="gstreamer-plugins-bad-fluidsynth" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="e8e0002173d8e1b70d512f0c83a819e15f8730c2fcc3a1d7b6a9a528768a8bcc" name="gstreamer-plugins-bad-fluidsynth-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="0a294ef0f5f2bb48b5413126429b3fb486b4c5a6b576f3520fcec24a62d2f655" name="gstreamer-plugins-bad-lang" arch="noarch">
  <version epoch="0" ver="1.12.5" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1505736000">- Update to version 1.12.3:
  + Bugs fixed: bgo#767462, bgo#782379, bgo#784887, bgo#785119,
    bgo#785941, bgo#785957, bgo#785987, bgo#786036, bgo#786201,
    bgo#786250, bgo#787234, bgo#787309, bgo#787442, bgo#787727.
- Replace pkgconfig(libopenjpeg1) with pkgconfig(libopenjp2)
  BuildRequires: Build against the new branch of libopenjpeg.</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Split out chromaprint plugin into
  gstreamer-plugins-bad-chromaprint: the chromaprint plugin links
  against ffmpeg (indirectly) which in turn can cause cycles in
  various other builds, like webkit2).</changelog>
  <changelog author="idonmez@suse.com" date="1509105600">- Add gstpb-support-openjpeg-2.3.patch: fix build with openjpeg 2.3
  (bgo#788703).
- Add autoconf, automake and libtool BuildRequires and call
  autoreconf, since above patch touches the build system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1509969600">- Move pkgconfig(mjpegtools) BuildRequires to orig-addon: mplex
  without mpeg2enc support is pointless, so keep those two in the
  same build conditional.</changelog>
  <changelog author="kill_it@mail.ru" date="1510142400">- Enable gobject introspection bindings:
  + Add gobject-introspection-devel BuildRequires: allow the build
    system to find the needed infrastructure.
  + Pass --enable-introspection to configure: enable the
    introspection support.
  + Split out new typelib- packages:
  - typelib-1_0-GstBadAllocators-1_0
  - typelib-1_0-GstGL-1_0
  - typelib-1_0-GstInsertBin-1_0
  - typelib-1_0-GstMpegts-1_0
  - typelib-1_0-GstPlayer-1_0</changelog>
  <changelog author="dimstar@opensuse.org" date="1510142401">- Disable %glib2_gsettings_schema_post/postun scriptlets on
  suse_version &gt;= 1330: this functionality is now covered by file
  triggers and the macros expand to %nil.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511784000">- Add pkgconfig(libde265) BuildRequires in orig-addon subpackage,
  build h.265 (HVEC) decode support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Move pkgconfig(libmodplug) BuildRequires, and thus libmodplug
  module, to build-orig. This move is not legally motivated, but
  rather build time optimization as it helps us eliminate a build
  cycle in openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + openjpeg: Support building with openjpeg 2.3 (bgo#788703).
  + Bugs fixed: bgo#784593, bgo#787293, bgo#787942, bgo#789999,
    bgo#790042, bgo#790812, bgo#791258.
- Drop gstpb-support-openjpeg-2.3.patch: Fixed upstream. Following
  this; drop autoconf, automake and libtool BuildRequires, and no
  longer pass autoreconf, no needed anymore.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514030400">- Add gst-bad-vtdec-destroy-create-fix.patch: vtdec: destroy and
  create the GL context on start()/stop(). Removes a reference
  count loop.
- Add python3-xml BuildRequires and switch to using plain make
  instead of make_build macro, and add conditional for
  pkgconfig(graphene-1.0), pkgconfig(wayland-client),
  pkgconfig(wayland-cursor), pkgconfig(wayland-egl),
  pkgconfig(wayland-protocols) and pkgconfig(wayland-scanner)
  BuildRequires and the .so and sub-package produced, fix build for
  old versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
</package>
<package pkgid="22ce0faf25f7acd506bfa3406311e568fbef183acb29c9cc1d357dd99ed60ccf" name="gthumb" arch="src">
  <version epoch="0" ver="3.6.1" rel="lp150.5.1"/>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.4.2:
  + User visible changes: Sort catalogs first by name then by date,
    instead of doing the opposite.
  + Bugs fixed:
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#759631).
  - Crash after changing and renaming file (bgo#750142).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.4.3:
  + Bugs fixed:
  - Theme errors with gtk+ 3.20.
  - Viewer sidebar too wide.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.4.4:
  + Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  + Hide the image frame when in fullscreen mode (bgo#767731).
  + Fixed headerbar buttons not shown correctly after activating a
    tool.
  + Orginaze files: fixed wrong catalog cardinality.
  + Fixed scrollbars resetting their position when changing image.
  + Find duplicates: faster.
  + New folder: open the created folder.
  + Print dialog: expand the options side to make the zoom slider
    visible.
  + Fixed wrong image loaded after deleting an image from a
    catalog.
  + Updated translations.
- Add gthumb-implicit-declarations.patch: Fix implcit declaration
  when building the image_viewer extension.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.4.4.1:
  + gthumb 3.4.4 fails post build check 64bit-portability-issue
    (bgo#772739).
- Drop gthumb-implicit-declarations.patch: Fixed upstream.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.5.1:
  + New features and user visible changes:
  - Added support for double click activation.
  - Added option to open files in fullscreen mode.
  - Added a zoom popover with various zoom commands and a zoom
    slider.
  - Added a color picker.
  - All dialogs: use the headerbar if supported by the desktop
    environment (if 'gtk-dialogs-use-header' is set).
  - App menu: added 'keyboard shortcuts'.
  - Tag filter: added ability to filter using a regular
    expression.
  - Sort catalogs by name, then by date.
  - Gif animations: allow to pause and view the next frame.
  - Added the control-o accelerator to open the location dialog.
  - Keep the zoom buttons on the headerbar if the tool allow to
    zoom the image.
  - Added a fullscreen button to the headerbar in viewer mode.
  - Find duplicates: speed optimizations.
  - New folder: open the folder after creating it.
  - Hide the image frame when in fullscreen mode.
  - Moved the photo importer preferences to the extension
    section.
  - Find duplicates: more responsive when the duplicate list is
    huge.
  - Added support for image/x-fuji-raf raw files (bgo#709385).
  - Fixed RTL icons and arrow rendering (bgo#747380).
  + Bugs fixed:
  - Ensure the settings have been saved before exiting.
  - Desktop background: always create a unique filename to force
    an update.
  - Desktop background: fixed error when setting an xcf image as
    background.
  - Resize: fixed wrong aspect ratio after opening.
  - Slideshow: start on the same monitor of the window.
  - Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  - Adjust contrast: better description of the stretch method
    (bgo#767615).
  - Removed deprecated gnome-common macros (bgo#768528).
  - Fixed scrollbars resetting their position when changing
    image.
  - Fixed theme errors with gtk+ 3.20.
  - Do not show rotation tools for animations.
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Disambiguate labels of various metadata "date" fields
    (bgo#728471).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#750142).
  - Various minor typos fixed (bgo#756486).
  + Updated translations.
- Drop gnome-common BuildRequires, we do not carry any patches.</changelog>
  <changelog author="meissner@suse.com" date="1500984000">- Forcefully enable PIE in the spec file, as the configure uses
  - fPIC, which disables are automatism.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 3.5.2:
  + New features and user visible changes:
  - Faster image loading.
  - Fixed big memory leak and other minor memory leaks.
  - Aspect ratio filtering.
  - Video player works on wayland as well.
  - Color profiles work on wayland as well (requires colord).
  - Show the color profile description in the property view.
  - Headerbar: show the tools menu button in viewer mode as well;
    added a button to go to the catalogs root; added a button to
    go to the home folder.
  - Scripts: allow to specify a generic accelerator.
  - Selections: save at exit and restore at start.
  - Video player: added a loop button.
  - Use Unicode in translatable strings (bgo#782038).
  + Bugs fixed:
  - Slideshow: no need to specify autoaudiosink as audio-sink. It
    is already the default audio sink (bgo#785612).
  - SEGFAULT when a svg image could not be loaded (bgo#784886).
  - Do not process bitmap thumbnails with invalid color settings
    (bgo#778556).
  - Fixed possible crash when switching from the image viewer to
    another viewer.
  + Updated translations.
- Add pkgconfig(colord) BuildRequires: New optional dependency.
- Drop obsolete clean section.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Add conditional export CFLAGS and CXXFLAGS == -std=gnu99 when
  building for Leap, needed with version 3.5.2.
- Add a export CXXFLAGS="-fPIE %optflags" to ensure that pie is
  enabled also for gcc-c++.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507118400">- Update to version 3.5.3:
  + New features and user visible changes:
  - Add app menu entries to the gear menu if the app menu is not
    supported by the desktop environment.
  - Updated appdata file.
  - Fixed help markup.
  + Updated manual translations.
  + Updated translations.
- Change devel's package group to Development/Libraries/GNOME:
  correction.
- Drop %desktop_database_*, %icon_theme_cache_* and
  %glib2_gsettings_schema_* post/postun/requires: functionality now
  covered by file triggers.
- Upstream's file rename of: gthumb.appdata.xml to
  org.gnome.gThumb.appdata.xml, gthumb.desktop to org.gnome.gThumb
  and gthumb-import to org.gnome.gThumb.Import.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509969600">- Update to version 3.5.4:
  + Bugs fixed:
  - No application icon on Wayland.
  - Tags dialog: improved usability. Do not select the entry
    content after opening the dialog; add a comma at the end of
    the tags entry to simplify the addition of a new tag; support
    keyboard navigation (bgo#777234).
  - Hi-DPI: "High" quality zoom is pixelated on hi-dpi monitors
    (bgo#779340).
  - Web services: fixed errors and removed features no longer
    supported by the APIs:
    . Facebook: fixed authorization process; removed photo
    importer.
    . PicasaWeb: removed album creation; remember application
    authorization (bgo#784142).
    . Photobucket: removed uploader.
  - Image viewer: use a white background for transparency
    (bgo#780207).
  - Fixed saving of uris in settings (bgo#783498).
  - Color manager: fixed crash when no device is found
    (bgo#789347).
  - Do not save selections. This broke workflows where selections
    were involved.
  - Removed obsolete file gthumb.convert (bgo#767034).
  + Updated manual translations.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/gthumb: current
  gThumb's web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop pkgconfig(sm) and its --with-smclient=xsmp configure
  parameter: not needed/used anymore since its parameter no longer
  exist.
- Drop bison, flex, pkgconfig(ice) and itstool BuildRequires: they
  are not needed/used anymore.
- Replace pkgconfig(libsoup-gnome-2.4) with pkgconfig(libsoup-2.4):
  libsoup is the required dependency and was already in use. They
  are different files but live in the same package-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1511265600">- Update to version 3.6.0:
  + Bugs fixed: Numeric keypad nav keys don't work (bgo#667390).
- Readd bison, flex and itstool BuildRequires since configures
  actually do check for them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521028800">- Update to version 3.6.1:
  + Bug fixed: Fixed crash when browsing folders with images and
    videos (bgo#760214).
  + Updated manual translations.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) BuildRequires to avoid implicit
  dependencies.
- Drop update-desktop-files BuildRequires and suse_update_desktop_\
  file macro: they are no longer required.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="6a87a9efbe6ecf518f8980d2148b417196daa6e8105d9d920b89526a643f18f7" name="gthumb" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp150.5.1"/>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.4.2:
  + User visible changes: Sort catalogs first by name then by date,
    instead of doing the opposite.
  + Bugs fixed:
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#759631).
  - Crash after changing and renaming file (bgo#750142).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.4.3:
  + Bugs fixed:
  - Theme errors with gtk+ 3.20.
  - Viewer sidebar too wide.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.4.4:
  + Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  + Hide the image frame when in fullscreen mode (bgo#767731).
  + Fixed headerbar buttons not shown correctly after activating a
    tool.
  + Orginaze files: fixed wrong catalog cardinality.
  + Fixed scrollbars resetting their position when changing image.
  + Find duplicates: faster.
  + New folder: open the created folder.
  + Print dialog: expand the options side to make the zoom slider
    visible.
  + Fixed wrong image loaded after deleting an image from a
    catalog.
  + Updated translations.
- Add gthumb-implicit-declarations.patch: Fix implcit declaration
  when building the image_viewer extension.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.4.4.1:
  + gthumb 3.4.4 fails post build check 64bit-portability-issue
    (bgo#772739).
- Drop gthumb-implicit-declarations.patch: Fixed upstream.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.5.1:
  + New features and user visible changes:
  - Added support for double click activation.
  - Added option to open files in fullscreen mode.
  - Added a zoom popover with various zoom commands and a zoom
    slider.
  - Added a color picker.
  - All dialogs: use the headerbar if supported by the desktop
    environment (if 'gtk-dialogs-use-header' is set).
  - App menu: added 'keyboard shortcuts'.
  - Tag filter: added ability to filter using a regular
    expression.
  - Sort catalogs by name, then by date.
  - Gif animations: allow to pause and view the next frame.
  - Added the control-o accelerator to open the location dialog.
  - Keep the zoom buttons on the headerbar if the tool allow to
    zoom the image.
  - Added a fullscreen button to the headerbar in viewer mode.
  - Find duplicates: speed optimizations.
  - New folder: open the folder after creating it.
  - Hide the image frame when in fullscreen mode.
  - Moved the photo importer preferences to the extension
    section.
  - Find duplicates: more responsive when the duplicate list is
    huge.
  - Added support for image/x-fuji-raf raw files (bgo#709385).
  - Fixed RTL icons and arrow rendering (bgo#747380).
  + Bugs fixed:
  - Ensure the settings have been saved before exiting.
  - Desktop background: always create a unique filename to force
    an update.
  - Desktop background: fixed error when setting an xcf image as
    background.
  - Resize: fixed wrong aspect ratio after opening.
  - Slideshow: start on the same monitor of the window.
  - Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  - Adjust contrast: better description of the stretch method
    (bgo#767615).
  - Removed deprecated gnome-common macros (bgo#768528).
  - Fixed scrollbars resetting their position when changing
    image.
  - Fixed theme errors with gtk+ 3.20.
  - Do not show rotation tools for animations.
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Disambiguate labels of various metadata "date" fields
    (bgo#728471).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#750142).
  - Various minor typos fixed (bgo#756486).
  + Updated translations.
- Drop gnome-common BuildRequires, we do not carry any patches.</changelog>
  <changelog author="meissner@suse.com" date="1500984000">- Forcefully enable PIE in the spec file, as the configure uses
  - fPIC, which disables are automatism.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 3.5.2:
  + New features and user visible changes:
  - Faster image loading.
  - Fixed big memory leak and other minor memory leaks.
  - Aspect ratio filtering.
  - Video player works on wayland as well.
  - Color profiles work on wayland as well (requires colord).
  - Show the color profile description in the property view.
  - Headerbar: show the tools menu button in viewer mode as well;
    added a button to go to the catalogs root; added a button to
    go to the home folder.
  - Scripts: allow to specify a generic accelerator.
  - Selections: save at exit and restore at start.
  - Video player: added a loop button.
  - Use Unicode in translatable strings (bgo#782038).
  + Bugs fixed:
  - Slideshow: no need to specify autoaudiosink as audio-sink. It
    is already the default audio sink (bgo#785612).
  - SEGFAULT when a svg image could not be loaded (bgo#784886).
  - Do not process bitmap thumbnails with invalid color settings
    (bgo#778556).
  - Fixed possible crash when switching from the image viewer to
    another viewer.
  + Updated translations.
- Add pkgconfig(colord) BuildRequires: New optional dependency.
- Drop obsolete clean section.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Add conditional export CFLAGS and CXXFLAGS == -std=gnu99 when
  building for Leap, needed with version 3.5.2.
- Add a export CXXFLAGS="-fPIE %optflags" to ensure that pie is
  enabled also for gcc-c++.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507118400">- Update to version 3.5.3:
  + New features and user visible changes:
  - Add app menu entries to the gear menu if the app menu is not
    supported by the desktop environment.
  - Updated appdata file.
  - Fixed help markup.
  + Updated manual translations.
  + Updated translations.
- Change devel's package group to Development/Libraries/GNOME:
  correction.
- Drop %desktop_database_*, %icon_theme_cache_* and
  %glib2_gsettings_schema_* post/postun/requires: functionality now
  covered by file triggers.
- Upstream's file rename of: gthumb.appdata.xml to
  org.gnome.gThumb.appdata.xml, gthumb.desktop to org.gnome.gThumb
  and gthumb-import to org.gnome.gThumb.Import.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509969600">- Update to version 3.5.4:
  + Bugs fixed:
  - No application icon on Wayland.
  - Tags dialog: improved usability. Do not select the entry
    content after opening the dialog; add a comma at the end of
    the tags entry to simplify the addition of a new tag; support
    keyboard navigation (bgo#777234).
  - Hi-DPI: "High" quality zoom is pixelated on hi-dpi monitors
    (bgo#779340).
  - Web services: fixed errors and removed features no longer
    supported by the APIs:
    . Facebook: fixed authorization process; removed photo
    importer.
    . PicasaWeb: removed album creation; remember application
    authorization (bgo#784142).
    . Photobucket: removed uploader.
  - Image viewer: use a white background for transparency
    (bgo#780207).
  - Fixed saving of uris in settings (bgo#783498).
  - Color manager: fixed crash when no device is found
    (bgo#789347).
  - Do not save selections. This broke workflows where selections
    were involved.
  - Removed obsolete file gthumb.convert (bgo#767034).
  + Updated manual translations.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/gthumb: current
  gThumb's web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop pkgconfig(sm) and its --with-smclient=xsmp configure
  parameter: not needed/used anymore since its parameter no longer
  exist.
- Drop bison, flex, pkgconfig(ice) and itstool BuildRequires: they
  are not needed/used anymore.
- Replace pkgconfig(libsoup-gnome-2.4) with pkgconfig(libsoup-2.4):
  libsoup is the required dependency and was already in use. They
  are different files but live in the same package-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1511265600">- Update to version 3.6.0:
  + Bugs fixed: Numeric keypad nav keys don't work (bgo#667390).
- Readd bison, flex and itstool BuildRequires since configures
  actually do check for them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521028800">- Update to version 3.6.1:
  + Bug fixed: Fixed crash when browsing folders with images and
    videos (bgo#760214).
  + Updated manual translations.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) BuildRequires to avoid implicit
  dependencies.
- Drop update-desktop-files BuildRequires and suse_update_desktop_\
  file macro: they are no longer required.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="e7c2e314423e682c69f470ca34dc5ce24e2f5e149628db1bcd7371e812f3fdfc" name="gthumb-devel" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="lp150.5.1"/>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.4.2:
  + User visible changes: Sort catalogs first by name then by date,
    instead of doing the opposite.
  + Bugs fixed:
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#759631).
  - Crash after changing and renaming file (bgo#750142).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.4.3:
  + Bugs fixed:
  - Theme errors with gtk+ 3.20.
  - Viewer sidebar too wide.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.4.4:
  + Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  + Hide the image frame when in fullscreen mode (bgo#767731).
  + Fixed headerbar buttons not shown correctly after activating a
    tool.
  + Orginaze files: fixed wrong catalog cardinality.
  + Fixed scrollbars resetting their position when changing image.
  + Find duplicates: faster.
  + New folder: open the created folder.
  + Print dialog: expand the options side to make the zoom slider
    visible.
  + Fixed wrong image loaded after deleting an image from a
    catalog.
  + Updated translations.
- Add gthumb-implicit-declarations.patch: Fix implcit declaration
  when building the image_viewer extension.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.4.4.1:
  + gthumb 3.4.4 fails post build check 64bit-portability-issue
    (bgo#772739).
- Drop gthumb-implicit-declarations.patch: Fixed upstream.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.5.1:
  + New features and user visible changes:
  - Added support for double click activation.
  - Added option to open files in fullscreen mode.
  - Added a zoom popover with various zoom commands and a zoom
    slider.
  - Added a color picker.
  - All dialogs: use the headerbar if supported by the desktop
    environment (if 'gtk-dialogs-use-header' is set).
  - App menu: added 'keyboard shortcuts'.
  - Tag filter: added ability to filter using a regular
    expression.
  - Sort catalogs by name, then by date.
  - Gif animations: allow to pause and view the next frame.
  - Added the control-o accelerator to open the location dialog.
  - Keep the zoom buttons on the headerbar if the tool allow to
    zoom the image.
  - Added a fullscreen button to the headerbar in viewer mode.
  - Find duplicates: speed optimizations.
  - New folder: open the folder after creating it.
  - Hide the image frame when in fullscreen mode.
  - Moved the photo importer preferences to the extension
    section.
  - Find duplicates: more responsive when the duplicate list is
    huge.
  - Added support for image/x-fuji-raf raw files (bgo#709385).
  - Fixed RTL icons and arrow rendering (bgo#747380).
  + Bugs fixed:
  - Ensure the settings have been saved before exiting.
  - Desktop background: always create a unique filename to force
    an update.
  - Desktop background: fixed error when setting an xcf image as
    background.
  - Resize: fixed wrong aspect ratio after opening.
  - Slideshow: start on the same monitor of the window.
  - Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  - Adjust contrast: better description of the stretch method
    (bgo#767615).
  - Removed deprecated gnome-common macros (bgo#768528).
  - Fixed scrollbars resetting their position when changing
    image.
  - Fixed theme errors with gtk+ 3.20.
  - Do not show rotation tools for animations.
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Disambiguate labels of various metadata "date" fields
    (bgo#728471).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#750142).
  - Various minor typos fixed (bgo#756486).
  + Updated translations.
- Drop gnome-common BuildRequires, we do not carry any patches.</changelog>
  <changelog author="meissner@suse.com" date="1500984000">- Forcefully enable PIE in the spec file, as the configure uses
  - fPIC, which disables are automatism.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 3.5.2:
  + New features and user visible changes:
  - Faster image loading.
  - Fixed big memory leak and other minor memory leaks.
  - Aspect ratio filtering.
  - Video player works on wayland as well.
  - Color profiles work on wayland as well (requires colord).
  - Show the color profile description in the property view.
  - Headerbar: show the tools menu button in viewer mode as well;
    added a button to go to the catalogs root; added a button to
    go to the home folder.
  - Scripts: allow to specify a generic accelerator.
  - Selections: save at exit and restore at start.
  - Video player: added a loop button.
  - Use Unicode in translatable strings (bgo#782038).
  + Bugs fixed:
  - Slideshow: no need to specify autoaudiosink as audio-sink. It
    is already the default audio sink (bgo#785612).
  - SEGFAULT when a svg image could not be loaded (bgo#784886).
  - Do not process bitmap thumbnails with invalid color settings
    (bgo#778556).
  - Fixed possible crash when switching from the image viewer to
    another viewer.
  + Updated translations.
- Add pkgconfig(colord) BuildRequires: New optional dependency.
- Drop obsolete clean section.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Add conditional export CFLAGS and CXXFLAGS == -std=gnu99 when
  building for Leap, needed with version 3.5.2.
- Add a export CXXFLAGS="-fPIE %optflags" to ensure that pie is
  enabled also for gcc-c++.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507118400">- Update to version 3.5.3:
  + New features and user visible changes:
  - Add app menu entries to the gear menu if the app menu is not
    supported by the desktop environment.
  - Updated appdata file.
  - Fixed help markup.
  + Updated manual translations.
  + Updated translations.
- Change devel's package group to Development/Libraries/GNOME:
  correction.
- Drop %desktop_database_*, %icon_theme_cache_* and
  %glib2_gsettings_schema_* post/postun/requires: functionality now
  covered by file triggers.
- Upstream's file rename of: gthumb.appdata.xml to
  org.gnome.gThumb.appdata.xml, gthumb.desktop to org.gnome.gThumb
  and gthumb-import to org.gnome.gThumb.Import.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509969600">- Update to version 3.5.4:
  + Bugs fixed:
  - No application icon on Wayland.
  - Tags dialog: improved usability. Do not select the entry
    content after opening the dialog; add a comma at the end of
    the tags entry to simplify the addition of a new tag; support
    keyboard navigation (bgo#777234).
  - Hi-DPI: "High" quality zoom is pixelated on hi-dpi monitors
    (bgo#779340).
  - Web services: fixed errors and removed features no longer
    supported by the APIs:
    . Facebook: fixed authorization process; removed photo
    importer.
    . PicasaWeb: removed album creation; remember application
    authorization (bgo#784142).
    . Photobucket: removed uploader.
  - Image viewer: use a white background for transparency
    (bgo#780207).
  - Fixed saving of uris in settings (bgo#783498).
  - Color manager: fixed crash when no device is found
    (bgo#789347).
  - Do not save selections. This broke workflows where selections
    were involved.
  - Removed obsolete file gthumb.convert (bgo#767034).
  + Updated manual translations.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/gthumb: current
  gThumb's web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop pkgconfig(sm) and its --with-smclient=xsmp configure
  parameter: not needed/used anymore since its parameter no longer
  exist.
- Drop bison, flex, pkgconfig(ice) and itstool BuildRequires: they
  are not needed/used anymore.
- Replace pkgconfig(libsoup-gnome-2.4) with pkgconfig(libsoup-2.4):
  libsoup is the required dependency and was already in use. They
  are different files but live in the same package-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1511265600">- Update to version 3.6.0:
  + Bugs fixed: Numeric keypad nav keys don't work (bgo#667390).
- Readd bison, flex and itstool BuildRequires since configures
  actually do check for them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521028800">- Update to version 3.6.1:
  + Bug fixed: Fixed crash when browsing folders with images and
    videos (bgo#760214).
  + Updated manual translations.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) BuildRequires to avoid implicit
  dependencies.
- Drop update-desktop-files BuildRequires and suse_update_desktop_\
  file macro: they are no longer required.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="c2787d96065f039b383a592e0eda8e479e571acd071aa3212a86bd155d1ceaf7" name="gthumb-lang" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="lp150.5.1"/>
  <changelog author="zaitor@opensuse.org" date="1423569600">- Update to version 3.3.3:
  + New features and user visible changes:
  - Allow to apply the embedded color profile for jpeg images.
  - New image tools: special effects; curves.
  - Unified 'equalize histogram' and 'adjust contrast': show a
    preview of the various contrast filters.
  - Grayscale tool: show a preview of the different filters.
  - Fixed the interface style when used with gtk+ 3.14
  - File propery view: use a switcher; added a details page that
    show all the metadata, show only the important exif fields in
    the properties page.
  - UI changes to the preferences dialog: use a sidebar instead
    of a notebook to avoid a large dialog with some translations;
    better spacing; removed the Ok button.
  - Video player: save the screenshot without showing the dialog.
  - Allow to set the screenshots location in the extension
    preferences dialog.
  - Show a message in the statusbar after saving.
  - Gear menu: use the new icon if using gtk+ 3.13 or newer.
  + Bugs fixed:
  - video player: do not hide the mediabar when using the volume
    control.
  - Forbidden when trying to upload to Flickr (bgo#732557).
  - Build against either webkit2gtk-3.0 or webkit2gtk-4.0.
  + Updated translations.
- Drop gthumb-webkit2gtk.patch,
  gthumb-new-icon-for-gear-menu.patch and
  gthumb-fix-forbidden-flicker-upload.patch, Fixed upstream.
- Following above change: remove gnome-common BuildRequires and
  call to gnome-autogen.sh, as we no longer carry any patches.
- Add pkgconfig(lcms2) BuildRequires: Build the new optional LCMS2
  support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1428235200">- Update to version 3.3.4:
  + New features and user visible changes:
  - Image viewer: added 'fit to height' button.
  - Drag&amp;Drop: move files by default.
  - Ask confirmation before moving files with a drag&amp;drop
    operation.
  - Make 'delete files' and 'trash files' asyncronous.
  - Use the default gtk+ style for message dialogs.  Use the
    header-bar for request dialogs.
  - Changed 'adjust contrast' shortcut to 'a'. 'h' is now used to
    fit to height.
  - Added a symbolic application icon.
  - Fixed comment pane style with gtk+ 3.16.
  - Show the app menu on the headerbar if the shell doesn't show
    it.
  - Preferences dialog: fixed extensions activation/deactivation.
  + Bugs fixed:
  - Webalbums: do not exit if a fatal error is issued
    (bgo#744530).
  - Build failure on x32 (kilobyte).
  - Image viewer: the overview quickly appears and disappears
    sometimes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1429099200">- Update to version 3.4.0:
  + Media player: smoother volume change.
  + History: do not remove other occurrences of the current
    location.
  + Don't merge translations into gschema file.
  + Facebook: fixed the authorization process.
  + Contact sheet: fixed header color not set when creating a new
    theme.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1439553600">- Fix build on Leap: webkit2gtk-4.0 already exists there. This
  change breaks building on pure SLE12.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443009600">- Update to version 3.4.1:
  + Fixed build on Fedora 23 (bgo#747982).
  + Allow cross-compiling (bgo#755390).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458043200">- Update to version 3.4.2:
  + User visible changes: Sort catalogs first by name then by date,
    instead of doing the opposite.
  + Bugs fixed:
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#759631).
  - Crash after changing and renaming file (bgo#750142).
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 3.4.3:
  + Bugs fixed:
  - Theme errors with gtk+ 3.20.
  - Viewer sidebar too wide.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476100800">- Update to version 3.4.4:
  + Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  + Hide the image frame when in fullscreen mode (bgo#767731).
  + Fixed headerbar buttons not shown correctly after activating a
    tool.
  + Orginaze files: fixed wrong catalog cardinality.
  + Fixed scrollbars resetting their position when changing image.
  + Find duplicates: faster.
  + New folder: open the created folder.
  + Print dialog: expand the options side to make the zoom slider
    visible.
  + Fixed wrong image loaded after deleting an image from a
    catalog.
  + Updated translations.
- Add gthumb-implicit-declarations.patch: Fix implcit declaration
  when building the image_viewer extension.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.4.4.1:
  + gthumb 3.4.4 fails post build check 64bit-portability-issue
    (bgo#772739).
- Drop gthumb-implicit-declarations.patch: Fixed upstream.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Update to version 3.5.1:
  + New features and user visible changes:
  - Added support for double click activation.
  - Added option to open files in fullscreen mode.
  - Added a zoom popover with various zoom commands and a zoom
    slider.
  - Added a color picker.
  - All dialogs: use the headerbar if supported by the desktop
    environment (if 'gtk-dialogs-use-header' is set).
  - App menu: added 'keyboard shortcuts'.
  - Tag filter: added ability to filter using a regular
    expression.
  - Sort catalogs by name, then by date.
  - Gif animations: allow to pause and view the next frame.
  - Added the control-o accelerator to open the location dialog.
  - Keep the zoom buttons on the headerbar if the tool allow to
    zoom the image.
  - Added a fullscreen button to the headerbar in viewer mode.
  - Find duplicates: speed optimizations.
  - New folder: open the folder after creating it.
  - Hide the image frame when in fullscreen mode.
  - Moved the photo importer preferences to the extension
    section.
  - Find duplicates: more responsive when the duplicate list is
    huge.
  - Added support for image/x-fuji-raf raw files (bgo#709385).
  - Fixed RTL icons and arrow rendering (bgo#747380).
  + Bugs fixed:
  - Ensure the settings have been saved before exiting.
  - Desktop background: always create a unique filename to force
    an update.
  - Desktop background: fixed error when setting an xcf image as
    background.
  - Resize: fixed wrong aspect ratio after opening.
  - Slideshow: start on the same monitor of the window.
  - Sizing issues in gthumb preferences under gtk+ git master
    (bgo#770546).
  - Adjust contrast: better description of the stretch method
    (bgo#767615).
  - Removed deprecated gnome-common macros (bgo#768528).
  - Fixed scrollbars resetting their position when changing
    image.
  - Fixed theme errors with gtk+ 3.20.
  - Do not show rotation tools for animations.
  - Crash after pressing shift-arrow (bgo#760050).
  - Stopping slideshow freezes entire program (bgo#759787).
  - Disambiguate labels of various metadata "date" fields
    (bgo#728471).
  - Crash if trying to delete image on sftp mounted (bgo#759727).
  - Crash when deleting duplicate (bgo#750142).
  - Various minor typos fixed (bgo#756486).
  + Updated translations.
- Drop gnome-common BuildRequires, we do not carry any patches.</changelog>
  <changelog author="meissner@suse.com" date="1500984000">- Forcefully enable PIE in the spec file, as the configure uses
  - fPIC, which disables are automatism.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502798400">- Update to version 3.5.2:
  + New features and user visible changes:
  - Faster image loading.
  - Fixed big memory leak and other minor memory leaks.
  - Aspect ratio filtering.
  - Video player works on wayland as well.
  - Color profiles work on wayland as well (requires colord).
  - Show the color profile description in the property view.
  - Headerbar: show the tools menu button in viewer mode as well;
    added a button to go to the catalogs root; added a button to
    go to the home folder.
  - Scripts: allow to specify a generic accelerator.
  - Selections: save at exit and restore at start.
  - Video player: added a loop button.
  - Use Unicode in translatable strings (bgo#782038).
  + Bugs fixed:
  - Slideshow: no need to specify autoaudiosink as audio-sink. It
    is already the default audio sink (bgo#785612).
  - SEGFAULT when a svg image could not be loaded (bgo#784886).
  - Do not process bitmap thumbnails with invalid color settings
    (bgo#778556).
  - Fixed possible crash when switching from the image viewer to
    another viewer.
  + Updated translations.
- Add pkgconfig(colord) BuildRequires: New optional dependency.
- Drop obsolete clean section.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Add conditional export CFLAGS and CXXFLAGS == -std=gnu99 when
  building for Leap, needed with version 3.5.2.
- Add a export CXXFLAGS="-fPIE %optflags" to ensure that pie is
  enabled also for gcc-c++.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507118400">- Update to version 3.5.3:
  + New features and user visible changes:
  - Add app menu entries to the gear menu if the app menu is not
    supported by the desktop environment.
  - Updated appdata file.
  - Fixed help markup.
  + Updated manual translations.
  + Updated translations.
- Change devel's package group to Development/Libraries/GNOME:
  correction.
- Drop %desktop_database_*, %icon_theme_cache_* and
  %glib2_gsettings_schema_* post/postun/requires: functionality now
  covered by file triggers.
- Upstream's file rename of: gthumb.appdata.xml to
  org.gnome.gThumb.appdata.xml, gthumb.desktop to org.gnome.gThumb
  and gthumb-import to org.gnome.gThumb.Import.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1509969600">- Update to version 3.5.4:
  + Bugs fixed:
  - No application icon on Wayland.
  - Tags dialog: improved usability. Do not select the entry
    content after opening the dialog; add a comma at the end of
    the tags entry to simplify the addition of a new tag; support
    keyboard navigation (bgo#777234).
  - Hi-DPI: "High" quality zoom is pixelated on hi-dpi monitors
    (bgo#779340).
  - Web services: fixed errors and removed features no longer
    supported by the APIs:
    . Facebook: fixed authorization process; removed photo
    importer.
    . PicasaWeb: removed album creation; remember application
    authorization (bgo#784142).
    . Photobucket: removed uploader.
  - Image viewer: use a white background for transparency
    (bgo#780207).
  - Fixed saving of uris in settings (bgo#783498).
  - Color manager: fixed crash when no device is found
    (bgo#789347).
  - Do not save selections. This broke workflows where selections
    were involved.
  - Removed obsolete file gthumb.convert (bgo#767034).
  + Updated manual translations.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/gthumb: current
  gThumb's web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop pkgconfig(sm) and its --with-smclient=xsmp configure
  parameter: not needed/used anymore since its parameter no longer
  exist.
- Drop bison, flex, pkgconfig(ice) and itstool BuildRequires: they
  are not needed/used anymore.
- Replace pkgconfig(libsoup-gnome-2.4) with pkgconfig(libsoup-2.4):
  libsoup is the required dependency and was already in use. They
  are different files but live in the same package-devel.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1511265600">- Update to version 3.6.0:
  + Bugs fixed: Numeric keypad nav keys don't work (bgo#667390).
- Readd bison, flex and itstool BuildRequires since configures
  actually do check for them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521028800">- Update to version 3.6.1:
  + Bug fixed: Fixed crash when browsing folders with images and
    videos (bgo#760214).
  + Updated manual translations.
  + Updated translations.
- Add pkgconfig(json-glib-1.0) BuildRequires to avoid implicit
  dependencies.
- Drop update-desktop-files BuildRequires and suse_update_desktop_\
  file macro: they are no longer required.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1546430400">- Add fix_double_free_dlg-contact-sheet_c.patch:
  fix for bsc#1113749 / CVE-2018-18718</changelog>
</package>
<package pkgid="a00bca1c7cda366cdb5f6425222880b17bbcb95b9b0171728a84b7ca01cde9e5" name="gtk2-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="dd4190c2bfcb1a28568f994c66648f98acd93c9137f48a428d8312c4d5ac2b28" name="gtk2-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.7" rel="lp150.2.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix scrollbars in LibreOffice (kde#389709, boo#1116859)
  * [kconf_update] Add "gtk-primary-button-warps-slider=0" to generated GTK3 config (kde#379773)
- Remove patches, now upstream:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1542801600">- Add patch to fix GTK treeviews:
  * 0001-GTK-theme-treeview-style-typo-bug-fix.patch</changelog>
</package>
<package pkgid="3c4712f7e1c2f428ab5dcbddd7c9c7c52c36e1271e6cd4ece7d54aa90a155bd8" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="06fa870ad1abd591725f1f0dbd3fa0fa33e9896012717eb30e26ffb2ad009286" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="c97f95aaefb48b348eedb29ff4a547cb2369417574bbcd77644c23f4b8efcbb9" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="c663614e30dc8c3b2ac1ade74ae8bef69f68352bda2d3240d9faf78cc36a06fb" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="8c36359b6634f7f3f2ec03de13c808d54e46245bc979e90d82a039ef443b7da6" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="3f4cc1d177f0fdbecf8f135739172d2dbbfd503bb6e6711c9531e3d533dc746e" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="cc3c05796c4cc1c067d49af92d77868fc8540139b6808b001a033a3750a1b0a5" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="cd36a0ea7fc6df7b8f7f60704677de0229e5e43effe720a60af68c023ef4c99e" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="cd64554353b5ae4b00cdaee788cd3f7b6d1cfcd8154bde9086507d615cc8d8f3" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="cf48262b30f0e65362b81515694c54627bde7ea804f6161da2cbd643c75fb659" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="1e5861baf582141db7d425b3eefda77ff58e8d296ee18b6a9fe935e0a19ef506" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="2b1fae062dc13ea6c84739ec4862383ac676056669f27ca881db6b98adb8b02c" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="4a54f5fb8942aaf85000bbce613cf24ecb9f1f1c75ea93a8433bbcede9dcfaa1" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="82f6cc26c9ad1db9216589bcdc07c95e5f8fc92ae05f1b8d23660367782e676c" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="6432ac00479b399d94b034d15681a9c4b6bd1890e0a89aaedaa3dcd194c0b4ac" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="bf533459cf1ec487377a5c31b4484521afaeff3dea21507abf66fce792cfd07e" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="dcbd8bb923d4822d56cb07275d7034a9e9e04b8030d51bde6df22d565f256f0b" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="08dc01a14fc2cf36277beee9219c7de7769c8fc3994838ff72d0d92f8962ec55" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ccc6df73256ef2d3459a07a3f178d39c2593503c9cb65c1ff3e51114c44353b2" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="1215eefac2c100eae574a2bd684d1ab197e93c94b72d904bb6617683d043750b" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="f0d107a3c321b5d8d7cb17368ddb2bde25584e613e77190e7d14543bf260210c" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9493eaeb9eb1685b0031a3b2b3f0bb6778dc8bcbd0ffb392055a046bd7e97268" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="52eeaf65d366e10f705648a91f4c9602951ede06385998b0e445f521ed18abb8" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="89f4f09f2ae175221cbbe8289c0e1e606ae80b283e9750ae3e62ee0f2f8501c9" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="e91f706b2d496123cfbc1963c1afd46d6b0b3b8622facb9ad839944965daae62" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="b2a25e93d543b3f5c725eedbfbd5755fcef01c34539d333ccef5ab09b2b9aec8" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="09a0a25160926cfd883c895163015b4be37f02ce6f35dbb425ebac41928e1b78" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="4f32eb468ce2e3e02a4ac5c6c2dd0879bb6c70900b58f305a30f7ead26fee92e" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="9a331a25c26f910722780dafa3eb5343808255c6e860e60ce8996e322c38f4db" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="6e0ce32cb36331979d1f743ecef83e6c3786027d8473aec2bd40893ac1806e63" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="3a7bfc66e5c4b2c12695865649fae27c080d0eb8ba43d468fb4f57e2b64c8e30" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="d8c1eb01c32d6731e9fce55fc3ce2d1cd5897635150b560f339d2ed8f7804a98" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="fde44f4c6acc99c99080f3b76ce2ad48c98aa77bd26d35c986ee93b5190fd8d3" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="15959f476af2c49931f8ed6db36cb015b279b90c4c5e95dede44eca52a239a58" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="733ed326f779d44d9674667dfd7d858171c227e3c8f56a6b50a8b30469df75e3" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="e7b841f6368a83087689bb929ad9a3aea8ca0fc2aae191661cf4c0043067a3bd" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="6d81988236e8378e527836b8f21cafb08a10bd2d676fc91de1f66e014a35392d" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="d8b6202a70c10aca2121f25c17716fee3d3d5c049c9d614bc70d731fac9f33a2" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="3d4de2b343090f5445a07abcfa6c098a4f1662c003ff161426f524a0efbd6364" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="8ea4aa92de73e11e24718c689fe9bbd6db13c38ebd46219a93ff968fb9117837" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="73348954232c4fbe43b8aa63a6dcb13d5399705e4ef81f3f7ecb303a79697dad" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="e697d88628b3b2e4ffca862b7cb37e0992ce5a33a38121f8be09b73d8c084a46" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="9d8cd7155b4bfb7dd2e07226f8cc2c1825b561d6250089bc5d12ded7e871cf9a" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="a195fd417fd2cb9ecd102e466152c74fb34de78e2461132c9d92a25cf61b8c45" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="3e4405128f17f81377df701af17ca02ef1de40a2befd89be41ba2380020654a4" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="0eb5ae211306b4dd16fcae5ebca954c10a479a2effcf5e903a79df2183f13896" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ede7e98f9032b7ac0a6b81712906bbd57a4c4eaa007e1b492003221eb728508e" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="562a5d8c216fd2ffc60354baf6a549b53fe76c01e3cabce753178578883cfc0f" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="827964a4328a27b4e87736e88d04e3d52ba82238d74b7a44a66016fbd4d0a0ac" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="c5497a4730a2943e67315c09f24899161e6b2b5556bd2f3ffecc5e1b8c7cf47e" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="95b7fd82f8f0ab898c14a70c2451d2d3de34e56aabcd17b648f13f89aafcbfa6" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="ad337a37ae9f3fcf70240db20cda914d9f05d9d3a93f7276f0614e46bf3b7f88" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="98ebbdf1ce9f746627df2baa4331cbf38dc56620b09558ba8d4de8fbf9fb5f02" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="ee9b60056aebdf21b820c4a2b661a35c0a38fefb8bad1a90b313e38e35995e74" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="6e5f3a0047311974e8917feee4b521974bc372006bf163da9457faaa51762238" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="975e37abc7c250ba01ed6c75dfefe296c8d7f510913bcb001a4fd03506c6dcbe" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="17b75c32a3073cd19f511b1d6613ffefe377d8e7bb483fe24e237a0881529b32" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="b9f386b347b50a5a37d903b1538db4d5aedf8a138610adaed6c1a8167f2c5c77" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="300d82314e07f5fd47a0a93f9bf7c42f5405c32f7e00d6bc0123b4ab2ae8325e" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="3f4d2fe004cbc659fcb779c2ecd52e4ff291dd26b853b796c747299c502f4205" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="342298b1e846035f60603a4343f9534018fa7f205ded5229357d25704036d7dc" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="66425cfc1b192d7916b09c0d6115ba2a82b117e54010a47732d5c927b8c66df2" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="9ca03cf58b74b37f656c0ee87cace89f4ef2c671c30059c027323d57fb343ce0" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="0a8567b0dd370f8ab718b84428e4051d0d3e2714814fcd1060fa8a035cba5157" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="7d15bcfcf387bdc117b44aa7d8f91f317a4408eeadb8da3bfcd86f4bc0544682" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="7810cc1f3e5dcf5ec90251913dd71b6ae58f271d9778966e865d91e6c0697bf7" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="3238762f4586b4f6c45140edab2737eb801fa3f07bef7bb323d5fe320e50d307" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="71854c9e5e170cc6c8db80173ec00c31b5a05a37c7c81bd17a00fb8061d93025" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="cf0cd68009de320cf5aeb02cdad9cd97c2668eaa31b82a2f59e772069ea53329" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="613c4042452331b613e87a8fd67aec2bde46799aa70c77684f5625cd3e91da33" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="97c6913a868c75cb633631d272ba09f097ca6f8237475e15d06ea8beba7a4d10" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="3a45e25976ceaa0950346401902638fbcb2cf9f11e574a76f67cca7fc7ceb6ff" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="9c8ed8fc4894830fe01261c4d5f85e5f1e5e9c1281135818a0a57f6734358c37" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="4ebbba5c944ffd43d172dc126675df3bad4c5f4f3511b5c85c6327b9908f72e9" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="d9b8afd99c2aab99766472623e5a0942b101862d0adf9e3a506663ff0cac00b8" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="18cd164c620292c237483e606c64fd8e89aa56afcea7307533163c061a45e6a0" name="gtk3-immodules-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="816c2524862d55ea2d27afd70870b34897d946db05d4b2110f64ca04079ce6b7" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="a017ed2b8427c571e09b2f0ca086643a80dcf3f7588889653dc9a616a6fe66f2" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="956fde886c5a09e1e28d166273c278648c88c3a08daa07ac8bf3662d9206a49a" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="f61345965542e53df4a8ab23d5d67620394bb39f7401003a5c60f019d59936aa" name="gtk3-immodules-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="06fb6a664106006a6772c3dd7f7e7cfe25a3eb5237c0470f2a98f5e78a6d2d98" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="8abe963ad31b1bf01afe9bd5941375ded0564cf8d4727831e63a2cde8db78d6a" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="88a58d9d6ec9bb5839a0d0636aa7df456b500d5ab2a37a06fef85fc42dd14e06" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="8cba513df1fc4b411904b218f485f64e024a867c58461d3c87f6c4cc315cd3b1" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="e3f3cd98c3f3786076757c19f432752e2d76b6c73e544bd37f00550fa887fb8f" name="gtk3-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="28eb6fc96005f965c401270038e22364d802e7b3185413b12acb0c6a89cab845" name="gtk3-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.7" rel="lp150.2.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1537876800">- Update to 5.12.7
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.7.php
- Changes since 5.12.6:
  * Fix scrollbars in LibreOffice (kde#389709, boo#1116859)
  * [kconf_update] Add "gtk-primary-button-warps-slider=0" to generated GTK3 config (kde#379773)
- Remove patches, now upstream:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1542801600">- Add patch to fix GTK treeviews:
  * 0001-GTK-theme-treeview-style-typo-bug-fix.patch</changelog>
</package>
<package pkgid="fd63b31b91b1eb83b752e472125be6bcbfac23da0ad91f89e8e8a4b9b121c7ee" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="9dfce12ec8b44ebbbfd108dba16e588de40891e8b1e197c9dc7826d8888b3624" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="ed7ddc358804fb109bdd391261b8382628fc8478dabed47acdcf980a71b27920" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="716eeefd9bcb3b5582267435eadbf68c59a9c3c71afe4f980107c7f53b3de2a3" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="af7b3817e0ed53e576f105ed299352c0af84932977b79c5f18973178478fac33" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="51ff73ac593cd5a1e6b868310462a2789128c8ef4e1cdbc679ea32ea36026ce2" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="74d267d0d5818fcf299f01e3ccad5b9efd78414f0aff0bee5d41d46d6a1d47a3" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="33c7c6f6618124888b6438c2db545ccf380518c274f928b9c58ce16fd853d9b9" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="387802926960448b87be2f63e88f2ed6be60c8f4f63bc2e10abbefb61fad42be" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.10.1"/>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
</package>
<package pkgid="dbde4b5294089df5cbb2589cf73571c9e17cfc1c810e13c3ad5e80833b8a9fa6" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.13.1"/>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
  <changelog author="mgorse@suse.com" date="1557403200">- Add gtk3-x11-set-transparent-background.patch: Set a transparent
  background for windows on X11 (boo#1134062 glgo#GNOME/gtk#550).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1557835200">- Add gtk-use-multiple-font-family-values.patch:
  + css: Use multiple font-family values
  + Add a reftest for multiple font families
    (bsc#1134059, glgo#GNOME/gtk#1854).</changelog>
  <changelog author="mgorse@suse.com" date="1559131200">- Add gtk3-none-pixmap-for-no-background.patch: always set None
  pixmap for no background on X11 (boo#1136605).
- Add patches from upstream to fix fall-out from the above patch
  (glgo#GNOME/gtk#1280):
  gtk3-add-gdk_x11_display_get_parent_relative_pattern.patch
  gtk3-x11-be-more-careful-about-setting-parent-relati.patch
  gtk3-x11-fix-deprecation-macro-use.patch</changelog>
</package>
<package pkgid="7864b3d12216868e776e1c6ca3888514e3f101a39b7692cffb3996dffb0d9230" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1507032000">- Update to version 3.22.22:
  + Bugs fixed: bgo#639931, bgo#644248, bgo#775126, bgo#780758,
    bgo#781757, bgo#787021, bgo#787302, bgo#787303, bgo#787444,
    bgo#787531, bgo#787600, bgo#787757.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.22.23:
  + Bugs fixed: bgo#783669, bgo#784562.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118401">- Update to version 3.22.24:
  + Combobox: Don't try to remove grabs on NULL devices.
  + Fix some issues with the new resizable tiling.</changelog>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
</package>
<package pkgid="c94e57b481461851c6f693b27c6a9dceab18f06fe71e172cea6a011763e5eebb" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="lp150.3.6.1"/>
  <changelog author="yfjiang@suse.com" date="1507723200">- Add gtk3-restore-filechooser-click-behavior.patch: The
  clicking behavior introduced by commit#fb0a13b has confused many
  users in the past 2 years. By reverting the commit, the patch
  makes the primary button clicking behave as consistent as most
  users has been used to (bgo#758065 bsc#1057471).</changelog>
  <changelog author="badshah400@gmail.com" date="1509451200">- Update to version 3.22.25:
  + The HighContrast theme has received numerous improvements.
  + Middle-click on scrollbars jumps to the position again.
  + Wayland:
  - Terminal sizing problems are fixed.
  - The Wayland backend now implemented the KDE server-side
    decorations protocol.
  + X11: Problems with menus on several X servers are fixed.
  + Bugs fixed: bgo#701296, bgo#728452, bgo#738387, bgo#763517,
    bgo#769877, bgo#769879, bgo#771279, bgo#775217, bgo#776793,
    bgo#777072, bgo#778811, bgo#778930, bgo#780101, bgo#781909,
    bgo#782396, bgo#783995, bgo#784314, bgo#784509, bgo#786220,
    bgo#786794, bgo#787274, bgo#787669, bgo#787866, bgo#788053,
    bgo#788458, bgo#788496, bgo#788505, bgo#788516, bgo#788573,
    bgo#788574, bgo#788575, bgo#788577, bgo#788580, bgo#788614,
    bgo#788841, bgo#788905, bgo#789141, bgo#789149, bgo#789327,
    bgo#789357.
  + Updated translations.
- Drop gtk3-silence-log-spew-blank-cursors.patch: Fixed upstream.
- Add gtk3-wayland-distribute-server-decoration-xml.patch: Builds
  that include wayland fail unless
  gtk/wayland/protocol/server-decoration.xml is included in
  tarballs (bgo#789630). Patch touches Makefile.am, uncomment
  BuildRequires: gnome-common and ./autogen.sh before configure.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1510920000">- Add gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  Present FUSE reachable network shares in gtkplacesview (bgo#787128,
  bsc#1062879)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511006400">- Update to version 3.22.26:
  + Bugs fixed: bgo#785176, bgo#787142, bgo#788898, bgo#789134,
    bgo#789213, bgo#789630, bgo#789678, bgo#789733.
  + Updated translations.
- Drop gtk3-wayland-distribute-server-decoration-xml.patch: fixed
  upstream.
- Comment gnome-common Buildrequires and call to autogen.sh again:
  no currently applied patch changes the build system.</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Sync summaries with gtk4.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518609600">- Update to version 3.22.27:
  + Require libcloudproviders 0.2.5.
  + The Emoji chooser can now be used with GtkTextView as well.
  + The Emoji chooser avoids fallback sequences that break the
    grid.
  + GTK+ is now using ~/.config/gtk-3.0/settings.ini when using
    Wayland without dconf.
  + Make fuse-mounted network filesystems show up in Other
    Locations.
  + The font chooser dialog supports search now.
  + Bugs fixed: bgo#737175, bgo#741633, bgo#771986, bgo#774248,
    bgo#779009, bgo#786123, bgo#786509, bgo#786528, bgo#787089,
    bgo#787128, bgo#789054, bgo#789160, bgo#789268, bgo#790029,
    bgo#790031, bgo#790033, bgo#790201, bgo#790270, bgo#790862,
    bgo#790963, bgo#791039, bgo#791062, bgo#791234, bgo#791281,
    bgo#791363, bgo#791549, bgo#791650, bgo#791710, bgo#791943,
    bgo#792279, bgo#792459, bgo#792624.
  + Updated translations.
- Drop
  gtk3-placesview-Present-FUSE-reachable-network-shares-in-.patch:
  fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Update to version 3.22.28:
  + Improve frame clock accuracy (bgo#787665).
  + Bugs fixed: bgo#793442.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646400">- Drop gtk3-path-local.patch: patch had been disabled since GTK
  August 2016 with nobody missing the feature.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519646401">- Package COPYING as %license instead of %doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Update to version 3.22.29:
  + Wayland: add an input method based on the text protocol.
  + File chooser: Stop activating without double-click.
  + Bugs fixed: bgo#710888, bgo#743975, bgo#775546, bgo#794008.
  + Updated translations.
- Drop gtk3-restore-filechooser-click-behavior.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521720000">- Drop icon_theme_cache_* and glib2_gsettings_schema_* post/postun
  scriptlets, and glib2_gsettings_schema_requires macro: their
  functionality has been moved to RPM file triggers
  (RPM 4.13, suse_version 1330).
- Add cairo-gobject, gio-2.0, gio-unix-2.0 and harfbuzz pkgconfig
  modules BuildRequires to avoid implicit dependencies.</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524052800">- Update to version 3.22.30:
  + gtk-demo has a new 'Widgetbowl' demo.
  + The wayland backend now supports the stable xdg-shell protocol.
  + Bugs fixed: glgo#GNOME/GTK#28, glgo#GNOME/GTK#83,
    glgo#GNOME/GTK#88, glgo#GNOME/GTK#114, glgo#GNOME/GTK#129,
    glgo#GNOME/GTK#132, glgo#GNOME/GTK#141, glgo#GNOME/GTK#146,
    glgo#GNOME/GTK#156, glgo#GNOME/GTK#157, glgo#GNOME/GTK#163,
    bgo#705509, bgo#745128, bgo#748784, bgo#791939, bgo#792632,
    bgo#793062.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524571200">- Mark /etc/gtk-3.0/settings.ini as config(noreplace): admins that
  update this file most likely want to keep their changes
  (boo#1087507) - and the distro does not have very frequent
  changes in this file.</changelog>
  <changelog author="qkzhu@suse.com" date="1532520000">- Add gtk3-fix-wayland-csd-announce.patch: This fixes libreoffice
  under kwin, which would remove it's own headers as per the
  manager's request but not inform kwin leaving it in the even
  more broken state of having none. (boo#1099991)</changelog>
  <changelog author="mgorse@suse.com" date="1542024000">- Add gtk3-atk-table-cell.patch: add support for AtkTableCell
  (bsc#1119306 fate#326548 glgo#GNOME/gtk!411).</changelog>
  <changelog author="mgorse@suse.com" date="1547035200">- Update gtk3-atk-table-cell.patch to include the new good
  accessibility-dump test output (bsc#1119306).</changelog>
  <changelog author="Andrei Dziahel &lt;develop7@develop7.info&gt;" date="1547294400">- Update gtk3-atk-table-cell.patch to export
  gtk_cell_accessible_parent_get_(row|column)_header_cells
  functions (boo#1121456 glgo#GNOME/gtk!505)</changelog>
</package>
<package pkgid="a24afe724858068b1c43983087fa0799182de31a3bb6a0fa274575798e02a994" name="guake" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="lp150.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
</package>
<package pkgid="1eeb1ce0fdedcbab169bc08ffb3af6ff338e9e89f6067fa1d3a874bc54cdd872" name="guestfs-data" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp150.3.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="3ff1bbc3af8c3b147accbeac4566ac6e780f757ad6020ba58497bc81076ae7b3" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp150.3.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="298e264ab1cbac9b437a22037ed942459738e01842f1e75a6fc92d5ad88ac7a9" name="guestfsd" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="lp150.3.3.1"/>
  <changelog author="ohering@suse.de" date="1496145600">- Update to version 1.36.4
  ... to fix build with gperf 3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1496318400">- Fix v2v conversion of SLES 11 SP4 with kdump enabled
  bsc#1038397</changelog>
  <changelog author="dmueller@suse.com" date="1500206400">- update to version 1.36.5:
  * btrfs_replace: fix position of subcommand options
  * lib: Move close_file_descriptors into guestfs-internal.h.
  * daemon: lvm: Pass --yes option to force pvresize (RHBZ#1460577).
  * lib: direct, uml: Unblock SIGTERM in the hypervisor and recovery processes (RHBZ#1460338).
  * lib: create: Allow any [[:alnum:]]+ string as a backingfmt parameter (RHBZ#1459979).
  * mllib: Handle empty files correctly in read_first_line_from_file.
  * resize: make sure the input disk is read-only
  * v2v: tell v2v the real root device to mkinitrd
  * mllib: Export which in "stdlib mode".
  * mllib: Export prog, quiet, trace, verbose in "stdlib mode".
  * btrfs_replace: fix position of subcommand options
- add download location for source verification purposes</changelog>
  <changelog author="dmueller@suse.com" date="1500292800">- add dependency on augeas (bsc#1048620)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1500379200">- Add missing dependency on guestfs-data (bsc#1048848)
- Add conflict with old virt-v2v (bsc#1050069)
- Fix python binding package
  * Replace python-libguestfs by python[23]-libguestfs packages
  * Add egg-info to python[23]-libguestfs package</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Fix python binding for python3
  add patches:
  * 9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
  * f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Better fix for SUSE distro detection using ID_LIKE as fallback:
  * use-idlike.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504526400">- Tweak configuration before building for python3 or PyString_*
  symbols will still be missing</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505908800">- Add windows support files to the appliance for SLES (fate#316274)
- Merge SLES and openSUSE spec files.</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update summaries and RPM groups. Trim description for size.
- Replace old $RPM_ shell vars by macros.
  Remove redundant %clean section.</changelog>
  <changelog author="sbrabec@suse.com" date="1507809600">- Use "OCaml" in RPM group exactly as all other packages do.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1508932800">- Move guestfs-data to libguestfs0. bsc#1064399
- Force distro detection
  Removed:
  * use-idlike.patch
  Added:
  * 531316cc-build-improve-and-simplify-distro-detection.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1511352000">- Add db48-utils dependency: needed to inspect the installed
  packages.
- Remove useless patch: 0000-hotfix.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512388800">- evtxdump is in python3-evtx, drop python2 dependency
  (fate#323526)
- add hwinfo to the appliance packages for ntfs support.
  (bsc#1070976)
- Don't run fdupes as it symlinks some of the python3 binding
  files to their python2 equivalent</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- update to version 1.38.0:
  * Virt-builder-repository is a new tool allowing end users to
    create and update virt-builder repositories. (fate#318952)
  * Virt-rescue has been substantially rewritten, implementing job
    control, -m and -i options, escape keys, etc.
  * Virt-builder planner has been improved so that faster and more
    efficient build plans are chosen for complex cases, especially when
    either the tmpdir or output is on networked storage.
  * Virt-customize now sets a random /etc/machine-id for Linux guests, if
    one is not already set.
  * Virt-df now works correctly on filesystems with block sizes smaller
    than 1K.
  * Virt-dib has further compatibility enhancements with diskimage-builder.
  * Virt-sysprep removes "DHCP_HOSTNAME" from ifcfg-* files.
  * Virt-resize now correctly copies GPT partition attributes from the
    source to the destination. (bsc#1074585)
  * Bash tab completion implemented or enhanced for: virt-win-reg,
    virt-v2v-copy-to-local.
  * Both virt-v2v and virt-p2v are now able to pass through the source CPU
    vendor, model and topology.
  * Virt-v2v now supports encrypted guests.
  * Virt-v2v now detects the special Linux Xen PV-only kernels correctly
  * Virt-v2v -o glance now generates the right properties for UEFI guests
  * Virt-v2v -o null now avoids spooling the guest to a temporary file,
    instead it writes to the qemu "null block device".  This makes it
    faster and use almost no disk space.
  * Virt-v2v -i libvirtxml can now open network disks over http or https.
  * Virt-v2v will now give a warning about host passthrough devices
  * Inspection support was rewritten in OCaml and included inside the
    daemon.  This makes inspection considerably faster, more robust and
    more easily extensible in future.
  * The libguestfs API is now thread-safe (although not parallel).  You can
    call APIs on the same handle from multiple threads without needing to
    take a lock.
- Removed patches:
    531316cc-build-improve-and-simplify-distro-detection.patch
    9d25b4e5-python-add-simple-wrappers-for-PyObject-string-funct.patch
    f3f99a09-python-use-right-func-when-PyString_FromStringAndSiz.patch
- Added patches:
    d0e5a819-python-Fix-missing-additional-backslashes.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1519387200">- Remove dependency on wodim for openSUSE:Factory and use cdrtools
  (bnc#1081739)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1519732800">- Remove unneeded createrepo build dependency (bsc#1082689)
- builder-repository: fix SLES short id computation
  Patch added:
    0a55098f-builder-repository-fix-compute_short_id-for-sles-X.0.patch
- Fix handling of Latin-1 encoding in rpmdb (bsc#1075803)
  Patches added:
    0001-Introduce-a-wrapper-around-xmlParseURI.patch
    0002-common-extract-UTF-8-conversion-function.patch
    0003-inspector-rpm-summary-and-description-may-not-be-utf.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1524139200">- Build against libtirpc</changelog>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="Larry Dewey &lt;ldewey@suse.com&gt;" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
</package>
<package pkgid="ddc2820e64a684296df64124df799ae801594beefd28ef9a6aab9420bea7b0c1" name="guile" arch="src">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="88762a063f22d8985bd1929f606faf34c2d959ef4c704e3742decddf944cbe8b" name="guile" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="c7392d9606c9b2a81d8dd6b0b0492c12c4595142e26f261760ef75cd97c0ac3f" name="guile-devel" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="0fc547a67d3f69a62b85fdae8eadbaf97fee528a919d8cbc20aa7aad564d32e6" name="guile-modules-2_0" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.3.3.1"/>
  <changelog author="dvaleev@suse.com" date="1335182400">- mark this threads test as unresolved since it may produce false
  negatives, depending on the behavior/timing of the garbage
  collector.</changelog>
  <changelog author="coolo@suse.com" date="1340971200">- libffi-devel is more generic than specific gcc versions (that no longer
  exist in factory)</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- update to 2.0.6:
  * Notable changes
  * * New optimization pass: common subexpression elimination (CSE)
  * * Improvements to the partial evaluator
  * * Run finalizers asynchronously in asyncs
  * * Update SRFI-14 character sets to Unicode 6.1
  * * Better source information for datums
  * * Improved error and warning messages
  * * A few important bug fixes in the HTTP modules.
  * * Pretty-print improvements
  * * Fix memory leak involving applicable SMOBs
  * * Support for HTTP/1.1 chunked transfer coding
  * * Micro-optimizations
  * * Incompatible change to `scandir'
  * New interfaces
  * * New C function: `scm_to_pointer'
  * * New C inline functions: `scm_new_smob', `scm_new_double_smob'
  * * (ice-9 format): Add ~h specifier for localized number output.
  * * (web response): New procedure: `response-must-not-include-body?'
  * * New predicate: 'supports-source-properties?'
  * * New C helpers: `scm_c_values', `scm_c_nvalues'
  * * Newly public inline C function: `scm_unget_byte'
  * * (language tree-il): New functions: `tree-il=?', `tree-il-hash'
  * * New fluid: `%default-port-conversion-strategy'
  * * New syntax: `=&gt;' within `case'
  * * (web http): `make-chunked-input-port', `make-chunked-output-port'
  * * (web http): `declare-opaque-header!'
  * New deprecations
  * * `close-io-port' deprecated
  * * `scm_sym2var' deprecated
  * * Lookup closures deprecated
  * Bug fixes
  * * Fix use of unitialized stat buffer in search-path of absolute paths.
  * * Avoid calling `freelocale' with a NULL argument.
  * * Work around erroneous tr_TR locale in Darwin 8 in tests.
  * * Fix `getaddrinfo' test for Darwin 8.
  * * Use Gnulib's `regex' module for better regex portability.
  * * `source-properties' and friends work on any object
  * * Rewrite open-process in C, for robustness related to threads and fork
  * * Fix &lt;TAG&gt;vector-length when applied to other uniform vector types
  * * Fix escape-only prompt optimization (was disabled previously)
  * * Fix a segfault when /dev/urandom is not accessible
  * * Fix flush on soft ports, so that it actually runs.
  * * Better compatibility of SRFI-9 records with core records
  * * Fix and clarify documentation of `sorted?'.
  * * Fix IEEE-754 endianness conversion in bytevectors.
  * * Correct thunk check in the `wind' instruction.
  * * Add @acronym support to texinfo modules
  * * Fix docbook-&gt;texi for &lt;ulink&gt; without URL
  * * Fix `setvbuf' to leave the line/column number unchanged.
  * * Add missing public declaration for `scm_take_from_input_buffers'.
  * * Fix relative file name canonicalization with empty %LOAD-PATH entries.
  * * Import newer (ice-9 match) from Chibi-Scheme.
  * * Fix unbound variables and unbound values in ECMAScript runtime.
  * * Make SRFI-6 string ports Unicode-capable.
- removed patches:
  guile-turn-off-gc-test.patch
  guile-fix_fsf_add.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1354536000">- update to 2.0.7:
  * Notable changes
  * * SRFI-105 curly infix expressions are supported
  * * Reader options may now be per-port
  * * Futures may now be nested
  * * `GUILE_LOAD_PATH' et al can now add directories to the end of
    the path
  * * `load-in-vicinity' search for `.go' files in `%load-compiled-path'
  * * Extension search order fixed, and LD_LIBRARY_PATH preserved
  * * Optimize calls to `equal?' or `eqv?' with a constant argument
  * Manual updates
  * * SRFI-9 records now documented under "Compound Data Types"
  * * (ice-9 and-let-star) and (ice-9 curried-definitions) now documented
  * New interfaces
  * * New "functional record setters" as a GNU extension of SRFI-9
  * * web: New `http-get*', `response-body-port', and `text-content-type?'
    procedures
  * * `string-split' accepts character sets and predicates
  * * R6RS SRFI support
  * * `define-public' is no a longer curried definition by default
  etc. see NEWS</changelog>
  <changelog author="pgajdos@suse.com" date="1355745600">- fixed build: net-db.test takes EAI_SYSTEM error by
  * net-db-test.patch [bnc#794696]
- turn off one test in gc.test
  * gc-test.patch
    http://lists.gnu.org/archive/html/bug-guile/2012-07/msg00069.html</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1360065600">- move .so file to libguilereadline package [bnc#765436]</changelog>
  <changelog author="pgajdos@suse.com" date="1366027200">- updated to 2.0.9:
  * * New keyword arguments for procedures that open files
  * * Numerics improvements
  * * New optimizations
  * * `peek-char' no longer consumes EOF
  * * SLIB compatibility restored
  * * Better ,trace REPL command
  * * Better docstring syntax supported for `case-lambda'
  * * Improved handling of Unicode byte order marks
  etc. see NEWS for more/details
- removed unneeded gc-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- updated to 2.0.11:
  * * New GDB extension to support Guile
  * * Improved integration between R6RS and native Guile exceptions
  * * Support for HTTP proxies
  * * Lexical syntax improvements
  * ** Support |...| symbol notation
  * ** Support '#true' and '#false' notation for booleans.
  * ** Recognize '#\escape' character name.
  * ** Accept "\|" in string literals.
  * * Custom binary input ports now support 'setvbuf'.
  * * SRFI-4 predicates and length accessors no longer accept arrays.
  * * GUILE_PROGS now supports specifying a minimum required version.
  etc, see NEWS.</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- install libguile*-gdb.scm into
  %{_datadir}/gdb/auto-load%{_libdir}/  [bnc#874028]</changelog>
  <changelog author="pgajdos@suse.com" date="1423137600">- use fake buildstamp [bnc#916347]
  + guile-fake-buildstamp.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425902400">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1444219200">- libguile require glibc-locale [bnc#948804]</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1469102400">- updated to 2.0.12:
  * * FFI: Add support for functions that set 'errno'
  * * The #!r6rs directive now influences read syntax
  * * 'read' now accepts "\(" as equivalent to "("
  * * SRFI-14 character data set upgraded to Unicode 8.0.0
  * * SRFI-19 table of leap seconds updated
  * * 'string-hash', 'read-string', and 'write' have been optimized
  * * GOOPS bug fix for inherited accessor methods
  for complete list of changes see NEWS
- refreshed patches
- add key of Andy Wingo to guile.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1476532800">- Update to version 2.0.13
  * Security fixes
    + CVE-2016-8606: REPL server now protects against HTTP
    inter-protocol attacks
    + CVE-2016-8605: 'mkdir' procedure no longer calls umask(2)
  * Several bugfixes and improvements (for details see NEWS file)
- Fetch keyring from savannah
- Use https for all urls</changelog>
  <changelog author="schwab@suse.de" date="1478606400">- repl-server-test.patch: fix race in 00-repl-server.test</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 2.0.14:
  * Bug fixes
    + Builds of .go files and of Guile itself are now
    bit-reproducible
    + 'number-&gt;locale-string' and 'monetary-amount-&gt;locale-string'
    fixes
    + (system base target) now recognizes "sh3" as a
    cross-compilation target
    + Fix race condition in '00-repl-server.test'
    + 'scandir' from (ice-9 ftw) no longer calls 'stat' for each
    entry
  * Several documentation improvements
- Drop no longer needed patches:
  * guile-fake-buildstamp.patch
  * repl-server-test.patch
- Small packaging cleanup with help of spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Format with spec-cleaner
- Fix build with new glibc 2.27 bsc#1079837:
  * guile-disable-int-tests.patch
- Use %license macro to install license</changelog>
  <changelog author="tchvatal@suse.com" date="1519819201">- Add patch from Fedora not to link to libgc in all consumer libs:
  * guile-2.0.14-gc_pkgconfig_private.patch
- Add _constraints file to ensure we can build properly</changelog>
  <changelog author="tchvatal@suse.com" date="1519819202">- Add back the require on gc-devel as it is still needed for the
  non .pc using packages (eg autotools)</changelog>
  <changelog author="tdevries@suse.com" date="1540123200">- Use 'scm_from_utf8_{string,symbol,keyword}' for C string literals
  where appropriate [bsc#1110085]
  * guile-use-utf8.patch
- Add standalone test test-ja_JP.sjis [bsc#1110085]
  * guile-add-test-ja_JP.sjis.patch
    https://debbugs.gnu.org/cgi/bugreport.cgi?bug=33044#43</changelog>
</package>
<package pkgid="a3b3569ed7c819bb7382a742147f53c9529d5e6541478737568c7b9add832c3d" name="guix" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.2.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1443700800">- use pkgconfig dependencies
- clean-up with spec-cleaner</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446379200">- rename default group from guix-builders to guixbuild to match
  upstream
- install /gnu/store directory
- depend on emacs, package emacs scripts</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446638400">- change ownership of /gnu/store
- remove sysconfig.guix file as it is not used anymore
- define macro %guix_builder_group to make such changes in future
  easier</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447329600">- bump to 0.9.0
  - see changelog for complete list of changes
- add guile-json as dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1451995200">- fix typo preventing creation of new users</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278400">- replace setBadness with addFilter in guix-rpmlint, add explanations
- add guix-rpmlint into spec file as Source
- create rcguix-daemon symlink
- make guix bash completion script as %config to silence warning</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278401">- add ExclusiveArch to restrict available architectures
- remove filter for non-standard group guixbuild (it is standard now)
- remove %config for bash completion script (rpmlint was fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1460808000">- bump to 0.10.0
- add gnutls-guile as build time dependency
- don't mark bash completion as %config (warning fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1467806400">- explicitly require libgcrypt-devel until the dynamic-link is able to
  load symlink target of /usr/lib*/libgcrypt.so
  http://debbugs.gnu.org/cgi/bugreport.cgi?bug=21076</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1468065600">- require gnutls-guile also as run time dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1470225600">- bump to 0.11.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1482753600">- bump to 0.12.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495540800">- bump to 0.13.0
  overview of changes is in NEWS
- add signatures for the bootstrap tarballs
- drop emacs dependency (emacs-guix is split out)
- update keyring</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495972800">- replace pkgconfig(guile-2.0) &gt;= 2.0.7 dependency with guile-devel
  (guile 2.2 provides pkgconfig(guile-2.2) and OBS can't handle
  boolean operators in dependencies yet</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518696000">- require guile-git and libgit2-devel for build
- bump to 0.14.0
  Changes in 0.14.0
  * Package management
  * ?guix package? displays how much will be downloaded
  * ?guix package? warns about insufficient disk space
  * ?guix package? now reports package collisions early on
  * ?guix package --search? sorts results by relevance
  * ?guix pull? now fetches code directly over Git using Guile-Git
  * Substitutes can be downloaded from servers equivalent to the authorized ones
  * New ?guix-daemon? options: ?--listen?, ?--timeout?, ?--max-silent-time?
  * New ?guix weather? command
  * ?guix publish --cache? now also caches uncompressed items
  * ?guix publish? no longer removes live items from its cache
  * ?guix challenge? now displays an overall summary
  * ?guix refresh? no longer uses FTP for GNU and GNOME packages
  * ?guix refresh? has a new ?-m? or ?--manifest? option
  * New ?refresh? checker for ?guix lint?
  * New ?json? importer for ?guix import? to simplify first packages
  * New ?texlive? importer for ?guix import?
  * Distribution
  * GuixSD installation image is now available as ISO-9660
  * GuixSD installation image now includes an ?sshd? service
  * New (gnu bootloaders) API, with support for U-Boot and extlinux
  * ?grub-configuration? is deprecated in favor of ?bootloader-configuration?
  * ?%desktop-services? now includes NetworkManager instead of Wicd
  * The (uuid ?) form can now specify FAT32 and ISO-9660 UUIDs
  * ?guix system? now reports missing file system UUIDs and labels
  * ?guix system? can provide hints when reporting unbound variables
  * New ?--file-system-type? option for ?guix system disk-image?
  * ?guix system disk-image? can now creates ISO-9660 images
  * ?guix system vm-image? &amp; co. automatically estimate the image size
  * ?guix system vm? now uses overlayfs instead of unionfs
  * ?guix system init? displays a progress bar while copying files
  * TeX Live is now also available as a set of small ?texlive-? packages
  * New ?guix system search? command to search for services
  * New services
    certbot, fcgiwrap, gdm, git-http, knot, libvirt, memcached,
    mongodb, mpd, murmur, rsync, tailon, sysctl
  * 1211 new packages
  * 1403 package updates
  * Programming interfaces
  * New build systems: ?font?, ?meson?, ?minify?, ?scons?, ?texlive?
  * ?cmake-build-system? now supports cross-compilation
  * Various improvements to ?asdf-build-system?, ?emacs-build-system?,
    ?ant-build-system?, and ?go-build-system?
  * ?patches? field of &lt;origin&gt; can now contain any lowerable object
  * (gnu system vm) has a new ?make-iso9660-image? procedure
  * ?openssh-service-type? can now be extended with new authorized keys
  * ?rottlog-service-type? can now be extended with new ?log-rotation?s
  * ?network-manager-service-type? now supports VPN plugins
  * &lt;service-type&gt; now has a ?description? field, used by ?guix system search?
  * New ?virtual-machine? form in (gnu system vm)
  * New (gnu system uuid) module, which defines a disjoint &lt;uuid&gt; type
  * New (guix progress) module
  * Noteworthy bug fixes
  * GuixSD no longer creates setuid binaries in /gnu/store
    (&lt;https://bugs.gnu.org/28751&gt;)
  * /root is no longer world-readable (&lt;http://bugs.gnu.org/27135&gt;)
  * ?guix publish? no longer leaks memory (&lt;https://bugs.gnu.org/28784&gt;)
  * Missing cursor icons in GNOME could cause crashes
    (&lt;https://bugs.gnu.org/25958&gt;)
  * Setuid programs now honor the system timezone
    (&lt;https://bugs.gnu.org/29212&gt;)
  * Clients honor the daemon?s ?max-silent-time?
    (&lt;https://bugs.gnu.org/27157&gt;)
  * ?guix substitute? honors substitute expiry time again
    (&lt;https://lists.gnu.org/archive/html/guix-devel/2017-07/msg00179.html&gt;)
  * Several portability fixes for aarch64
  * Native language support
  Updated translations: da (Danish), fr (French)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1519128000">- use wrapper for running daemon and alter service file to use it
  - if there is new daemon available - use it
  - if there is not, use the one from this package</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1520596800">- fix build against guile 2.0+</changelog>
  <changelog author="kasimir_@outlook.de" date="1522497600">- disable armv6 build (architecture is not supported)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1527508800">- add gnutls-fix.patch
  GnuTLS built against guile 2.0 is breaking any HTTPS connection,
  this upstream patch solves it
- put COPYING as %license in specfile</changelog>
  <changelog author="jbrielmaier@suse.de" date="1528200000">- gnutls-fix.patch fixes boo#1095970</changelog>
</package>
<package pkgid="8c1175bd1895507fbdd1fcb26fcca2609d594d5c632120e225c7898eccfeaffb" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="68ee9e3bc412cd2b28a8b0c362ddb26a500b5df301134e8c0862711dcafbd862" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="6418d4d5259a62dbd6ed8f418e0542d0a15faaf41336d4b64e46eaa7f5cc8da1" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="aaf316547ee526da742f16cd32827182c9d773ec8128d9012bc8b6a5adae6259" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="876908f5e4983efe15adde0a3be6e586f8e1edf8cd8acf043d7e0e94fd57b2b0" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="14ccc0c3c957d836b2044be4bb607ff9967e2d44b6e01c8ee2e3a8e547714327" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="66412718ec820b54d71c76cd17326b82cc10a3524fd3d8045d6ebe5c7ff1ad69" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="33e89cde9c4d3a76737178d473fa2c355bd2ab4237ee89253e7882e157fdc580" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="9ef6bcf312f848da33741dc13dcb6bb121345de6e382a2b04524430f99c5f6c8" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="a0d501aebc18343672ab956c104f40f2ccfb356a25a60e438d62a4e2474e8489" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="006306996422e781e79e0680be7b724828f2c8ef17f53f338361258575ac17d4" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="08c2360615a33251d01a4f114ea565599e4129b3d0ccc1619e83133eb8b29704" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="6851b0d7800b21ff2127cec5d4afa5d5d21868d9250854ddbd32e9465cc3f035" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="808febcccf73b16bc2767273d29a631cb04c25b84e9bff74c89cacd474d89cd8" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="52de575d18298c69338f142bcd65335bf60668a9dcad77937bc9b00a0fb769d7" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="cced7def371f227fdd187143ebfac18d65a045ce8e59d0d2dcfce17e9a98c9ee" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="a590091939bc534f8f6ecea1ab877157be6d6949dce5a23fcdc7b852c5c95fbb" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="f201859761b084b2ac52e3af2d0f34be516282baf748928192448c2f3cb26886" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="0ec85b647014474978c15172c8b9f93537a6a83fa545420c3b1c5d47b936a744" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="674fe1b1a410f01b17d16dd958b49c2463668954c4811b874170597c07f0a384" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="13e33f8ca099e9fcc805731f8fa9eaddbf41f815291c337629f25f84b28ea1ae" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="120b9e772ad766a7260730d0cf81bb6c68f70df236f0095c1c560afe5de9cd34" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="484ffce781682bb4619cd162f9d9833c14caedb274fb51e6766b560c47c8733a" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="f798459e26e0d8b72ef2e69a9a7810d977be1d6a92309d79637a93298e18a891" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="ee6ccb332801a479e0ca0f00f04ae0a487bac691426cd01ba5ff9cc53fca182b" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
  <changelog author="mgorse@suse.com" date="1558094400">- Drop polkit rules files, only relevant for wheel group
  (boo#1125433).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859200">- Add gvfs-CVE-2019-12449.patch: Backport from upstream commit
  d5dfd823 to ensure correct ownership when moving to file:// uri
  (boo#1136992, CVE-2019-12449).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1560859201">- Add gvfs-CVE-2019-12448.patch: Backport from upstream commit
  5cd76d62 to add query_info_on_read/write functionality
  (boo#1136981, CVE-2019-12448).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118400">- Add gvfs-CVE-2019-12447.patch: Backport from upstream commit
  3895e09d and daf1163a to fix a mishandles file ownership issue
  (boo#1136986, CVE-2019-12447).</changelog>
  <changelog author="Qiang Zheng &lt;qzheng@suse.com&gt;" date="1561118401">- Add gvfs-CVE-2019-12795.patch: Backport from upstream commit
  70dbfc68 to check that the connecting client is the same user
  (boo#1137930, CVE-2019-12795).</changelog>
</package>
<package pkgid="e99415c4efc64eb2004dadc3a035582b456ec00a00367dedbf3053d2fe9dcde5" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="a3be46337569aadb09297680c98f92d0e4e00a120094bfd8974cb39736d7c99a" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
  <changelog author="qkzhu@suse.com" date="1550145600">- Add gvfs-CVE-2019-3827.patch: Prevent access if any authentication
  agent isn't available (glgo#GNOME/gvfs#355, bsc#1125084,
  CVE-2019-3827).</changelog>
</package>
<package pkgid="93380aa1cc32628e9e8985389565ddee8865de9f94d941860f91ebb5789d40e3" name="gvim" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="lp150.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510660800">- Explicitly require python2-devel</changelog>
  <changelog author="idonmez@suse.com" date="1511956800">- Update to revision 1358
  * Too many changes to list
- Fixes CVE-2017-1000382 bsc#1065958
- Refresh patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Updated to revision 1365, fixes the following problems
  * Libvterm ANSI colors can not always be recognized from the RGB
    values. The default color is wrong when t_RB is empty.
  * The Terminal highlighting doesn't work in a terminal.
  * Some users don't want to diff with hidden buffers.
  * Terminal window colors wrong when using Terminal highlighting.
  * Recovering does not work when swap file ends in .stz.
  * There is no easy way to get the window position.
  * When one channel test fails others fail as well.</changelog>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
</package>
<package pkgid="eb721ef19e565fd74a64d9d66964a9917ad941fbc69b618dec58ef9689c3d78f" name="ha-cluster-bootstrap" arch="noarch">
  <version epoch="0" ver="0.5" rel="lp150.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1429617600">- Improved IP address detection algorithm (boo#920226)
- Use crm_node to count nodes in cluster when deciding
  to reset no-quorum-policy=ignore (boo#923372)
- Add 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Add 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1429617601">- Updated IP address detection fix (boo#920226)</changelog>
  <changelog author="kgronlund@suse.com" date="1431086400">- Update to version 0.4+git.1430918556.6f42311:
  + Patches merged upstream
  + Exit with error if ha-cluster-join is called over ssh without -t (bnc#892702)
- Remove 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Remove 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1432209600">- Only check for pseudo-tty if in interactive mode (bnc#892702)
- Add administration Virtual IP (fate#318549)
- Only check watchdog if potentially using SBD
- Add 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
- Add 0002-Add-administration-Virtual-IP-fate-318549.patch
- Add 0003-Only-check-watchdog-if-potentially-using-SBD.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1438603200">- Remove admin IP suggestion as it is confusing (bsc#939351)
- Add 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440417600">- Require ha-cluster-webui instead of hawk (bsc#942723)</changelog>
  <changelog author="kgronlund@suse.com" date="1440763200">- Update to version 0.4+git.1440306826.cf7cfcf:
  - Patches are now merged upstream
  - Remove 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
  - Remove 0002-Add-administration-Virtual-IP-fate-318549.patch
  - Remove 0003-Only-check-watchdog-if-potentially-using-SBD.patch
  - Remove 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch
- Sync entire /etc/booth directory (fate#319318)
- Add 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1441368000">- Update to version 0.4+git.1441350120.8e9abbe:
  + Sync entire /etc/booth directory (fate#319318)
  + Check corosync.conf before access (bsc#943227)
  + Use update over replace to avoid deleting DC attributes (bsc#890802)
  + Update README with a bit more detail
- Remove 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1446206400">- Drop recommends for hawk (bsc#952428)</changelog>
  <changelog author="kgronlund@suse.com" date="1446292800">- Add recommends for hawk2 (bsc#952982)</changelog>
  <changelog author="kgronlund@suse.com" date="1456315200">- Update to version 0.4+git.1456303675.b6eb2b3:
  + Corosync UDPU support (fate#320604) (fate#320605)</changelog>
  <changelog author="kgronlund@suse.com" date="1464177600">- Update to version 0.4+git.1464165931.150e061:
  + Don't configure no-quorum-policy=ignore, ever (bsc#981056)</changelog>
  <changelog author="kgronlund@suse.com" date="1469188800">- Update to version 0.4+git.1469178371.e8b668d:
  * Reload corosync configuration if unicast (bsc#989809)
  * Use ip route to find iface name over netstat which is deprecated</changelog>
  <changelog author="kgronlund@suse.com" date="1469188801">- Update to version 0.4+git.1469191369.b497afa:
  * Set pcmk_delay_max=30s for SBD resource (bsc#988356) (bsc#990213)</changelog>
  <changelog author="kgronlund@suse.com" date="1475755200">- Update to version 0.4+git.1475739556.1088521:
  * Better corosync defaults (bsc#1001164)</changelog>
  <changelog author="kgronlund@suse.com" date="1481889600">- Update to version 0.4+git.1481877541.6b06de6:
  * Replace commands with stubs that call crmsh (fate#321114)
  * Fix typoed variable name in error message</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 0.5:
  * Clarify crmsh version that has bootstrap commands
  * Include sleha- aliases for commands (bnc#862798)
- Remove 0004-Warn-if-using-the-old-sleha-command-form-bnc-862798.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500984000">- Recommend sbd, resource-agents and fence-agents (bsc#1050427)</changelog>
  <changelog author="kgronlund@suse.com" date="1511870400">- Switch to Python 3 (bsc#1070140)</changelog>
  <changelog author="XLiang@suse.com" date="1565784000">- use help2man to generate init/join/remove man page (bsc#1138353)</changelog>
</package>
<package pkgid="be70e1398b7df1d3551cf4b402639e12a4aff1babab2e96c669f37533c02fcd9" name="ha-cluster-bootstrap" arch="src">
  <version epoch="0" ver="0.5" rel="lp150.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1429617600">- Improved IP address detection algorithm (boo#920226)
- Use crm_node to count nodes in cluster when deciding
  to reset no-quorum-policy=ignore (boo#923372)
- Add 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Add 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1429617601">- Updated IP address detection fix (boo#920226)</changelog>
  <changelog author="kgronlund@suse.com" date="1431086400">- Update to version 0.4+git.1430918556.6f42311:
  + Patches merged upstream
  + Exit with error if ha-cluster-join is called over ssh without -t (bnc#892702)
- Remove 0001-Improved-IP-address-detection-algorithm-boo-920226.patch
- Remove 0002-Use-crm_node-to-count-nodes-in-cluster-when-deciding.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1432209600">- Only check for pseudo-tty if in interactive mode (bnc#892702)
- Add administration Virtual IP (fate#318549)
- Only check watchdog if potentially using SBD
- Add 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
- Add 0002-Add-administration-Virtual-IP-fate-318549.patch
- Add 0003-Only-check-watchdog-if-potentially-using-SBD.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1438603200">- Remove admin IP suggestion as it is confusing (bsc#939351)
- Add 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1440417600">- Require ha-cluster-webui instead of hawk (bsc#942723)</changelog>
  <changelog author="kgronlund@suse.com" date="1440763200">- Update to version 0.4+git.1440306826.cf7cfcf:
  - Patches are now merged upstream
  - Remove 0001-Only-check-for-pseudy-tty-if-in-interactive-mode-bnc.patch
  - Remove 0002-Add-administration-Virtual-IP-fate-318549.patch
  - Remove 0003-Only-check-watchdog-if-potentially-using-SBD.patch
  - Remove 0004-Remove-admin-IP-suggestion-as-it-is-confusing-bsc-93.patch
- Sync entire /etc/booth directory (fate#319318)
- Add 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1441368000">- Update to version 0.4+git.1441350120.8e9abbe:
  + Sync entire /etc/booth directory (fate#319318)
  + Check corosync.conf before access (bsc#943227)
  + Use update over replace to avoid deleting DC attributes (bsc#890802)
  + Update README with a bit more detail
- Remove 0001-sync-entire-booth-directory-fate-319318.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1446206400">- Drop recommends for hawk (bsc#952428)</changelog>
  <changelog author="kgronlund@suse.com" date="1446292800">- Add recommends for hawk2 (bsc#952982)</changelog>
  <changelog author="kgronlund@suse.com" date="1456315200">- Update to version 0.4+git.1456303675.b6eb2b3:
  + Corosync UDPU support (fate#320604) (fate#320605)</changelog>
  <changelog author="kgronlund@suse.com" date="1464177600">- Update to version 0.4+git.1464165931.150e061:
  + Don't configure no-quorum-policy=ignore, ever (bsc#981056)</changelog>
  <changelog author="kgronlund@suse.com" date="1469188800">- Update to version 0.4+git.1469178371.e8b668d:
  * Reload corosync configuration if unicast (bsc#989809)
  * Use ip route to find iface name over netstat which is deprecated</changelog>
  <changelog author="kgronlund@suse.com" date="1469188801">- Update to version 0.4+git.1469191369.b497afa:
  * Set pcmk_delay_max=30s for SBD resource (bsc#988356) (bsc#990213)</changelog>
  <changelog author="kgronlund@suse.com" date="1475755200">- Update to version 0.4+git.1475739556.1088521:
  * Better corosync defaults (bsc#1001164)</changelog>
  <changelog author="kgronlund@suse.com" date="1481889600">- Update to version 0.4+git.1481877541.6b06de6:
  * Replace commands with stubs that call crmsh (fate#321114)
  * Fix typoed variable name in error message</changelog>
  <changelog author="kgronlund@suse.com" date="1485864000">- Update to version 0.5:
  * Clarify crmsh version that has bootstrap commands
  * Include sleha- aliases for commands (bnc#862798)
- Remove 0004-Warn-if-using-the-old-sleha-command-form-bnc-862798.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500984000">- Recommend sbd, resource-agents and fence-agents (bsc#1050427)</changelog>
  <changelog author="kgronlund@suse.com" date="1511870400">- Switch to Python 3 (bsc#1070140)</changelog>
  <changelog author="XLiang@suse.com" date="1565784000">- use help2man to generate init/join/remove man page (bsc#1138353)</changelog>
</package>
<package pkgid="c05aff63995671eeb33dc3c7ac06e1891cb42ea6a497c77646ae478d62f62814" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="lp150.3.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
</package>
<package pkgid="f8a73bdf3b60ad3cb5512c7454c06809d0de6d3410bf376d6e74fe7ac10968f6" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.1" rel="lp150.3.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
</package>
<package pkgid="2f5a1a3f9db478a103373c60305985ca0f157cbd26bc130cf14a74220b59bcec" name="habootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.2.4" rel="lp150.6.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1562068800">- Version bump 0.2.2
  * Change the salt-formula directories permissions to 0750 to avoid
    conflicts with the package salt-standalone-formulas-configuration.
  * Correct the required package name to
    salt-standalone-formulas-configuration</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1562328000">- Make pkg.install more resilient, allowing retries during install</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1563796800">- Version bump 0.2.4
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas
    (boo#1142306)</changelog>
</package>
<package pkgid="4cd9ecee04549f52cadfaa2f2671ba699d9b9d7427207fbf21cc7c8100d6393a" name="habootstrap-formula" arch="src">
  <version epoch="0" ver="0.2.4" rel="lp150.6.1"/>
  <changelog author="kgronlund@suse.com" date="1536235200">- Initial version</changelog>
  <changelog author="kgronlund@suse.com" date="1536235201">- Update to version 1.0.0+git.1536240306.8442de8:
  * Add metadata.yml</changelog>
  <changelog author="kgronlund@suse.com" date="1536926400">- Update to version 1.0.0+git.1536931866.e47f6ce:
  * Pillar data has to be defined in a separate SLS
  * Revised pillar data layout to make usage simpler
  * Drop extraneous dash in join args
  * Set group in metadata.yml</changelog>
  <changelog author="dakechi@suse.com" date="1550577600">- Update to version 1.0.0+git.1550242845.0e69ab8:
  * Allow pre-configured packages
  * Update package installation to use ha pattern for SUSE distros
  * Update join_timer parameter description
  * Allow custom timer before cluster join
  * Improve pre validation state to check the proper parameters
  * Create suma form and adapt states to that
  * Add new feature to the formula: - Ntp connection - SSH keys management - Watchdog - Mandatory pacakges and RA packages
  * Add new options to configure the cluster in creation
  * Update ha formula to use crmsh salt code
  * Updated README and added comment about NET_IP in Vagrantfile
- Consolidate the SUMA specific package into one .spec file</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1556193600">- Changed requires from salt-saphana to salt-shaptools.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1558008000">- Remove network repository installation</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1559304000">- Version bump 0.2.0
  * Include the salt-formulas-configuration dependency on
    SLE/Leap 15-SP1 and higher. This package configures the shared salt
    formulas location (/usr/share/salt-formulas) to be used by SUMA 4.0
    or salt in standalone mode.
  * Drops the habootstrap-formula-suma package, as the forms metadata
    will be available only on SUMA 4.0 using the shared location.</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1560254400">- Create package version 0.2.1 with fixed spec files. Now the package
  is available in all SLE12 and SLE15 versions (boo#1137989, jsc#SLE-4031)</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1562068800">- Version bump 0.2.2
  * Change the salt-formula directories permissions to 0750 to avoid
    conflicts with the package salt-standalone-formulas-configuration.
  * Correct the required package name to
    salt-standalone-formulas-configuration</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1562328000">- Make pkg.install more resilient, allowing retries during install</changelog>
  <changelog author="Xabier Arbulu Insausti &lt;xarbulu@suse.com&gt;" date="1563796800">- Version bump 0.2.4
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas
    (boo#1142306)</changelog>
</package>
<package pkgid="465efad8a9d7838278b7f2467e0b7886c13ad885e4181c1a83040ca87b61dd82" name="haproxy" arch="x86_64">
  <version epoch="0" ver="1.8.14~git0.52e4d43b" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1514721600">- Update to version 1.8.3:
  * [RELEASE] Released version 1.8.3
  * MEDIUM: h2: prepare a graceful shutdown when the frontend is stopped
  * BUG/MAJOR: hpack: don't return direct references to the dynamic headers table
  * BUG/MEDIUM: http: don't automatically forward request close
  * MINOR: don't close stdio anymore
  * BUG/MEDIUM: mworker: don't close stdio several time
  * BUG/MEDIUM: h2: ensure we always know the stream before sending a reset
  * DOC/MINOR: configuration: typo, formatting fixes
  * BUG/MEDIUM: h2: improve handling of frames received on closed streams
  * BUG/MEDIUM: h2: properly handle and report some stream errors</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Add dependency on apparmor-profiles (bsc#1079985)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091201">- Update to version 1.8.4 (bsc#1080069):
  * BUG/MINOR: config: don't emit a warning when global stats is incompletely configured
  * DOC: Mention -Ws in the list of available options
  * DOC: Describe routing impact of using interface keyword on bind lines
  * MINOR: init: emit warning when -sf/-sd cannot parse argument
  * BUG/MEDIUM: standard: Fix memory leak in str2ip2()
  * BUG/MINOR: time/threads: ensure the adjusted time is always correct
  * BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side
  * BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns
  * BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs
  * BUG/MINOR: threads: Update labels array because of changes in lock_label enum
  * BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs
  * CLEANUP: Fix typo in ARGT_MSK6 comment
  * BUG/MINOR: sample: Fix output type of c_ipv62ip
  * CLEANUP: sample: Fix outdated comment about sample casts functions
  * CLEANUP: sample: Fix comment encoding of sample.c
  * BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif
  * BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread
  * BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed
  * BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag
  * BUG/MINOR: threads: always set an owner to the thread_sync pipe
  * MINOR: threads: Fix build when we're not compiling with threads.
  * BUG/MINOR: mworker: only write to pidfile if it exists
  * BUG/MEDIUM: threads/mworker: fix a race on startup
  * BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread
  * BUG/MEDIUM: epoll/threads: use one epoll_fd per thread
  * MINOR: fd: add a bitmask to indicate that an FD is known by the poller
  * BUG/MEDIUM: fd: maintain a per-thread update mask
  * BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num
  * MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache
  * MINOR: global: add some global activity counters to help debugging
  * MINOR: threads: add a MAX_THREADS define instead of LONGBITS
  * MINOR: global/threads: move cpu_map at the end of the global struct
  * MINOR: servers: Don't report duplicate dyncookies for disabled servers.
  * BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely.
  * BUG/MINOR: poll: too large size allocation for FD events
  * CONTRIB: debug: fix a few flags definitions
  * DOC: clarify the scope of ssl_fc_is_resumed
  * BUG/MEDIUM: stream: properly handle client aborts during redispatch
  * BUILD/MINOR: ancient gcc versions atomic fix
  * BUG/MEDIUM: mworker: execvp failure depending on argv[0]
  * MINOR: dns: Handle SRV record weight correctly.
  * BUG/MINOR: lua: Fix return value of Socket.settimeout
  * BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect
  * DOC: lua: Fix typos in comments of hlua_socket_receive
  * BUG/MINOR: lua: Fix default value for pattern in Socket.receive
  * BUG/MEDIUM: ssl: cache doesn't release shctx blocks
  * BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames</changelog>
  <changelog author="kgronlund@suse.com" date="1519992000">- Ensure haproxy home directory is not world readable (bsc#1077716)</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Avoid %__-type macro indirections. Remove redundant %clean
  section. Do not ignore errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1520510400">- if we lock down the permissions the home directory has to be
  owned by haproxy (bsc#1077716)</changelog>
  <changelog author="kgronlund@suse.com" date="1522065600">- Update to version 1.8.5:
  * BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected
  * BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM
  * BUG/MEDIUM: h2: properly account for DATA padding in flow control
  * DOC: don't suggest using http-server-close
  * DOC: log: more than 2 log servers are allowed
  * BUILD/BUG: enable -fno-strict-overflow by default
  * MINOR: log: stop emitting alerts when it's not possible to write on the socket
  * BUG/MEDIUM: threads/queue: wake up other threads upon dequeue
  * BUG/MINOR: tcp-check: use the server's service port as a fallback
  * BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers
  * BUG/MINOR: lua: return bad error messages
  * BUG/MINOR: spoa-example: unexpected behavior for more than 127 args
  * BUG/MINOR: cli: Fix a crash when sending a command with too many arguments
  * BUG/MINOR: seemless reload: Fix crash when an interface is specified.
  * BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically
  * BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management
  * BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled
  * BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping
  * BUG/MINOR: force-persist and ignore-persist only apply to backends
  * BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc
  * BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage
  * BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd"
  * BUG/MEDIUM: h2: also arm the h2 timeout when sending
  * BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list.
  * BUG/MINOR: session: Fix tcp-request session failure if handshake.
  * MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file
  * MINOR: systemd: Add SystemD's Protect*= options to the unit file
  * MINOR: systemd: Add section for SystemD sandboxing to unit file
  * BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk
  * BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk
  * BUG/MEDIUM: h2: always consume any trailing data after end of output buffers
  * MINOR: stats: display the number of threads in the statistics.
  * BUG/MINOR: h2: Set the target of dbuf_wait to h2c
  * MINOR: debug/pools: make DEBUG_UAF also detect underflows
  * BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF
  * DOC: cfgparse: Warn on option (tcp|http)log in backend
  * DOC: lua: new prototype for function "register_action()"
  * BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken.
  * BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible
  * BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe
  * BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st
  * BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL
  * BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable.
  * BUG/MINOR: threads: fix missing thread lock labels for 1.8</changelog>
  <changelog author="mrueckert@suse.de" date="1523102400">- Update to version 1.8.7:
  * [RELEASE] Released version 1.8.7
  * MINOR: servers: Support alphanumeric characters for the server templates names
  * BUG/MAJOR: cache: always initialize newly created objects
  * [RELEASE] Released version 1.8.6
  * BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk
  * BUG/MINOR: spoe: Initialize variables used during conf parsing before any check
  * BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks
  * BUG/MINOR: fd: Don't clear the update_mask in fd_insert.
  * BUG/MINOR: cache: fix "show cache" output
  * BUG/MINOR: email-alert: Set the mailer port during alert initialization
  * BUG/MINOR: checks: check the conn_stream's readiness and not the connection
  * BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked
  * BUILD/MINOR: threads: always export thread_sync_io_handler()
  * BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error
  * BUG/MEDIUM: h2/threads: never release the task outside of the task handler
  * MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy()
  * MINOR: h2: always call h2s_detach() in h2_detach()
  * BUG/MAJOR: h2: remove orphaned streams from the send list before closing
  * MINOR: h2: provide and use h2s_detach() and h2s_free()
  * CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close()
  * BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert
  * BUILD/MINOR: cli: fix a build warning introduced by last commit
  * MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available
  * MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown"
  * BUILD/MINOR: fix build when USE_THREAD is not defined
  * BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values
  * BUG/MINOR: lua: the function returns anything</changelog>
  <changelog author="kgronlund@suse.com" date="1525694400">- Update to version 1.8.8:
  * BUG/CRITICAL: h2: fix incorrect frame length check (VUL-0) (bsc#1089837)
  * MINOR: cli: Ensure the CLI always outputs an error when it should
  * BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE
  * BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors.
  * BUG/MINOR: http: Return an error in proxy mode when url2sa fails
  * BUG/MEDIUM: connection: Make sure we have a mux before calling detach().
  * BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes</changelog>
  <changelog author="kgronlund@suse.com" date="1527595200">- Update to version 1.8.9~git9.6d82e611:
  * BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)
  * BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
  * BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
  * BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
  * BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
  * BUG/MEDIUM: spoe: Flags are not encoded in network order
  * BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.
  * BUG/MINOR: spoe: Mistake in error message about SPOE configuration
  * BUG/MEDIUM: ssl: properly protect SSL cert generation
  * BUG/MEDIUM: pollers: Use a global list for fd shared between threads.
  * BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR
  * BUG/MINOR: lua: ensure large proxy IDs can be represented
  * BUG/MINOR: lua: schedule socket task upon lua connect()
  * BUG/MEDIUM: task: Don't free a task that is about to be run.
  * BUG/MINOR: map: correctly track reference to the last ref_elt being dumped
  * DOC/MINOR: clean up LUA documentation re: servers &amp; array/table.
  * BUG/MINOR: lua: Put tasks to sleep when waiting for data
  * BUG/MEDIUM: threads: Fix the sync point for more than 32 threads
  * BUG/MINOR: checks: Fix check-&gt;health computation for flapping servers
  * BUG/MINOR: config: disable http-reuse on TCP proxies
  * BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread
  * BUG/MEDIUM: h2: implement missing support for chunked encoded uploads
  * MINOR: h2: detect presence of CONNECT and/or content-length
  * BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits
  * BUG/MINOR: log: t_idle (%Ti) is not set for some requests
  * BUG/MAJOR: channel: Fix crash when trying to read from a closed socket
  * BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Update to version 1.8.10~git0.ec17d7a9:
  * MINOR: threads: Be sure to remove threads from all_threads_mask on exit
  * BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
  * BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
  * BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
  * BUG/MAJOR: ssl: Random crash with cipherlist capture
  * BUG/MINOR: lua: Segfaults with wrong usage of types.
  * BUG/MAJOR: map: fix a segfault when using http-request set-map
  * MINOR: lua: Increase debug information
  * BUG/MINOR: signals: ha_sigmask macro for multithreading
  * BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  * BUG/MEDIUM: threads: handle signal queue only in thread 0
  * BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload.
  * BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame
  * BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame
  * BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect
  * MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
  * BUG/MEDIUM: lua/socket: Buffer error, may segfault
  * BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
  * BUG/MEDIUM: lua/socket: Notification error
  * BUG/MAJOR: lua: Dead lock with sockets
  * BUG/MEDIUM: lua/socket: wrong scheduling for sockets
  * MINOR: task/notification: Is notifications registered ?
  * BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
  * BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
  * BUG/MEDIUM: lua/socket: Length required read doesn't work
  * BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
  * BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Update to version 1.8.11~git0.1d6ef58d:
  * BUG/BUILD: threads: unbreak build without threads
  * BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table</changelog>
  <changelog author="kgronlund@suse.com" date="1530100801">- Update to version 1.8.12~git0.8a200c71:
  * MINOR: stick-tables: make stktable_release() do nothing on NULL
  * BUG/MAJOR: stick_table: Complete incomplete SEGV fix</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
</package>
<package pkgid="c6655d4a5e3dbab01c700758b2025ced9b872cd3ffe06fe08f6db9b6cf9b5450" name="haproxy" arch="x86_64">
  <version epoch="0" ver="1.8.15~git0.6b6a350a" rel="lp150.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1518091200">- Add dependency on apparmor-profiles (bsc#1079985)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091201">- Update to version 1.8.4 (bsc#1080069):
  * BUG/MINOR: config: don't emit a warning when global stats is incompletely configured
  * DOC: Mention -Ws in the list of available options
  * DOC: Describe routing impact of using interface keyword on bind lines
  * MINOR: init: emit warning when -sf/-sd cannot parse argument
  * BUG/MEDIUM: standard: Fix memory leak in str2ip2()
  * BUG/MINOR: time/threads: ensure the adjusted time is always correct
  * BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side
  * BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns
  * BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs
  * BUG/MINOR: threads: Update labels array because of changes in lock_label enum
  * BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs
  * CLEANUP: Fix typo in ARGT_MSK6 comment
  * BUG/MINOR: sample: Fix output type of c_ipv62ip
  * CLEANUP: sample: Fix outdated comment about sample casts functions
  * CLEANUP: sample: Fix comment encoding of sample.c
  * BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif
  * BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread
  * BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed
  * BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag
  * BUG/MINOR: threads: always set an owner to the thread_sync pipe
  * MINOR: threads: Fix build when we're not compiling with threads.
  * BUG/MINOR: mworker: only write to pidfile if it exists
  * BUG/MEDIUM: threads/mworker: fix a race on startup
  * BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread
  * BUG/MEDIUM: epoll/threads: use one epoll_fd per thread
  * MINOR: fd: add a bitmask to indicate that an FD is known by the poller
  * BUG/MEDIUM: fd: maintain a per-thread update mask
  * BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num
  * MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache
  * MINOR: global: add some global activity counters to help debugging
  * MINOR: threads: add a MAX_THREADS define instead of LONGBITS
  * MINOR: global/threads: move cpu_map at the end of the global struct
  * MINOR: servers: Don't report duplicate dyncookies for disabled servers.
  * BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely.
  * BUG/MINOR: poll: too large size allocation for FD events
  * CONTRIB: debug: fix a few flags definitions
  * DOC: clarify the scope of ssl_fc_is_resumed
  * BUG/MEDIUM: stream: properly handle client aborts during redispatch
  * BUILD/MINOR: ancient gcc versions atomic fix
  * BUG/MEDIUM: mworker: execvp failure depending on argv[0]
  * MINOR: dns: Handle SRV record weight correctly.
  * BUG/MINOR: lua: Fix return value of Socket.settimeout
  * BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect
  * DOC: lua: Fix typos in comments of hlua_socket_receive
  * BUG/MINOR: lua: Fix default value for pattern in Socket.receive
  * BUG/MEDIUM: ssl: cache doesn't release shctx blocks
  * BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames</changelog>
  <changelog author="kgronlund@suse.com" date="1519992000">- Ensure haproxy home directory is not world readable (bsc#1077716)</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Avoid %__-type macro indirections. Remove redundant %clean
  section. Do not ignore errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1520510400">- if we lock down the permissions the home directory has to be
  owned by haproxy (bsc#1077716)</changelog>
  <changelog author="kgronlund@suse.com" date="1522065600">- Update to version 1.8.5:
  * BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected
  * BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM
  * BUG/MEDIUM: h2: properly account for DATA padding in flow control
  * DOC: don't suggest using http-server-close
  * DOC: log: more than 2 log servers are allowed
  * BUILD/BUG: enable -fno-strict-overflow by default
  * MINOR: log: stop emitting alerts when it's not possible to write on the socket
  * BUG/MEDIUM: threads/queue: wake up other threads upon dequeue
  * BUG/MINOR: tcp-check: use the server's service port as a fallback
  * BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers
  * BUG/MINOR: lua: return bad error messages
  * BUG/MINOR: spoa-example: unexpected behavior for more than 127 args
  * BUG/MINOR: cli: Fix a crash when sending a command with too many arguments
  * BUG/MINOR: seemless reload: Fix crash when an interface is specified.
  * BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically
  * BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management
  * BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled
  * BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping
  * BUG/MINOR: force-persist and ignore-persist only apply to backends
  * BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc
  * BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage
  * BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd"
  * BUG/MEDIUM: h2: also arm the h2 timeout when sending
  * BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list.
  * BUG/MINOR: session: Fix tcp-request session failure if handshake.
  * MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file
  * MINOR: systemd: Add SystemD's Protect*= options to the unit file
  * MINOR: systemd: Add section for SystemD sandboxing to unit file
  * BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk
  * BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk
  * BUG/MEDIUM: h2: always consume any trailing data after end of output buffers
  * MINOR: stats: display the number of threads in the statistics.
  * BUG/MINOR: h2: Set the target of dbuf_wait to h2c
  * MINOR: debug/pools: make DEBUG_UAF also detect underflows
  * BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF
  * DOC: cfgparse: Warn on option (tcp|http)log in backend
  * DOC: lua: new prototype for function "register_action()"
  * BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken.
  * BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible
  * BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe
  * BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st
  * BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL
  * BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable.
  * BUG/MINOR: threads: fix missing thread lock labels for 1.8</changelog>
  <changelog author="mrueckert@suse.de" date="1523102400">- Update to version 1.8.7:
  * [RELEASE] Released version 1.8.7
  * MINOR: servers: Support alphanumeric characters for the server templates names
  * BUG/MAJOR: cache: always initialize newly created objects
  * [RELEASE] Released version 1.8.6
  * BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk
  * BUG/MINOR: spoe: Initialize variables used during conf parsing before any check
  * BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks
  * BUG/MINOR: fd: Don't clear the update_mask in fd_insert.
  * BUG/MINOR: cache: fix "show cache" output
  * BUG/MINOR: email-alert: Set the mailer port during alert initialization
  * BUG/MINOR: checks: check the conn_stream's readiness and not the connection
  * BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked
  * BUILD/MINOR: threads: always export thread_sync_io_handler()
  * BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error
  * BUG/MEDIUM: h2/threads: never release the task outside of the task handler
  * MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy()
  * MINOR: h2: always call h2s_detach() in h2_detach()
  * BUG/MAJOR: h2: remove orphaned streams from the send list before closing
  * MINOR: h2: provide and use h2s_detach() and h2s_free()
  * CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close()
  * BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert
  * BUILD/MINOR: cli: fix a build warning introduced by last commit
  * MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available
  * MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown"
  * BUILD/MINOR: fix build when USE_THREAD is not defined
  * BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values
  * BUG/MINOR: lua: the function returns anything</changelog>
  <changelog author="kgronlund@suse.com" date="1525694400">- Update to version 1.8.8:
  * BUG/CRITICAL: h2: fix incorrect frame length check (VUL-0) (bsc#1089837)
  * MINOR: cli: Ensure the CLI always outputs an error when it should
  * BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE
  * BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors.
  * BUG/MINOR: http: Return an error in proxy mode when url2sa fails
  * BUG/MEDIUM: connection: Make sure we have a mux before calling detach().
  * BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes</changelog>
  <changelog author="kgronlund@suse.com" date="1527595200">- Update to version 1.8.9~git9.6d82e611:
  * BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)
  * BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
  * BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
  * BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
  * BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
  * BUG/MEDIUM: spoe: Flags are not encoded in network order
  * BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.
  * BUG/MINOR: spoe: Mistake in error message about SPOE configuration
  * BUG/MEDIUM: ssl: properly protect SSL cert generation
  * BUG/MEDIUM: pollers: Use a global list for fd shared between threads.
  * BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR
  * BUG/MINOR: lua: ensure large proxy IDs can be represented
  * BUG/MINOR: lua: schedule socket task upon lua connect()
  * BUG/MEDIUM: task: Don't free a task that is about to be run.
  * BUG/MINOR: map: correctly track reference to the last ref_elt being dumped
  * DOC/MINOR: clean up LUA documentation re: servers &amp; array/table.
  * BUG/MINOR: lua: Put tasks to sleep when waiting for data
  * BUG/MEDIUM: threads: Fix the sync point for more than 32 threads
  * BUG/MINOR: checks: Fix check-&gt;health computation for flapping servers
  * BUG/MINOR: config: disable http-reuse on TCP proxies
  * BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread
  * BUG/MEDIUM: h2: implement missing support for chunked encoded uploads
  * MINOR: h2: detect presence of CONNECT and/or content-length
  * BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits
  * BUG/MINOR: log: t_idle (%Ti) is not set for some requests
  * BUG/MAJOR: channel: Fix crash when trying to read from a closed socket
  * BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Update to version 1.8.10~git0.ec17d7a9:
  * MINOR: threads: Be sure to remove threads from all_threads_mask on exit
  * BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
  * BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
  * BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
  * BUG/MAJOR: ssl: Random crash with cipherlist capture
  * BUG/MINOR: lua: Segfaults with wrong usage of types.
  * BUG/MAJOR: map: fix a segfault when using http-request set-map
  * MINOR: lua: Increase debug information
  * BUG/MINOR: signals: ha_sigmask macro for multithreading
  * BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  * BUG/MEDIUM: threads: handle signal queue only in thread 0
  * BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload.
  * BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame
  * BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame
  * BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect
  * MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
  * BUG/MEDIUM: lua/socket: Buffer error, may segfault
  * BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
  * BUG/MEDIUM: lua/socket: Notification error
  * BUG/MAJOR: lua: Dead lock with sockets
  * BUG/MEDIUM: lua/socket: wrong scheduling for sockets
  * MINOR: task/notification: Is notifications registered ?
  * BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
  * BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
  * BUG/MEDIUM: lua/socket: Length required read doesn't work
  * BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
  * BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Update to version 1.8.11~git0.1d6ef58d:
  * BUG/BUILD: threads: unbreak build without threads
  * BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table</changelog>
  <changelog author="kgronlund@suse.com" date="1530100801">- Update to version 1.8.12~git0.8a200c71:
  * MINOR: stick-tables: make stktable_release() do nothing on NULL
  * BUG/MAJOR: stick_table: Complete incomplete SEGV fix</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
  <changelog author="kgronlund@suse.com" date="1545048000">- Update to version 1.8.15~git0.6b6a350a: (bsc#1119419) (CVE-2018-20103) (VUL-0) (bsc#1119368) (CVE-2018-20102)
  * DOC: Update configuration doc about the maximum number of stick counters.
  * BUG: dns: Fix off-by-one write in dns_validate_dns_response()
  * BUG: dns: Fix out-of-bounds read via signedness error in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_read_name()
  * BUG: dns: Prevent stack-exhaustion via recursion loop in dns_read_name
  * DOC: refer to check-sni in the documentation of sni
  * DOC: clarify that check-sni needs an argument.
  * MINOR: servers: Free [idle|safe|priv]_conns on exit.
  * MINOR: stats: report the number of active jobs and listeners in "show info"
  * BUG/MINOR: mux-h2: advertise a larger connection window size
  * BUG/MINOR: mux-h2: refrain from muxing during the preface
  * BUG/MINOR: hpack: fix off-by-one in header name encoding length calculation
  * BUG/MEDIUM: sample: Don't treat SMP_T_METH as SMP_T_STR.
  * BUG/MINOR: lb-map: fix unprotected update to server's score
  * BUG/MINOR: cfgparse: Fix the call to post parser of the last sections parsed
  * BUG/MINOR: cfgparse: Fix transition between 2 sections with the same name
  * BUG/MINOR: ssl: ssl_sock_parse_clienthello ignores session id
  * BUG/MEDIUM: hpack: fix encoding of "accept-ranges" field
  * BUG/MINOR: config: Copy default error messages when parsing of a backend starts
  * BUG/MEDIUM: Make sure stksess is properly aligned.
  * BUG/MINOR: config: better detect the presence of the h2 pattern in npn/alpn
  * BUG/MEDIUM: auth/threads: use of crypt() is not thread-safe
  * BUG/MAJOR: http: http_txn_get_path() may deference an inexisting buffer
  * BUG/MINOR: only auto-prefer last server if lb-alg is non-deterministic
  * BUG/MINOR: only mark connections private if NTLM is detected
  * DOC: cache: Missing information about "total-max-size"
  * BUG/MINOR: ssl: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Crashes with "total-max-size" &gt; 2047(MB).
  * BUG/MEDIUM: h2: Close connection if no stream is left an GOAWAY was sent.
  * BUG/MEDIUM: pools: Fix the usage of mmap()) with DEBUG_UAF.
  * DOC: fix reference to map files in MAINTAINERS
  * MINOR: peers: use defines instead of enums to appease clang.
  * MINOR: cfgparse: Write 130 as 128 as 0x82 and 0x80.
  * MINOR: server: Use memcpy() instead of strncpy().
  * CLEANUP: stick-tables: Remove unneeded double (()) around conditional clause
  * MINOR: lua: all functions calling lua_yieldk() may return
  * BUG/MEDIUM: threads: make sure threads_want_sync is marked volatile
  * BUG/MEDIUM: threads: fix thread_release() at the end of the rendez-vous point
  * BUG/MEDIUM: stream: don't crash on out-of-memory
  * BUG/MEDIUM: mworker: segfault receiving SIGUSR1 followed by SIGTERM.
  * BUG/MINOR: checks: queues null-deref
  * BUG/MEDIUM: Cur/CumSslConns counters not threadsafe.
  * MEDIUM: ssl: add support for ciphersuites option for TLSv1.3
  * BUG/MEDIUM: buffers: Make sure we don't wrap in buffer_insert_line2/replace2.
  * BUG/MINOR: backend: check that the mux installed properly
  * BUG/MINOR: connection: avoid null pointer dereference in send-proxy-v2
  * DOC: clarify force-private-cache is an option
  * MINOR: threads: Make sure threads_sync_pipe is initialized before using it.</changelog>
</package>
<package pkgid="873eacc4add4590958396c4903d5947ddf26a283871e2cb540dc5a2ee2c47916" name="haproxy" arch="x86_64">
  <version epoch="0" ver="1.8.17~git0.e89d25b2" rel="lp150.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 1.8.4 (bsc#1080069):
  * BUG/MINOR: config: don't emit a warning when global stats is incompletely configured
  * DOC: Mention -Ws in the list of available options
  * DOC: Describe routing impact of using interface keyword on bind lines
  * MINOR: init: emit warning when -sf/-sd cannot parse argument
  * BUG/MEDIUM: standard: Fix memory leak in str2ip2()
  * BUG/MINOR: time/threads: ensure the adjusted time is always correct
  * BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side
  * BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns
  * BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs
  * BUG/MINOR: threads: Update labels array because of changes in lock_label enum
  * BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs
  * CLEANUP: Fix typo in ARGT_MSK6 comment
  * BUG/MINOR: sample: Fix output type of c_ipv62ip
  * CLEANUP: sample: Fix outdated comment about sample casts functions
  * CLEANUP: sample: Fix comment encoding of sample.c
  * BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
  * MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif
  * BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread
  * BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed
  * BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag
  * BUG/MINOR: threads: always set an owner to the thread_sync pipe
  * MINOR: threads: Fix build when we're not compiling with threads.
  * BUG/MINOR: mworker: only write to pidfile if it exists
  * BUG/MEDIUM: threads/mworker: fix a race on startup
  * BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread
  * BUG/MEDIUM: epoll/threads: use one epoll_fd per thread
  * MINOR: fd: add a bitmask to indicate that an FD is known by the poller
  * BUG/MEDIUM: fd: maintain a per-thread update mask
  * BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num
  * MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache
  * MINOR: global: add some global activity counters to help debugging
  * MINOR: threads: add a MAX_THREADS define instead of LONGBITS
  * MINOR: global/threads: move cpu_map at the end of the global struct
  * MINOR: servers: Don't report duplicate dyncookies for disabled servers.
  * BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely.
  * BUG/MINOR: poll: too large size allocation for FD events
  * CONTRIB: debug: fix a few flags definitions
  * DOC: clarify the scope of ssl_fc_is_resumed
  * BUG/MEDIUM: stream: properly handle client aborts during redispatch
  * BUILD/MINOR: ancient gcc versions atomic fix
  * BUG/MEDIUM: mworker: execvp failure depending on argv[0]
  * MINOR: dns: Handle SRV record weight correctly.
  * BUG/MINOR: lua: Fix return value of Socket.settimeout
  * BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect
  * DOC: lua: Fix typos in comments of hlua_socket_receive
  * BUG/MINOR: lua: Fix default value for pattern in Socket.receive
  * BUG/MEDIUM: ssl: cache doesn't release shctx blocks
  * BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames</changelog>
  <changelog author="kgronlund@suse.com" date="1519992000">- Ensure haproxy home directory is not world readable (bsc#1077716)</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Avoid %__-type macro indirections. Remove redundant %clean
  section. Do not ignore errors from useradd.</changelog>
  <changelog author="mrueckert@suse.de" date="1520510400">- if we lock down the permissions the home directory has to be
  owned by haproxy (bsc#1077716)</changelog>
  <changelog author="kgronlund@suse.com" date="1522065600">- Update to version 1.8.5:
  * BUG/MINOR: listener: Don't decrease actconn twice when a new session is rejected
  * BUG/MINOR: h2: ensure we can never send an RST_STREAM in response to an RST_STREAM
  * BUG/MEDIUM: h2: properly account for DATA padding in flow control
  * DOC: don't suggest using http-server-close
  * DOC: log: more than 2 log servers are allowed
  * BUILD/BUG: enable -fno-strict-overflow by default
  * MINOR: log: stop emitting alerts when it's not possible to write on the socket
  * BUG/MEDIUM: threads/queue: wake up other threads upon dequeue
  * BUG/MINOR: tcp-check: use the server's service port as a fallback
  * BUG/MEDIUM: tcp-check: single connect rule can't detect DOWN servers
  * BUG/MINOR: lua: return bad error messages
  * BUG/MINOR: spoa-example: unexpected behavior for more than 127 args
  * BUG/MINOR: cli: Fix a crash when sending a command with too many arguments
  * BUG/MINOR: seemless reload: Fix crash when an interface is specified.
  * BUG/MINOR: dns: don't downgrade DNS accepted payload size automatically
  * BUG/MAJOR: threads/queue: Fix thread-safety issues on the queues management
  * BUG/MEDIUM: threads/unix: Fix a deadlock when a listener is temporarily disabled
  * BUG/MEDIUM: spoe: Remove idle applets from idle list when HAProxy is stopping
  * BUG/MINOR: force-persist and ignore-persist only apply to backends
  * BUG/MEDIUM: fix a 100% cpu usage with cpu-map and nbthread/nbproc
  * BUG/MINOR: cli: Fix a typo in the 'set rate-limit' usage
  * BUG/MINOR: cli: Fix a crash when passing a negative or too large value to "show fd"
  * BUG/MEDIUM: h2: also arm the h2 timeout when sending
  * BUG/MINOR: unix: Don't mess up when removing the socket from the xfer_sock_list.
  * BUG/MINOR: session: Fix tcp-request session failure if handshake.
  * MINOR: systemd: Add SystemD's SystemCallFilter option to the unit file
  * MINOR: systemd: Add SystemD's Protect*= options to the unit file
  * MINOR: systemd: Add section for SystemD sandboxing to unit file
  * BUG/MEDIUM: buffer: Fix the wrapping case in bi_putblk
  * BUG/MEDIUM: buffer: Fix the wrapping case in bo_putblk
  * BUG/MEDIUM: h2: always consume any trailing data after end of output buffers
  * MINOR: stats: display the number of threads in the statistics.
  * BUG/MINOR: h2: Set the target of dbuf_wait to h2c
  * MINOR: debug/pools: make DEBUG_UAF also detect underflows
  * BUG/MINOR: debug/pools: properly handle out-of-memory when building with DEBUG_UAF
  * DOC: cfgparse: Warn on option (tcp|http)log in backend
  * DOC: lua: new prototype for function "register_action()"
  * BUG/MEDIUM: ssl/sample: ssl_bc_* fetch keywords are broken.
  * BUG/MEDIUM: http: Switch the HTTP response in tunnel mode as earlier as possible
  * BUG/MINOR: ssl/threads: Make management of the TLS ticket keys files thread-safe
  * BUG/MINOR: init: Add missing brackets in the code parsing -sf/-st
  * BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL
  * BUG/MEDIUM: ssl: Don't always treat SSL_ERROR_SYSCALL as unrecovarable.
  * BUG/MINOR: threads: fix missing thread lock labels for 1.8</changelog>
  <changelog author="mrueckert@suse.de" date="1523102400">- Update to version 1.8.7:
  * [RELEASE] Released version 1.8.7
  * MINOR: servers: Support alphanumeric characters for the server templates names
  * BUG/MAJOR: cache: always initialize newly created objects
  * [RELEASE] Released version 1.8.6
  * BUG/MINOR: spoe: Don't release the context buffer in .check_timeouts callbaclk
  * BUG/MINOR: spoe: Initialize variables used during conf parsing before any check
  * BUG/MAJOR: cache: fix random crashes caused by incorrect delete() on non-first blocks
  * BUG/MINOR: fd: Don't clear the update_mask in fd_insert.
  * BUG/MINOR: cache: fix "show cache" output
  * BUG/MINOR: email-alert: Set the mailer port during alert initialization
  * BUG/MINOR: checks: check the conn_stream's readiness and not the connection
  * BUG/MEDIUM: h2: always add a stream to the send or fctl list when blocked
  * BUILD/MINOR: threads: always export thread_sync_io_handler()
  * BUG/MEDIUM: h2: don't consider pending data on detach if connection is in error
  * BUG/MEDIUM: h2/threads: never release the task outside of the task handler
  * MINOR: h2: fuse h2s_detach() and h2s_free() into h2s_destroy()
  * MINOR: h2: always call h2s_detach() in h2_detach()
  * BUG/MAJOR: h2: remove orphaned streams from the send list before closing
  * MINOR: h2: provide and use h2s_detach() and h2s_free()
  * CLEANUP: h2: rename misleading h2c_stream_close() to h2s_close()
  * BUG/MINOR: hpack: fix harmless use of uninitialized value in hpack_dht_insert
  * BUILD/MINOR: cli: fix a build warning introduced by last commit
  * MINOR: cli: make "show fd" report the mux and mux_ctx pointers when available
  * MINOR: cli/threads: make "show fd" report thread_sync_io_handler instead of "unknown"
  * BUILD/MINOR: fix build when USE_THREAD is not defined
  * BUG/MINOR: lua funtion hlua_socket_settimeout don't check negative values
  * BUG/MINOR: lua: the function returns anything</changelog>
  <changelog author="kgronlund@suse.com" date="1525694400">- Update to version 1.8.8:
  * BUG/CRITICAL: h2: fix incorrect frame length check (VUL-0) (bsc#1089837)
  * MINOR: cli: Ensure the CLI always outputs an error when it should
  * BUG/MINOR: cli: Guard against NULL messages when using CLI_ST_PRINT_FREE
  * BUG/MEDIUM: kqueue: When adding new events, provide an output to get errors.
  * BUG/MINOR: http: Return an error in proxy mode when url2sa fails
  * BUG/MEDIUM: connection: Make sure we have a mux before calling detach().
  * BUG/MEDIUM: threads: Fix the max/min calculation because of name clashes</changelog>
  <changelog author="kgronlund@suse.com" date="1527595200">- Update to version 1.8.9~git9.6d82e611:
  * BUG/MEDIUM: cache: don't cache when an Authorization header is present (VUL-1) (bsc#1094846) (CVE-2018-11469)
  * BUG/MEDIUM: dns: Delay the attempt to run a DNS resolution on check failure.
  * BUG/MINOR: ssl/lua: prevent lua from affecting automatic maxconn computation
  * BUG/MEDIUM: contrib/modsecurity: Use network order to encode/decode flags
  * BUG/MEDIUM: contrib/mod_defender: Use network order to encode/decode flags
  * BUG/MEDIUM: spoe: Flags are not encoded in network order
  * BUG/MINOR: lua: Socket.send threw runtime error: 'close' needs 1 arguments.
  * BUG/MINOR: spoe: Mistake in error message about SPOE configuration
  * BUG/MEDIUM: ssl: properly protect SSL cert generation
  * BUG/MEDIUM: pollers: Use a global list for fd shared between threads.
  * BUG/MEDIUM: http: don't always abort transfers on CF_SHUTR
  * BUG/MINOR: lua: ensure large proxy IDs can be represented
  * BUG/MINOR: lua: schedule socket task upon lua connect()
  * BUG/MEDIUM: task: Don't free a task that is about to be run.
  * BUG/MINOR: map: correctly track reference to the last ref_elt being dumped
  * DOC/MINOR: clean up LUA documentation re: servers &amp; array/table.
  * BUG/MINOR: lua: Put tasks to sleep when waiting for data
  * BUG/MEDIUM: threads: Fix the sync point for more than 32 threads
  * BUG/MINOR: checks: Fix check-&gt;health computation for flapping servers
  * BUG/MINOR: config: disable http-reuse on TCP proxies
  * BUG/MINOR: lua/threads: Make lua's tasks sticky to the current thread
  * BUG/MEDIUM: h2: implement missing support for chunked encoded uploads
  * MINOR: h2: detect presence of CONNECT and/or content-length
  * BUG/MEDIUM: lua: Fix segmentation fault if a Lua task exits
  * BUG/MINOR: log: t_idle (%Ti) is not set for some requests
  * BUG/MAJOR: channel: Fix crash when trying to read from a closed socket
  * BUG/MINOR: pattern: Add a missing HA_SPIN_INIT() in pat_ref_newid()</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Update to version 1.8.10~git0.ec17d7a9:
  * MINOR: threads: Be sure to remove threads from all_threads_mask on exit
  * BUG/MEDIUM: threads: Use the sync point to check active jobs and exit
  * BUG/MEDIUM: fd: Don't modify the update_mask in fd_dodelete().
  * BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
  * BUG/MAJOR: ssl: Random crash with cipherlist capture
  * BUG/MINOR: lua: Segfaults with wrong usage of types.
  * BUG/MAJOR: map: fix a segfault when using http-request set-map
  * MINOR: lua: Increase debug information
  * BUG/MINOR: signals: ha_sigmask macro for multithreading
  * BUG/MINOR: don't ignore SIG{BUS,FPE,ILL,SEGV} during signal processing
  * BUG/MEDIUM: threads: handle signal queue only in thread 0
  * BUG/MINOR: unix: Make sure we can transfer abns sockets on seamless reload.
  * BUG/MINOR: contrib/modsecurity: update pointer on the end of the frame
  * BUG/MINOR: contrib/mod_defender: update pointer on the end of the frame
  * BUG/MINOR: contrib/modsecurity: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/mod_defender: Don't reset the status code during disconnect
  * BUG/MINOR: contrib/spoa_example: Don't reset the status code during disconnect
  * MAJOR: spoe: upgrade the SPOP version to 2.0 and remove the support for 1.0
  * BUG/MEDIUM: lua/socket: Buffer error, may segfault
  * BUG/MEDIUM: lua/socket: Sheduling error on write: may dead-lock
  * BUG/MEDIUM: lua/socket: Notification error
  * BUG/MAJOR: lua: Dead lock with sockets
  * BUG/MEDIUM: lua/socket: wrong scheduling for sockets
  * MINOR: task/notification: Is notifications registered ?
  * BUG/MEDIUM: spoe: Return an error when the wrong ACK is received in sync mode
  * BUG/MEDIUM: stick-tables: Decrement ref_cnt in table_* converters
  * BUG/MEDIUM: lua/socket: Length required read doesn't work
  * BUG/MEDIUM: servers: Add srv_addr default placeholder to the state file
  * BUG/MEDIUM: fd: Only check update_mask against all_threads_mask.</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Update to version 1.8.11~git0.1d6ef58d:
  * BUG/BUILD: threads: unbreak build without threads
  * BUG/MAJOR: Stick-tables crash with segfault when the key is not in the stick-table</changelog>
  <changelog author="kgronlund@suse.com" date="1530100801">- Update to version 1.8.12~git0.8a200c71:
  * MINOR: stick-tables: make stktable_release() do nothing on NULL
  * BUG/MAJOR: stick_table: Complete incomplete SEGV fix</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.8.13~git4.c1bfcd00:
  * MINOR: dns: new DNS options to allow/prevent IP address duplication
  * MINOR: dns: fix wrong score computation in dns_get_ip_from_response
  * BUG/MEDIUM: queue: prevent a backup server from draining the proxy's connections
  * BUG/MEDIUM: servers: check the queues once enabling a server
  * MEDIUM: proxy_protocol: Convert IPs to v6 when protocols are mixed
  * BUG/MEDIUM: threads: unbreak "bind" referencing an incorrect thread number
  * MINOR: threads: move "nbthread" parsing to hathreads.c
  * BUG/MEDIUM: threads: properly fix nbthreads == MAX_THREADS
  * BUG/MINOR: threads: Handle nbthread == MAX_THREADS.
  * BUG/MINOR: config: stick-table is not supported in defaults section
  * BUG/MEDIUM: h2: prevent orphaned streams from blocking a connection forever
  * BUG/MEDIUM: threads/sync: use sched_yield when available
  * BUG/MINOR: servers: Don't make "server" in a frontend fatal.
  * BUG/MEDIUM: stats: don't ask for more data as long as we're responding
  * BUG/MEDIUM: stream-int: don't immediately enable reading when the buffer was reportedly full
  * MINOR: h2: add the error code and the max/last stream IDs to "show fd"
  * BUG/MEDIUM: threads: Fix the exit condition of the thread barrier
  * MINOR: debug: Add checks for conn_stream flags
  * MINOR: debug: Add check for CO_FL_WILL_UPDATE
  * BUG/MINOR: http: Set brackets for the unlikely macro at the right place
  * BUG/MEDIUM: h2: make sure the last stream closes the connection after a timeout
  * BUG/MEDIUM: h2: never leave pending data in the output buffer on close
  * BUG/MEDIUM: h2: don't accept new streams if conn_streams are still in excess
  * MINOR: h2: add the mux and demux buffer lengths on "show fd"
  * MINOR: h2: keep a count of the number of conn_streams attached to the mux
  * BUG/MINOR: h2: remove accidental debug code introduced with show_fd function
  * MINOR: h2: implement a basic "show_fd" function
  * MINOR: mux: add a "show_fd" function to dump debugging information for "show fd"
  * BUG/MINOR: ssl: properly ref-count the tls_keys entries
  * MINOR: systemd: consider exit status 143 as successful</changelog>
  <changelog author="kgronlund@suse.com" date="1534507200">- Require apparmor-abstractions to reduce dependencies (bsc#1100787)</changelog>
  <changelog author="mrueckert@suse.de" date="1537444800">- Update to version 1.8.14~git0.52e4d43b: (bsc#1108683) (CVE-2018-14645)
  * [RELEASE] Released version 1.8.14
  * BUG/CRITICAL: hpack: fix improper sign check on the header index value
  * BUG/MINOR: cli: make sure the "getsock" command is only called on connections
  * BUG/MINOR: tools: fix set_net_port() / set_host_port() on IPv4
  * BUG/MEDIUM: patterns: fix possible double free when reloading a pattern list
  * DOC: Fix typos in lua documentation
  * BUG/MINOR: server: Crash when setting FQDN via CLI.
  * BUG/MAJOR: kqueue: Don't reset the changes number by accident.
  * BUG/MEDIUM: snapshot: take the proxy's lock while dumping errors
  * BUG/MINOR: http/threads: atomically increment the error snapshot ID
  * BUG/MINOR: dns: check and link servers' resolvers right after config parsing
  * BUG/MEDIUM: h2: fix risk of memory leak on malformated wrapped frames
  * BUG/MEDIUM: session: fix reporting of handshake processing time in the logs
  * BUG/MINOR: stream: use atomic increments for the request counter
  * MINOR: thread: implement HA_ATOMIC_XADD()
  * BUG/MEDIUM: ECC cert should work with TLS &lt; v1.2 and openssl &gt;= 1.1.1
  * BUG/MEDIUM: dns/server: fix incomatibility between SRV resolution and server state file
  * BUG/MEDIUM: hlua: Don't call RESET_SAFE_LJMP if SET_SAFE_LJMP returns 0.
  * BUG/MAJOR: thread: lua: Wrong SSL context initialization.
  * BUG/MEDIUM: hlua: Make sure we drain the output buffer when done.
  * BUG/MEDIUM: lua: reset lua transaction between http requests
  * BUG/MEDIUM: mux_pt: dereference the connection with care in mux_pt_wake()
  * BUG/MINOR: lua: Bad HTTP client request duration.
  * BUG/MEDIUM: unix: provide a -&gt;drain() function
  * DOC: Fix spelling error in configuration doc
  * BUG/MEDIUM: cli/threads: protect some server commands against concurrent operations
  * BUG/MEDIUM: cli/threads: protect all "proxy" commands against concurrent updates
  * BUG/MEDIUM: lua: socket timeouts are not applied
  * DOC: ssl: Use consistent naming for TLS protocols
  * DOC: dns: explain set server ... fqdn requires resolver
  * BUG/MINOR: map: fix map_regm with backref
  * BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.
  * BUG/MEDIUM: ssl: fix missing error loading a keytype cert from a bundle.
  * BUG/MINOR: ssl: empty connections reported as errors.
  * BUG/MEDIUM: cli: make "show fd" thread-safe
  * MEDIUM: hathreads: implement a more flexible rendez-vous point
  * BUG/MEDIUM: threads: fix the no-thread case after the change to the sync point
  * MINOR: threads: add more consistency between certain variables in no-thread case
  * BUG/MEDIUM: threads: fix the double CAS implementation for ARMv7
  * MINOR: threads: Introduce double-width CAS on x86_64 and arm.
  * BUG/MEDIUM: lua: possible CLOSE-WAIT state with '\n' headers</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444801">- guard all parts referring to systemd to fix build on sle 11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444802">- only use network namespaces on 12.x and newer, failed to build on
  sle11</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444803">- only reload the apparmor profile on newer distros, seems older
  distros do not have apparmor-rpm-macros yet</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1537444804">- also fix the systemd case for the apparmor_reload change</changelog>
  <changelog author="kgronlund@suse.com" date="1545048000">- Update to version 1.8.15~git0.6b6a350a: (bsc#1119419) (CVE-2018-20103) (VUL-0) (bsc#1119368) (CVE-2018-20102)
  * DOC: Update configuration doc about the maximum number of stick counters.
  * BUG: dns: Fix off-by-one write in dns_validate_dns_response()
  * BUG: dns: Fix out-of-bounds read via signedness error in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_read_name()
  * BUG: dns: Prevent stack-exhaustion via recursion loop in dns_read_name
  * DOC: refer to check-sni in the documentation of sni
  * DOC: clarify that check-sni needs an argument.
  * MINOR: servers: Free [idle|safe|priv]_conns on exit.
  * MINOR: stats: report the number of active jobs and listeners in "show info"
  * BUG/MINOR: mux-h2: advertise a larger connection window size
  * BUG/MINOR: mux-h2: refrain from muxing during the preface
  * BUG/MINOR: hpack: fix off-by-one in header name encoding length calculation
  * BUG/MEDIUM: sample: Don't treat SMP_T_METH as SMP_T_STR.
  * BUG/MINOR: lb-map: fix unprotected update to server's score
  * BUG/MINOR: cfgparse: Fix the call to post parser of the last sections parsed
  * BUG/MINOR: cfgparse: Fix transition between 2 sections with the same name
  * BUG/MINOR: ssl: ssl_sock_parse_clienthello ignores session id
  * BUG/MEDIUM: hpack: fix encoding of "accept-ranges" field
  * BUG/MINOR: config: Copy default error messages when parsing of a backend starts
  * BUG/MEDIUM: Make sure stksess is properly aligned.
  * BUG/MINOR: config: better detect the presence of the h2 pattern in npn/alpn
  * BUG/MEDIUM: auth/threads: use of crypt() is not thread-safe
  * BUG/MAJOR: http: http_txn_get_path() may deference an inexisting buffer
  * BUG/MINOR: only auto-prefer last server if lb-alg is non-deterministic
  * BUG/MINOR: only mark connections private if NTLM is detected
  * DOC: cache: Missing information about "total-max-size"
  * BUG/MINOR: ssl: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Crashes with "total-max-size" &gt; 2047(MB).
  * BUG/MEDIUM: h2: Close connection if no stream is left an GOAWAY was sent.
  * BUG/MEDIUM: pools: Fix the usage of mmap()) with DEBUG_UAF.
  * DOC: fix reference to map files in MAINTAINERS
  * MINOR: peers: use defines instead of enums to appease clang.
  * MINOR: cfgparse: Write 130 as 128 as 0x82 and 0x80.
  * MINOR: server: Use memcpy() instead of strncpy().
  * CLEANUP: stick-tables: Remove unneeded double (()) around conditional clause
  * MINOR: lua: all functions calling lua_yieldk() may return
  * BUG/MEDIUM: threads: make sure threads_want_sync is marked volatile
  * BUG/MEDIUM: threads: fix thread_release() at the end of the rendez-vous point
  * BUG/MEDIUM: stream: don't crash on out-of-memory
  * BUG/MEDIUM: mworker: segfault receiving SIGUSR1 followed by SIGTERM.
  * BUG/MINOR: checks: queues null-deref
  * BUG/MEDIUM: Cur/CumSslConns counters not threadsafe.
  * MEDIUM: ssl: add support for ciphersuites option for TLSv1.3
  * BUG/MEDIUM: buffers: Make sure we don't wrap in buffer_insert_line2/replace2.
  * BUG/MINOR: backend: check that the mux installed properly
  * BUG/MINOR: connection: avoid null pointer dereference in send-proxy-v2
  * DOC: clarify force-private-cache is an option
  * MINOR: threads: Make sure threads_sync_pipe is initialized before using it.</changelog>
  <changelog author="kgronlund@suse.com" date="1547121600">- Update to version 1.8.17~git0.e89d25b2 (bsc#1121283) (CVE-2018-20615):
  * BUG/CRITICAL: mux-h2: re-check the frame length when PRIORITY is used
  * BUG/MEDIUM: lua: dead lock when Lua tasks are trigerred
  * BUG/MINOR: lua: bad args are returned for Lua actions
  * BUG/MINOR: lua: Return an error if a legacy HTTP applet doesn't send anything
  * BUG/MEDIUM: cli: make "show sess" really thread-safe
  * MINOR: stream/cli: report more info about the HTTP messages on "show sess all"
  * MINOR: stream/cli: fix the location of the waiting flag in "show sess all"
  * MINOR: lb: allow redispatch when using consistent hash
  * BUG/MEDIUM: server: Also copy "check-sni" for server templates.
  * BUG/MEDIUM: mux-h2: mark that we have too many CS once we have more than the max
  * MINOR: mux-h2: only increase the connection window with the first update
  * BUG/MAJOR: stream-int: Update the stream expiration date in stream_int_notify()
  * BUG/MEDIUM: dns: overflowed dns name start position causing invalid dns error
  * BUG/MEDIUM: dns: Don't prevent reading the last byte of the payload in dns_validate_response()
  * BUG/MINOR: logs: leave startup-logs global and not per-thread</changelog>
</package>
<package pkgid="0fed7453ade0911ad7ed74733258ae57fdea8bed29d78ba8f6ec3a9e9d426f7a" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1505217600">- minimize the packages we really need for this package:
  - adds hawk2-nodev.patch
  - use %{rubygem } syntax for BuildRequires/Requires
  - reorder requires to match the Gemfile
  - drop unused BR for nokogiri
  - run "bundle.%{rb_ruby_suffix} exec bin/rails version"
    to verify that we have everything needed for the Gemfile</changelog>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
</package>
<package pkgid="ce1053c56988617498a8a47d8d4816ca6a530c7153405e0067a8a935f54e4c74" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.7.1"/>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
</package>
<package pkgid="d26827a42b255a3822e845101cdafc434527fddda7becb70905bb5aff9504bc0" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.7.1"/>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
</package>
<package pkgid="df49c7bacb1164b968d1d6306611ce923781442f43dbf377e3642e63e4e5397f" name="hdjmod-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.28_k4.12.14_lp150.12.13" rel="lp150.3.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
</package>
<package pkgid="1fc13bf08403f6962a1a6a3cc6ff778ac64671afa944cada5a8392bfeac9312a" name="hg-git" arch="noarch">
  <version epoch="0" ver="0.8.11" rel="lp150.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1364299200">- update to version 0.4.0
  - Add test to show dulwich fault on invalid timezone data
  - scrub bad timezone values before dulwich sees them
  - push: provide better output about changed references
  - push: add more output about what was added
  - git_handler: add bookmark compatibility with new bmstore
  - git_handler: defend against unexported revisions in tag
    exporting
  - tests: use fn_git_commit in test-encoding.t
  - tests: make test-encoding.t compatible with git 1.8.0
  - tests: remove filterhash from test-incoming.t
  - tests: remove mercurial version check from test-incoming.t
  - tests: remove mercurial version check from
    test-pull-after-strip.t
  - tests: convert echos to comments
  - tests: avoid changing the current directory
  - tests: extract git command-line client and dulwich requirements
    into testutil
  - tests: let git init create directories when applicable
  - tests: add check for dulwich in test-url-parsing.py
  - tests: extract commonly used commit/tag functions into testutil
    library
  - tests: extract extension configuration into a testutil library</changelog>
  <changelog author="ohering@suse.de" date="1385985600">- Update to 503d403fc040 to fix interface to python-dulwich 0.9.1
  - Export Git objects from incremental Mercurial changes
  - overlaymanifest: add iteritems(), used by recent hg versions
  - Only export modified Git trees
  - Fixes #54 | option branch_bookmark_suffix doesn't move bookmarks
  - Make the path part of URL contain a leading slash only if it's not
  - git_handler: skip exporting hg tags whose names are not valid as git
  - test-tree-decomposition: work around git command format changes
  - Update test output to handle 65d8a43b adding some more objects.
  - test-subrepos: cope with unsorted output in .hgsub
  - Upgraded to use latest version of dulwich (0.9.1).
  - Updated `setup.py` file to reflect requirement on newer version of
  - git_handler: clean up trailing whitespace
  - git_handler: fix bugs introduced by 47df57f2bb2b which could never
  - overlays: fix incoming support for hg 2.8
  - Fix for #68 | Use .gitignore files (with proper semantics)</changelog>
  <changelog author="gber@opensuse.org" date="1386072000">- bump version to 0.4.0_hg20131127</changelog>
  <changelog author="gber@opensuse.org" date="1387281600">- update to version 0.5.0
  - test-subrepos.t: hide output from newer hg versions about
    active bookmarks
  - testedwith: drop 2.3.1, which has at least one test failure
  - testedwith: add 2.8.1
  - gitignore: gate feature on dirstate having rootcache and ignore
    having readpats
  - git_handler: iterate over new refs in sorted order to stabilize
    test output
  - overlay: add kludge to make sure we only ever give hexshas to
    dulwich
  - test-timezone.t: add missing (but needed) trailing whitespace
  - tests: dulwich is now smarter about sending fewer objects,
    update output
  - setup: bump dep on dulwich to 0.9.4
  - git-handler: turn refs from None to {} so that empty git repos
    can convert</changelog>
  <changelog author="gber@opensuse.org" date="1401105600">- update to version 0.6.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.0 for a
    detailed list of changes</changelog>
  <changelog author="gber@opensuse.org" date="1408363200">- update to version 0.6.1
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.1 for a
    detailed list of changes</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.7.0
  * no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.7.0 for a
    detailed list of changes
- Remove unzip build requirement; not needed
- Cleanup specfile
- Remove depreciated -f INSTALLED_FILES and --record-rpm=INSTALLED_FILES
  and use {python_sitelib} instead
- Remove "env CFLAGS="$RPM_OPT_FLAGS""; useless for a noarch package</changelog>
  <changelog author="gber@opensuse.org" date="1423137600">- update to version 0.8.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.8.0 for a
    detailed list of changes</changelog>
  <changelog author="develop7@develop7.info" date="1424606400">- require python-dulwich &gt;= 0.9.7, as required by upstream setup.py</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1443873600">- update to 0.8.2
  Changes: see upstream</changelog>
  <changelog author="develop7@develop7.info" date="1449489600">- update to v0.8.3
  * fixes Mercurial 3.6 compatibility issues
  * Other changes: see https://bitbucket.org/durin42/hg-git/branches/compare/0.8.3%0D0.8.2
- use %version macro
- remove unused %rev define</changelog>
  <changelog author="develop7@develop7.info" date="1454328000">- update to v0.8.4
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.4%0D0.8.3</changelog>
  <changelog author="mpluskal@suse.com" date="1454328001">- Update project url
- Cleanups spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="develop7@develop7.info" date="1454414400">- update to v0.8.5
  * Support Mercurial 3.7
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.5%0D0.8.4</changelog>
  <changelog author="astieger@suse.com" date="1471262400">- disable failing tests</changelog>
  <changelog author="develop7@develop7.info" date="1493640000">- update to v0.8.6
  * Support Mercurial 4.2-rc
  * Bugfixes
- enable tests back
- source verification added</changelog>
  <changelog author="mpluskal@suse.com" date="1493726400">- Fix download url</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- update to v0.8.9
  no changelog provided by upstream
- remove weird tests with hg-git.patch</changelog>
  <changelog author="astieger@suse.com" date="1510488000">- update to 0.8.10:
  * mercurial 4.4 compatibility
  * drop hg-git.patch and disable test, this is in flux upstream</changelog>
  <changelog author="astieger@suse.com" date="1529409600">- update to 0.8.11 (boo#1096561)
  * add config knob for marking git branches public
  * re-enable git subrepositories disabled in 4.4.1
  * fix compatibility with hg &lt; 4.2
  * improve compatibility with hg 4.5+
- as this package is known not to work with mercurial 4.6, add
  a conflict</changelog>
</package>
<package pkgid="1c383a7383dd8a7b668b787ced971cb1fba553cf361ae4d09e362b304290a964" name="hiawatha" arch="x86_64">
  <version epoch="0" ver="10.8.4" rel="lp150.2.4.1"/>
  <changelog author="fisiu@opensuse.org" date="1410091200">- Update to 9.7:
  * UseToolkit now possible in .hiawatha file at root of website.
  * Method option added to URL Toolkit.
  * SetResourceLimit option added.
  * ThreadKillRate option added.
  * Improved SQL injection detection.
  * Default value for DHsize set to 2048.
  * PolarSSL updated to version 1.3.8.
  * Memory allocation debugger module added.
  * Small bugfixes and improvements.
  * Bugfix: incorrect file hash printing by wigwam with directory as symlink.</changelog>
  <changelog author="jengelh@inai.de" date="1410350400">- Avoid generating libpolarssl.so.7, which led to "have choice
  for libpolarssl.so.7: libpolarssl7 hiawatha" and make other
  polarssl-using applications not run in practice because the
  library is in a non-standard directory, yet discovered by rpm
  as a provider.</changelog>
  <changelog author="fisiu@opensuse.org" date="1414929600">- Update to 9.8:
  * Added support for websockets. WebSocket option added.
  * SSL key and certificate checks added to wigwam.
  * Small bugfixes and improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1418472000">- Update to 9.9:
  * HTTPAuthToCGI option added.
  * BanByCGI option added.
  * Improved SSL ciphersuite selections.
  * CAcertificates options added.
  * Dropped support for SSL3.0.
  * Small bugfixes and improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1420977600">- Update to 9.10:
  * Support for banning bad clients who connect via a proxy.
  * UrlToolkit option Do added. Changed how Call and Skip should be called.
  * General UrlToolkit improvements. See config/toolkit.conf for syntax.
  * Hiawatha now prefers reverse proxies with a scheme matching the one of the
    client connection. See config/toolkit.conf for syntax.
  * Hiawatha will now first process UrlToolkit rules before using ReverseProxy.
  * Small bugfixes and improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to 9.11:
  * ChallengeClient option added.
  * UrlToolkit options TotalConnections and OmitRequestLog added.
  * Improvements to UrlToolkit and reverse proxy swap.
  * UrlToolkit rules are also applied to PUT and DELETE.
  * Small improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1424952000">- Update to 9.12:
  * Bugfix: memory leak in SSL library.
  * Small bugfix.</changelog>
  <changelog author="fisiu@opensuse.org" date="1434369600">- Update to 9.13:
  * Renamed SSLcertFile to TLScertFile.
  * Renamed RequireSSL to RequireTLS.
  * Renamed SSL_* CGI environment variables to TLS_*.
  * Renamed UrlToolkit option UseSSL to UseTLS.
  * Replaced MinSSLversion by MinTLSversion.
  * LogTimeouts option added.
  * Added 'skip directories' parameter to reverse proxy.
  * Failed logins sent to Hiawatha Monitor.
  * Small bugfix and improvements.</changelog>
  <changelog author="mpluskal@suse.com" date="1434801600">- Fix rpmlint warnings
  * add rcsymlink
  * fix log directory permissions</changelog>
  <changelog author="mpluskal@suse.com" date="1472299200">- Update to version 10.3:
  * PreventCSRF, PreventSQLi and PreventXSS improved.
  * Prevention of MySQL data mining via SQL injection.
  * Added revoke option to Let's Encrypt script.
  * Hiawatha ignores RequireTLS for Let's Encrypt authentication
    requests.
  * Small bugfixes and improvements.
  * Bugfix: possible HTTP request pipelining error after CSRF
    prevented.
- Changes for version 10.2:
  * Added Let's Encrypt script (see extra/letsencrypt).
  * Added support for requesting Let's Encrypt certificates (see
    AccessList and PasswordFile settings in manual page).
  * Small improvements.
  * Bugfix: HideProxy not working for Forwarded header.
- Changes for 10.1:
  * Added Extensions setting.
  * Added support for X-Sendfile header.
  * mbed TLS updated to 2.2.1.
  * Improved SQL injection detection.
  * Small bugfixes and improvements.
- Changes for 10.0:
  * Usage of Directory sections changed.
  * Added support for RFC 5785.
  * Added support for GZip compression. Removed the UseGZfile
    option.
  * Added ECDSA support for TLS 1.0 and TLS 1.1.
  * Replaced UrlToolkit Expire option with ExpirePeriod in
    Directory section.
  * Replaced IgnoreDotHiawatha option with UseLocalConfig.
  * Removed the VolatileObject option.
  * Improved SQL injection detection.
  * mbed TLS updated to 2.2.0.
  * Small improvements.
- Changes for 9.15:
  * Support for WebSockets via reverse proxy.
  * UNIX socket support for connections to WebSockets.
  * Responsive design for directory index and error message.
  * mbed TLS updated to 2.1.2.
  * Fixed mbed TLS linking in CMake configuration.
  * ListenBacklog option added.
  * Small bugfixes.
- Changes for 9.14:
  * mbed TLS updated to 2.0.0.
  * Small bugfixes.
  * Bugfix: crash when sending very large request to FastCGI
    server.</changelog>
  <changelog author="fisiu@opensuse.org" date="1475409600">- Build fails with mbedtls &lt; 2.</changelog>
  <changelog author="mpluskal@suse.com" date="1479211200">- Update to version 10.4:
  * SkipCacheCookie option added.
  * Added Systemd init script to Debian package.
  * Small improvements and bugfixes.
- Small packaging changes and requirements update</changelog>
  <changelog author="fisiu@opensuse.org" date="1497700800">- Update to version 10.6:
  * Added PublicKeyPins option.
  * Added renewal-scripts to Let's Encrypt script.
  * Small changes to CMake build system.
  * Added CustomHeaderBackend option.
  * Renamed CustomHeader option to CustomHeaderClient. Old name still works.
  * Hiawatha ignores FileHashes and ReverseProxy for Let's Encrypt
    authentication requests.
  * Small improvements and bugfixes.</changelog>
  <changelog author="fisiu@opensuse.org" date="1508846400">- Update to version 10.7:
  * Connect to a Unix socket via a reverse proxy.
  * Added BlockExtensions setting.
  * Small improvements.
  * Bugfix: error in handling renewal scripts in Let's Encrypt script.</changelog>
  <changelog author="fisiu@opensuse.org" date="1518868800">- Fix build with mbedtls 2.7.0.</changelog>
  <changelog author="fisiu@opensuse.org" date="1522065600">- Update to version 10.8:
  * New Let's Encrypt script that supports ACME v2.
  * Added Syslog option.
  * Added GZipExtensions option.
  * AllowDotFiles now used to show hidden files in directory listings.
  * Removed support for static RSA ciphers.
  * Hiawatha log format changed.
  * Small improvements.
  * Bugfix: certain characters in filenames disrupted directory index output.
  * Bugfix: requesting non-regular files now results in a 403 instead of
    blocking that thread.</changelog>
  <changelog author="fisiu@opensuse.org" date="1522065601">- Add firewalld config files for Leap/SLE &gt;= 15 and TW.</changelog>
  <changelog author="fisiu@opensuse.org" date="1522065602">- Ship Let's Encrypt script within subpackage.</changelog>
  <changelog author="fisiu@opensuse.org" date="1525780800">- Update to version 10.8.1.:
  * Removed support for secp192r1 and secp192k1 curves, to make it PCI DSS
    compliant out of the box.
  * Small improvements to Let's Encrypt ACMEv2 script.</changelog>
  <changelog author="fisiu@opensuse.org" date="1550491200">- Update to 10.8.4:
  * CVE-2019-8358: Fixed a vulnerability which allowed a remote atacker to perform directory traversal
    when AllowDotFiles was enabled (bsc#1125751).
  * Several fixes in build system
  * Added build system for nghttp2
  * New style for directory index
  * uri_depth added to XML for directory index</changelog>
</package>
<package pkgid="281b2faef21ddd03079c62ac18ebf0ec967683a71c716538e6ebfdd4718768cc" name="hiawatha-letsencrypt" arch="x86_64">
  <version epoch="0" ver="10.8.4" rel="lp150.2.4.1"/>
  <changelog author="fisiu@opensuse.org" date="1410091200">- Update to 9.7:
  * UseToolkit now possible in .hiawatha file at root of website.
  * Method option added to URL Toolkit.
  * SetResourceLimit option added.
  * ThreadKillRate option added.
  * Improved SQL injection detection.
  * Default value for DHsize set to 2048.
  * PolarSSL updated to version 1.3.8.
  * Memory allocation debugger module added.
  * Small bugfixes and improvements.
  * Bugfix: incorrect file hash printing by wigwam with directory as symlink.</changelog>
  <changelog author="jengelh@inai.de" date="1410350400">- Avoid generating libpolarssl.so.7, which led to "have choice
  for libpolarssl.so.7: libpolarssl7 hiawatha" and make other
  polarssl-using applications not run in practice because the
  library is in a non-standard directory, yet discovered by rpm
  as a provider.</changelog>
  <changelog author="fisiu@opensuse.org" date="1414929600">- Update to 9.8:
  * Added support for websockets. WebSocket option added.
  * SSL key and certificate checks added to wigwam.
  * Small bugfixes and improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1418472000">- Update to 9.9:
  * HTTPAuthToCGI option added.
  * BanByCGI option added.
  * Improved SSL ciphersuite selections.
  * CAcertificates options added.
  * Dropped support for SSL3.0.
  * Small bugfixes and improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1420977600">- Update to 9.10:
  * Support for banning bad clients who connect via a proxy.
  * UrlToolkit option Do added. Changed how Call and Skip should be called.
  * General UrlToolkit improvements. See config/toolkit.conf for syntax.
  * Hiawatha now prefers reverse proxies with a scheme matching the one of the
    client connection. See config/toolkit.conf for syntax.
  * Hiawatha will now first process UrlToolkit rules before using ReverseProxy.
  * Small bugfixes and improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to 9.11:
  * ChallengeClient option added.
  * UrlToolkit options TotalConnections and OmitRequestLog added.
  * Improvements to UrlToolkit and reverse proxy swap.
  * UrlToolkit rules are also applied to PUT and DELETE.
  * Small improvements.</changelog>
  <changelog author="fisiu@opensuse.org" date="1424952000">- Update to 9.12:
  * Bugfix: memory leak in SSL library.
  * Small bugfix.</changelog>
  <changelog author="fisiu@opensuse.org" date="1434369600">- Update to 9.13:
  * Renamed SSLcertFile to TLScertFile.
  * Renamed RequireSSL to RequireTLS.
  * Renamed SSL_* CGI environment variables to TLS_*.
  * Renamed UrlToolkit option UseSSL to UseTLS.
  * Replaced MinSSLversion by MinTLSversion.
  * LogTimeouts option added.
  * Added 'skip directories' parameter to reverse proxy.
  * Failed logins sent to Hiawatha Monitor.
  * Small bugfix and improvements.</changelog>
  <changelog author="mpluskal@suse.com" date="1434801600">- Fix rpmlint warnings
  * add rcsymlink
  * fix log directory permissions</changelog>
  <changelog author="mpluskal@suse.com" date="1472299200">- Update to version 10.3:
  * PreventCSRF, PreventSQLi and PreventXSS improved.
  * Prevention of MySQL data mining via SQL injection.
  * Added revoke option to Let's Encrypt script.
  * Hiawatha ignores RequireTLS for Let's Encrypt authentication
    requests.
  * Small bugfixes and improvements.
  * Bugfix: possible HTTP request pipelining error after CSRF
    prevented.
- Changes for version 10.2:
  * Added Let's Encrypt script (see extra/letsencrypt).
  * Added support for requesting Let's Encrypt certificates (see
    AccessList and PasswordFile settings in manual page).
  * Small improvements.
  * Bugfix: HideProxy not working for Forwarded header.
- Changes for 10.1:
  * Added Extensions setting.
  * Added support for X-Sendfile header.
  * mbed TLS updated to 2.2.1.
  * Improved SQL injection detection.
  * Small bugfixes and improvements.
- Changes for 10.0:
  * Usage of Directory sections changed.
  * Added support for RFC 5785.
  * Added support for GZip compression. Removed the UseGZfile
    option.
  * Added ECDSA support for TLS 1.0 and TLS 1.1.
  * Replaced UrlToolkit Expire option with ExpirePeriod in
    Directory section.
  * Replaced IgnoreDotHiawatha option with UseLocalConfig.
  * Removed the VolatileObject option.
  * Improved SQL injection detection.
  * mbed TLS updated to 2.2.0.
  * Small improvements.
- Changes for 9.15:
  * Support for WebSockets via reverse proxy.
  * UNIX socket support for connections to WebSockets.
  * Responsive design for directory index and error message.
  * mbed TLS updated to 2.1.2.
  * Fixed mbed TLS linking in CMake configuration.
  * ListenBacklog option added.
  * Small bugfixes.
- Changes for 9.14:
  * mbed TLS updated to 2.0.0.
  * Small bugfixes.
  * Bugfix: crash when sending very large request to FastCGI
    server.</changelog>
  <changelog author="fisiu@opensuse.org" date="1475409600">- Build fails with mbedtls &lt; 2.</changelog>
  <changelog author="mpluskal@suse.com" date="1479211200">- Update to version 10.4:
  * SkipCacheCookie option added.
  * Added Systemd init script to Debian package.
  * Small improvements and bugfixes.
- Small packaging changes and requirements update</changelog>
  <changelog author="fisiu@opensuse.org" date="1497700800">- Update to version 10.6:
  * Added PublicKeyPins option.
  * Added renewal-scripts to Let's Encrypt script.
  * Small changes to CMake build system.
  * Added CustomHeaderBackend option.
  * Renamed CustomHeader option to CustomHeaderClient. Old name still works.
  * Hiawatha ignores FileHashes and ReverseProxy for Let's Encrypt
    authentication requests.
  * Small improvements and bugfixes.</changelog>
  <changelog author="fisiu@opensuse.org" date="1508846400">- Update to version 10.7:
  * Connect to a Unix socket via a reverse proxy.
  * Added BlockExtensions setting.
  * Small improvements.
  * Bugfix: error in handling renewal scripts in Let's Encrypt script.</changelog>
  <changelog author="fisiu@opensuse.org" date="1518868800">- Fix build with mbedtls 2.7.0.</changelog>
  <changelog author="fisiu@opensuse.org" date="1522065600">- Update to version 10.8:
  * New Let's Encrypt script that supports ACME v2.
  * Added Syslog option.
  * Added GZipExtensions option.
  * AllowDotFiles now used to show hidden files in directory listings.
  * Removed support for static RSA ciphers.
  * Hiawatha log format changed.
  * Small improvements.
  * Bugfix: certain characters in filenames disrupted directory index output.
  * Bugfix: requesting non-regular files now results in a 403 instead of
    blocking that thread.</changelog>
  <changelog author="fisiu@opensuse.org" date="1522065601">- Add firewalld config files for Leap/SLE &gt;= 15 and TW.</changelog>
  <changelog author="fisiu@opensuse.org" date="1522065602">- Ship Let's Encrypt script within subpackage.</changelog>
  <changelog author="fisiu@opensuse.org" date="1525780800">- Update to version 10.8.1.:
  * Removed support for secp192r1 and secp192k1 curves, to make it PCI DSS
    compliant out of the box.
  * Small improvements to Let's Encrypt ACMEv2 script.</changelog>
  <changelog author="fisiu@opensuse.org" date="1550491200">- Update to 10.8.4:
  * CVE-2019-8358: Fixed a vulnerability which allowed a remote atacker to perform directory traversal
    when AllowDotFiles was enabled (bsc#1125751).
  * Several fixes in build system
  * Added build system for nghttp2
  * New style for directory index
  * uri_depth added to XML for directory index</changelog>
</package>
<package pkgid="086cb30f8e932c659f66eb311a855f7e0bc8486c5e5cb578beec53052217c7b8" name="hmaccalc" arch="src">
  <version epoch="0" ver="0.9.14" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1397476800">- new package, generate certifiable HMACs for FIPS usage.
  uses the Mozilla NSS library for cryptography.</changelog>
  <changelog author="coolo@suse.com" date="1399464000">- remove prelink buildrequire - completely unneeded and unnecessarily
  increases core ring</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.9.14
  * No changelog available</changelog>
  <changelog author="meissner@suse.com" date="1548331200">- require libfreebl3-hmac and libsoftokn3-hmac (bsc#1122491)</changelog>
</package>
<package pkgid="f4fc868169f80d4605df15d1b7db9cf05ce014acb6b4b309dee488b1ed19e398" name="hmaccalc" arch="x86_64">
  <version epoch="0" ver="0.9.14" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1397476800">- new package, generate certifiable HMACs for FIPS usage.
  uses the Mozilla NSS library for cryptography.</changelog>
  <changelog author="coolo@suse.com" date="1399464000">- remove prelink buildrequire - completely unneeded and unnecessarily
  increases core ring</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.9.14
  * No changelog available</changelog>
  <changelog author="meissner@suse.com" date="1548331200">- require libfreebl3-hmac and libsoftokn3-hmac (bsc#1122491)</changelog>
</package>
<package pkgid="46bb5be6ab8223592c39ccc1af45715085fb25e21992b5ca699b99b876e8c138" name="hostapd" arch="x86_64">
  <version epoch="0" ver="2.6" rel="lp150.2.3.2"/>
  <changelog author="sndirsch@suse.de" date="1276084800">- udpated to release 0.6.10
- updated hostapd.dif
- git-commit-eb1f744.diff:
  * Move DTIM period configuration into Beacon set operation; fixes
    "Could not set DTIM period for kernel driver; wlan0: Unable to
    setup interface.rmdir[ctrl_interface]: No such file or
    directory" error when using "nl80211" driver</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="lnussel@suse.de" date="1318420800">- update to version 0.7.3
- don't use /tmp for dump file in default config
- verbose build
- fix build for older distros
- enable driver 'none' for radius only mode
- add init script</changelog>
  <changelog author="glin@suse.com" date="1337083200">- update to version 1.0
- respin hostapd.dif to fit the new defconfig
- change the file permission of the config files with passwords
  to 600 (bnc#740964)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352203200">- Add Native systemd units</changelog>
  <changelog author="avm-xandry@yandex.ru" date="1365508800">- update to version 2.0
- fix corrected file name hostapd.dif to hostapd.diff
- in default config includes all features (IEEE 802.11w, Hotspot 2.0, IEEE 802.11ac, WPS, etc.)</changelog>
  <changelog author="cfarrell@suse.com" date="1366200000">- license update: GPL-2.0 or BSD-3-Clause
  README makes it clear that this is a dual license - i.e. choice of either
  or</changelog>
  <changelog author="aj@suse.com" date="1366286400">- Do not package /etc/init.d
- Do not install init file since package contains a service file and
  is only build for Factory
- Cleanup spec file
- Use /run instead of /var/run</changelog>
  <changelog author="dvaleev@suse.com" date="1380715200">- fix host_to_le32 undefined on BigEndian architectures
  (hostapd-be-host_to_le.patch)</changelog>
  <changelog author="i@marguerite.su" date="1397649600">- update version 2.1
  * see http://hostap.epitest.fi/cgit/hostap/log/ for details.
- change hostapd.diff to hostapd-2.1-defconfig.patch
- remove patch: hostapd-tmp.diff, no longer needed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401192000">- Update hostapd-2.1-defconfig.patch and spec file
  to build with libnl3 instead of libnl1</changelog>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
</package>
<package pkgid="34030361e6a3eb8f0f091d254825e93abf89690d8d4ae6c477fda4d221f5425a" name="hplip" arch="src">
  <version epoch="0" ver="3.18.6" rel="lp150.4.3.1"/>
  <changelog author="jsmeix@suse.de" date="1488456000">- Support most recent HP printing devices for SLE12 by upgrading
  HPLIP to the version that we have currently (as of this writing)
  in openSUSE Factory and this is in use on openSUSE Tumbleweed
  see https://fate.suse.com/322305 (fate#322305).
  In general regarding version upgrades for printer drivers
  see https://en.opensuse.org/SDB:Installing_a_Printer</changelog>
  <changelog author="fvogt@suse.com" date="1489406400">- Use Qt5 on Tumbleweed and Leap &gt;= 42.2 (bsc#1018734)</changelog>
  <changelog author="dsterba@suse.cz" date="1493294400">- Version upgrade to 3.17.4:
  * Added Support for the Following New Printers:
  - HP LaserJet Managed Flow MFP E77822z Printer
  - HP LaserJet Managed MFP E77822dn Printer
  - HP LaserJet Managed Flow MFP E77825z Printer
  - HP LaserJet Managed MFP E77825dn Printer
  - HP LaserJet Managed Flow MFP E77830z Printer
  - HP LaserJet Managed MFP E77830dn Printer
  - HP LaserJet Managed Flow MFP E87640z Printer
  - HP LaserJet Managed MFP E87640dn Printer
  - HP LaserJet Managed Flow MFP E87650z Printer
  - HP LaserJet Managed MFP E87650dn Printer
  - HP LaserJet Managed Flow MFP E87660z Printer
  - HP LaserJet Managed MFP E87660dn Printer
  - HP LaserJet Managed Flow MFP E82540z Printer
  - HP LaserJet Managed MFP E82540dn Printer
  - HP LaserJet Managed Flow MFP E82550z Printer
  - HP LaserJet Managed MFP E82550dn Printer
  - HP LaserJet Managed Flow MFP E82560z Printer
  - HP LaserJet Managed MFP E82560dn Printer
  - HP LaserJet Managed Flow MFP E72525z Printer
  - HP LaserJet Managed MFP E72525dn Printer
  - HP LaserJet Managed Flow MFP E72530z Printer
  - HP LaserJet Managed MFP E72530dn Printer
  - HP LaserJet Managed Flow MFP E72535z Printer
  - HP LaserJet Managed MFP E72535dn Printer
  - HP LaserJet Pro  M203d Printer
  - HP LaserJet Pro  MFP M130a Printer
  - HP LaserJet Pro  MFP M130nw Printer
  - HP LaserJet Pro  MFP M130fn Printer
  - HP LaserJet Pro  MFP M130fw Printer
  - HP LaserJet Pro  MFP M227d Printer
  - HP LaserJet Pro  MFP M227fdn Printer
  - HP LaserJet Ultra MFP M230 sdn Printer</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="mwilck@suse.com" date="1499774400">- Version Upgrade to 3.17.6:
  * Added support for the following new printers:
  - HP LaserJet Enterprise M607n
  - HP LaserJet Enterprise M607dn
  - HP LaserJet Enterprise M608n
  - HP LaserJet Enterprise M608dn
  - HP LaserJet Enterprise M608x
  - HP LaserJet Enterprise M608dh
  - HP LaserJet Enterprise M609dn
  - HP LaserJet Enterprise M609x
  - HP LaserJet Managed E60055dn
  - HP LaserJet Managed E60065dn
  - HP LaserJet Managed E60065x
  - HP LaserJet Managed E60075dn
  - HP LaserJet Managed E60075x
  - HP LaserJet Enterprise MFP M631dn
  - HP LaserJet Enterprise Flow MFP M631h
  - HP LaserJet Enterprise MFP M631z
  - HP LaserJet Enterprise Flow MFP M632z
  - HP LaserJet Enterprise MFP M632fht
  - HP LaserJet Enterprise MFP M632h
  - HP LaserJet Enterprise Flow MFP M633z
  - HP LaserJet Enterprise MFP M633fh
  - HP LaserJet Managed MFP E62555dn
  - HP LaserJet Managed Flow MFP E62565h
  - HP LaserJet Managed MFP E62565hs
  - HP LaserJet Managed Flow MFP E62565z
  - HP LaserJet Managed Flow MFP E62575z
  - HP Color LaserJet Enterprise M652dn
  - HP Color LaserJet Enterprise M652n
  - HP Color LaserJet Enterprise M653dn
  - HP Color LaserJet Enterprise M653dh
  - HP Color LaserJet Enterprise M653x
  - HP Color LaserJet Managed E65050dn
  - HP Color LaserJet Managed E65060dn
  - HP Color LaserJet Managed MFP E67550dh
  - HP Color LaserJet Managed Flow MFP E67560z
  - HP Color LaserJet Enterprise MFP M681dh
  - HP Color LaserJet Enterprise MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M681z
  - HP Color LaserJet Enterprise Flow MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M682z
  - HP PageWide Managed P77750z Multifunction Printer
  - HP Pagewide Pro 750dn
  - HP Pagewide Pro 750dw
  - HP PageWide Pro 772dw Multifunction Printer
  - HP PageWide Managed P77740zs Multifunction Printer
  - HP PageWide Managed P77750zs Multifunction Printer
  - HP PageWide Managed P75050dn Printer
  - HP LaserJet Pro MFP M25a
  - HP LaserJet Pro MFP M25nw
  - HP LaserJet Pro MFP M26a
  - HP LaserJet Pro MFP M26nw
  - HP LaserJet Pro MFP M27c
  - HP LaserJet Pro MFP M27cnw
  * Bug fixes (launchpad):
  - 1690515 - DeskJet 3775 - scanner not found
  - 1690516 - Head alignment dont work (HPLIP 3.17.4)</changelog>
  <changelog author="fvogt@suse.com" date="1503662400">- Default to Qt5 on SLE 15 as well to avoid Qt4 with dependency on
  openSSL 1.0</changelog>
  <changelog author="mwilck@suse.com" date="1507118400">- Version update to 3.17.9:
  * Added support for the following new printers:
  - HP OfficeJet Pro 7720 Wide Format All-in-One
  - HP DeskJet AMP All-in-One Printer
  - HP OfficeJet 5220 All-in-One Printer
  - HP OfficeJet 5230 All-in-One Printer
  - HP OfficeJet 5232 All-in-One Printer
  - HP ENVY Photo 6220 All-in-One Printer
  - HP ENVY Photo 6232 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7134 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY 5020 All-in-One Printer
  - HP ENVY 5032 All-in-One Printer
  - HP DeskJet Ink Advantage 3735 All-in-One
  - HP ENVY Photo 6234 All-in-One Printer
  - HP ENVY Photo 6230 All-in-One Printer
  - HP AMP 130 All-in-One Printer
  - HP OfficeJet Pro 7730 Wide Format All-in-One
  - HP ENVY Photo 7155 All-in-One Printer
  - HP ENVY Photo 7164 All-in-One Printer
  - HP ENVY Photo 7155 All-In-One Printer
  - HP ENVY Photo 7800 All-In-One Printer
  - HP ENVY Photo 6200 All-In-One Printer
  - HP ENVY Photo 7130 All-in-One Printer
  - HP ENVY Photo 7830 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY Photo 7855 All-in-One Printer
  - HP DeskJet Ink Advantage 5075 All-in-One Printer
  - HP PageWide Enterprise Color 765dn
  - HP PageWide Managed Color E75160dn
  - HP PageWide Enterprise Color MFP 780dn
  - HP PageWide Enterprise Color Flow MFP 785f
  - HP PageWide Enterprise Color Flow MFP 785zs
  - HP PageWide Enterprise Color Flow MFP 785z+
  - HP PageWide Managed Color MFP E77650dn
  - HP PageWide Managed Color MFP E77650dns
  - HP PageWide Managed Color MFP E77660dn
  - HP PageWide Managed Color Flow MFP E77650z
  - HP PageWide Managed Color Flow MFP E77650zs
  - HP PageWide Managed Color Flow MFP E77650z+
  - HP PageWide Managed Color Flow MFP E77660z
  - HP PageWide Managed Color Flow MFP E77660zs
  - HP PageWide Managed Color Flow MFP E77660z+
  * from 3.17.7:
  - HP DeskJet Ink Advantage 2635 All-in-One
  - HP DeskJet Ink Advantage 2636 All-in-One
  - HP DeskJet Ink Advantage 2675 All-in-One
  - HP DeskJet Ink Advantage 2676 All-in-One
  - HP DeskJet Ink Advantage 2677 All-in-One
  - HP DeskJet Ink Advantage 2678 All-in-One
  - HP DeskJet 2620 All-in-One
  - HP DeskJet 2621 All-in-One
  - HP DeskJet 2622 All-in-One
  - HP DeskJet 2623 All-in-One
  - HP DeskJet Ink Advantage 2200 All-in-One
  - HP DeskJet 3722 All-in-One
  - HP DeskJet Ink Advantage 3789 All-in-One
  - HP DeskJet Ink Advantage 3790 All-in-One</changelog>
  <changelog author="mgorse@suse.com" date="1507809600">- Add no-systray-failure-message.patch: don't display an error if
  unable to find a system tray (boo#1061211).</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Use python3 on tumbleweed and SLE15/Leap15 (bsc#1071255)
  * add pcardext-python3-fixes.patch
  * add hplip-misc-missing-includes-and-definitions.patch
  * hp_ipp.h-add-missing-prototypes.patch
  * spec file: replace "/usr/bin/env python" and "/usr/bin/python" with
    desired interpreter
  * spec file: add py2/py3 selection macros
  * spec file: dropped python-openssl build dependency (not needed anymore)</changelog>
  <changelog author="mwilck@suse.com" date="1521720000">- photocard.py: fixed broken import statement (bsc#1071255)
  * added photocard-fix-import-error-for-pcardext.patch
  * spec file: fixed dependency for dbus-1-python</changelog>
  <changelog author="mwilck@suse.com" date="1527854400">- avoid segfault in DJGenericVIP::DJGenericVIP() (boo#1094141,
  lp#1774660)
  * added hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch</changelog>
  <changelog author="mwilck@suse.com" date="1528372800">- Fix bug in hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch:
  default behavior of DJ9xxVIP device must not be changed</changelog>
  <changelog author="mwilck@suse.com" date="1528804800">- Fix scanning with python-pillow 4.2.0 (boo#1096755, #lp1741214)
  * added Fix-scanning-with-python-pillow-4.2.0.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1529841600">- require python3-Pillow for hp-scan to work (bsc#1100511)</changelog>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
</package>
<package pkgid="689304e3487d2ad61474d588408038517b59413c292a4c5a8e726fd202f3f301" name="hplip" arch="x86_64">
  <version epoch="0" ver="3.18.6" rel="lp150.4.3.1"/>
  <changelog author="jsmeix@suse.de" date="1488456000">- Support most recent HP printing devices for SLE12 by upgrading
  HPLIP to the version that we have currently (as of this writing)
  in openSUSE Factory and this is in use on openSUSE Tumbleweed
  see https://fate.suse.com/322305 (fate#322305).
  In general regarding version upgrades for printer drivers
  see https://en.opensuse.org/SDB:Installing_a_Printer</changelog>
  <changelog author="fvogt@suse.com" date="1489406400">- Use Qt5 on Tumbleweed and Leap &gt;= 42.2 (bsc#1018734)</changelog>
  <changelog author="dsterba@suse.cz" date="1493294400">- Version upgrade to 3.17.4:
  * Added Support for the Following New Printers:
  - HP LaserJet Managed Flow MFP E77822z Printer
  - HP LaserJet Managed MFP E77822dn Printer
  - HP LaserJet Managed Flow MFP E77825z Printer
  - HP LaserJet Managed MFP E77825dn Printer
  - HP LaserJet Managed Flow MFP E77830z Printer
  - HP LaserJet Managed MFP E77830dn Printer
  - HP LaserJet Managed Flow MFP E87640z Printer
  - HP LaserJet Managed MFP E87640dn Printer
  - HP LaserJet Managed Flow MFP E87650z Printer
  - HP LaserJet Managed MFP E87650dn Printer
  - HP LaserJet Managed Flow MFP E87660z Printer
  - HP LaserJet Managed MFP E87660dn Printer
  - HP LaserJet Managed Flow MFP E82540z Printer
  - HP LaserJet Managed MFP E82540dn Printer
  - HP LaserJet Managed Flow MFP E82550z Printer
  - HP LaserJet Managed MFP E82550dn Printer
  - HP LaserJet Managed Flow MFP E82560z Printer
  - HP LaserJet Managed MFP E82560dn Printer
  - HP LaserJet Managed Flow MFP E72525z Printer
  - HP LaserJet Managed MFP E72525dn Printer
  - HP LaserJet Managed Flow MFP E72530z Printer
  - HP LaserJet Managed MFP E72530dn Printer
  - HP LaserJet Managed Flow MFP E72535z Printer
  - HP LaserJet Managed MFP E72535dn Printer
  - HP LaserJet Pro  M203d Printer
  - HP LaserJet Pro  MFP M130a Printer
  - HP LaserJet Pro  MFP M130nw Printer
  - HP LaserJet Pro  MFP M130fn Printer
  - HP LaserJet Pro  MFP M130fw Printer
  - HP LaserJet Pro  MFP M227d Printer
  - HP LaserJet Pro  MFP M227fdn Printer
  - HP LaserJet Ultra MFP M230 sdn Printer</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="mwilck@suse.com" date="1499774400">- Version Upgrade to 3.17.6:
  * Added support for the following new printers:
  - HP LaserJet Enterprise M607n
  - HP LaserJet Enterprise M607dn
  - HP LaserJet Enterprise M608n
  - HP LaserJet Enterprise M608dn
  - HP LaserJet Enterprise M608x
  - HP LaserJet Enterprise M608dh
  - HP LaserJet Enterprise M609dn
  - HP LaserJet Enterprise M609x
  - HP LaserJet Managed E60055dn
  - HP LaserJet Managed E60065dn
  - HP LaserJet Managed E60065x
  - HP LaserJet Managed E60075dn
  - HP LaserJet Managed E60075x
  - HP LaserJet Enterprise MFP M631dn
  - HP LaserJet Enterprise Flow MFP M631h
  - HP LaserJet Enterprise MFP M631z
  - HP LaserJet Enterprise Flow MFP M632z
  - HP LaserJet Enterprise MFP M632fht
  - HP LaserJet Enterprise MFP M632h
  - HP LaserJet Enterprise Flow MFP M633z
  - HP LaserJet Enterprise MFP M633fh
  - HP LaserJet Managed MFP E62555dn
  - HP LaserJet Managed Flow MFP E62565h
  - HP LaserJet Managed MFP E62565hs
  - HP LaserJet Managed Flow MFP E62565z
  - HP LaserJet Managed Flow MFP E62575z
  - HP Color LaserJet Enterprise M652dn
  - HP Color LaserJet Enterprise M652n
  - HP Color LaserJet Enterprise M653dn
  - HP Color LaserJet Enterprise M653dh
  - HP Color LaserJet Enterprise M653x
  - HP Color LaserJet Managed E65050dn
  - HP Color LaserJet Managed E65060dn
  - HP Color LaserJet Managed MFP E67550dh
  - HP Color LaserJet Managed Flow MFP E67560z
  - HP Color LaserJet Enterprise MFP M681dh
  - HP Color LaserJet Enterprise MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M681z
  - HP Color LaserJet Enterprise Flow MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M682z
  - HP PageWide Managed P77750z Multifunction Printer
  - HP Pagewide Pro 750dn
  - HP Pagewide Pro 750dw
  - HP PageWide Pro 772dw Multifunction Printer
  - HP PageWide Managed P77740zs Multifunction Printer
  - HP PageWide Managed P77750zs Multifunction Printer
  - HP PageWide Managed P75050dn Printer
  - HP LaserJet Pro MFP M25a
  - HP LaserJet Pro MFP M25nw
  - HP LaserJet Pro MFP M26a
  - HP LaserJet Pro MFP M26nw
  - HP LaserJet Pro MFP M27c
  - HP LaserJet Pro MFP M27cnw
  * Bug fixes (launchpad):
  - 1690515 - DeskJet 3775 - scanner not found
  - 1690516 - Head alignment dont work (HPLIP 3.17.4)</changelog>
  <changelog author="fvogt@suse.com" date="1503662400">- Default to Qt5 on SLE 15 as well to avoid Qt4 with dependency on
  openSSL 1.0</changelog>
  <changelog author="mwilck@suse.com" date="1507118400">- Version update to 3.17.9:
  * Added support for the following new printers:
  - HP OfficeJet Pro 7720 Wide Format All-in-One
  - HP DeskJet AMP All-in-One Printer
  - HP OfficeJet 5220 All-in-One Printer
  - HP OfficeJet 5230 All-in-One Printer
  - HP OfficeJet 5232 All-in-One Printer
  - HP ENVY Photo 6220 All-in-One Printer
  - HP ENVY Photo 6232 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7134 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY 5020 All-in-One Printer
  - HP ENVY 5032 All-in-One Printer
  - HP DeskJet Ink Advantage 3735 All-in-One
  - HP ENVY Photo 6234 All-in-One Printer
  - HP ENVY Photo 6230 All-in-One Printer
  - HP AMP 130 All-in-One Printer
  - HP OfficeJet Pro 7730 Wide Format All-in-One
  - HP ENVY Photo 7155 All-in-One Printer
  - HP ENVY Photo 7164 All-in-One Printer
  - HP ENVY Photo 7155 All-In-One Printer
  - HP ENVY Photo 7800 All-In-One Printer
  - HP ENVY Photo 6200 All-In-One Printer
  - HP ENVY Photo 7130 All-in-One Printer
  - HP ENVY Photo 7830 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY Photo 7855 All-in-One Printer
  - HP DeskJet Ink Advantage 5075 All-in-One Printer
  - HP PageWide Enterprise Color 765dn
  - HP PageWide Managed Color E75160dn
  - HP PageWide Enterprise Color MFP 780dn
  - HP PageWide Enterprise Color Flow MFP 785f
  - HP PageWide Enterprise Color Flow MFP 785zs
  - HP PageWide Enterprise Color Flow MFP 785z+
  - HP PageWide Managed Color MFP E77650dn
  - HP PageWide Managed Color MFP E77650dns
  - HP PageWide Managed Color MFP E77660dn
  - HP PageWide Managed Color Flow MFP E77650z
  - HP PageWide Managed Color Flow MFP E77650zs
  - HP PageWide Managed Color Flow MFP E77650z+
  - HP PageWide Managed Color Flow MFP E77660z
  - HP PageWide Managed Color Flow MFP E77660zs
  - HP PageWide Managed Color Flow MFP E77660z+
  * from 3.17.7:
  - HP DeskJet Ink Advantage 2635 All-in-One
  - HP DeskJet Ink Advantage 2636 All-in-One
  - HP DeskJet Ink Advantage 2675 All-in-One
  - HP DeskJet Ink Advantage 2676 All-in-One
  - HP DeskJet Ink Advantage 2677 All-in-One
  - HP DeskJet Ink Advantage 2678 All-in-One
  - HP DeskJet 2620 All-in-One
  - HP DeskJet 2621 All-in-One
  - HP DeskJet 2622 All-in-One
  - HP DeskJet 2623 All-in-One
  - HP DeskJet Ink Advantage 2200 All-in-One
  - HP DeskJet 3722 All-in-One
  - HP DeskJet Ink Advantage 3789 All-in-One
  - HP DeskJet Ink Advantage 3790 All-in-One</changelog>
  <changelog author="mgorse@suse.com" date="1507809600">- Add no-systray-failure-message.patch: don't display an error if
  unable to find a system tray (boo#1061211).</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Use python3 on tumbleweed and SLE15/Leap15 (bsc#1071255)
  * add pcardext-python3-fixes.patch
  * add hplip-misc-missing-includes-and-definitions.patch
  * hp_ipp.h-add-missing-prototypes.patch
  * spec file: replace "/usr/bin/env python" and "/usr/bin/python" with
    desired interpreter
  * spec file: add py2/py3 selection macros
  * spec file: dropped python-openssl build dependency (not needed anymore)</changelog>
  <changelog author="mwilck@suse.com" date="1521720000">- photocard.py: fixed broken import statement (bsc#1071255)
  * added photocard-fix-import-error-for-pcardext.patch
  * spec file: fixed dependency for dbus-1-python</changelog>
  <changelog author="mwilck@suse.com" date="1527854400">- avoid segfault in DJGenericVIP::DJGenericVIP() (boo#1094141,
  lp#1774660)
  * added hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch</changelog>
  <changelog author="mwilck@suse.com" date="1528372800">- Fix bug in hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch:
  default behavior of DJ9xxVIP device must not be changed</changelog>
  <changelog author="mwilck@suse.com" date="1528804800">- Fix scanning with python-pillow 4.2.0 (boo#1096755, #lp1741214)
  * added Fix-scanning-with-python-pillow-4.2.0.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1529841600">- require python3-Pillow for hp-scan to work (bsc#1100511)</changelog>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
</package>
<package pkgid="edc42de15b59a394059abcac4d9cdb21e5088874d1844a7b295dc4403949648a" name="hplip-devel" arch="x86_64">
  <version epoch="0" ver="3.18.6" rel="lp150.4.3.1"/>
  <changelog author="jsmeix@suse.de" date="1488456000">- Support most recent HP printing devices for SLE12 by upgrading
  HPLIP to the version that we have currently (as of this writing)
  in openSUSE Factory and this is in use on openSUSE Tumbleweed
  see https://fate.suse.com/322305 (fate#322305).
  In general regarding version upgrades for printer drivers
  see https://en.opensuse.org/SDB:Installing_a_Printer</changelog>
  <changelog author="fvogt@suse.com" date="1489406400">- Use Qt5 on Tumbleweed and Leap &gt;= 42.2 (bsc#1018734)</changelog>
  <changelog author="dsterba@suse.cz" date="1493294400">- Version upgrade to 3.17.4:
  * Added Support for the Following New Printers:
  - HP LaserJet Managed Flow MFP E77822z Printer
  - HP LaserJet Managed MFP E77822dn Printer
  - HP LaserJet Managed Flow MFP E77825z Printer
  - HP LaserJet Managed MFP E77825dn Printer
  - HP LaserJet Managed Flow MFP E77830z Printer
  - HP LaserJet Managed MFP E77830dn Printer
  - HP LaserJet Managed Flow MFP E87640z Printer
  - HP LaserJet Managed MFP E87640dn Printer
  - HP LaserJet Managed Flow MFP E87650z Printer
  - HP LaserJet Managed MFP E87650dn Printer
  - HP LaserJet Managed Flow MFP E87660z Printer
  - HP LaserJet Managed MFP E87660dn Printer
  - HP LaserJet Managed Flow MFP E82540z Printer
  - HP LaserJet Managed MFP E82540dn Printer
  - HP LaserJet Managed Flow MFP E82550z Printer
  - HP LaserJet Managed MFP E82550dn Printer
  - HP LaserJet Managed Flow MFP E82560z Printer
  - HP LaserJet Managed MFP E82560dn Printer
  - HP LaserJet Managed Flow MFP E72525z Printer
  - HP LaserJet Managed MFP E72525dn Printer
  - HP LaserJet Managed Flow MFP E72530z Printer
  - HP LaserJet Managed MFP E72530dn Printer
  - HP LaserJet Managed Flow MFP E72535z Printer
  - HP LaserJet Managed MFP E72535dn Printer
  - HP LaserJet Pro  M203d Printer
  - HP LaserJet Pro  MFP M130a Printer
  - HP LaserJet Pro  MFP M130nw Printer
  - HP LaserJet Pro  MFP M130fn Printer
  - HP LaserJet Pro  MFP M130fw Printer
  - HP LaserJet Pro  MFP M227d Printer
  - HP LaserJet Pro  MFP M227fdn Printer
  - HP LaserJet Ultra MFP M230 sdn Printer</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="mwilck@suse.com" date="1499774400">- Version Upgrade to 3.17.6:
  * Added support for the following new printers:
  - HP LaserJet Enterprise M607n
  - HP LaserJet Enterprise M607dn
  - HP LaserJet Enterprise M608n
  - HP LaserJet Enterprise M608dn
  - HP LaserJet Enterprise M608x
  - HP LaserJet Enterprise M608dh
  - HP LaserJet Enterprise M609dn
  - HP LaserJet Enterprise M609x
  - HP LaserJet Managed E60055dn
  - HP LaserJet Managed E60065dn
  - HP LaserJet Managed E60065x
  - HP LaserJet Managed E60075dn
  - HP LaserJet Managed E60075x
  - HP LaserJet Enterprise MFP M631dn
  - HP LaserJet Enterprise Flow MFP M631h
  - HP LaserJet Enterprise MFP M631z
  - HP LaserJet Enterprise Flow MFP M632z
  - HP LaserJet Enterprise MFP M632fht
  - HP LaserJet Enterprise MFP M632h
  - HP LaserJet Enterprise Flow MFP M633z
  - HP LaserJet Enterprise MFP M633fh
  - HP LaserJet Managed MFP E62555dn
  - HP LaserJet Managed Flow MFP E62565h
  - HP LaserJet Managed MFP E62565hs
  - HP LaserJet Managed Flow MFP E62565z
  - HP LaserJet Managed Flow MFP E62575z
  - HP Color LaserJet Enterprise M652dn
  - HP Color LaserJet Enterprise M652n
  - HP Color LaserJet Enterprise M653dn
  - HP Color LaserJet Enterprise M653dh
  - HP Color LaserJet Enterprise M653x
  - HP Color LaserJet Managed E65050dn
  - HP Color LaserJet Managed E65060dn
  - HP Color LaserJet Managed MFP E67550dh
  - HP Color LaserJet Managed Flow MFP E67560z
  - HP Color LaserJet Enterprise MFP M681dh
  - HP Color LaserJet Enterprise MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M681z
  - HP Color LaserJet Enterprise Flow MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M682z
  - HP PageWide Managed P77750z Multifunction Printer
  - HP Pagewide Pro 750dn
  - HP Pagewide Pro 750dw
  - HP PageWide Pro 772dw Multifunction Printer
  - HP PageWide Managed P77740zs Multifunction Printer
  - HP PageWide Managed P77750zs Multifunction Printer
  - HP PageWide Managed P75050dn Printer
  - HP LaserJet Pro MFP M25a
  - HP LaserJet Pro MFP M25nw
  - HP LaserJet Pro MFP M26a
  - HP LaserJet Pro MFP M26nw
  - HP LaserJet Pro MFP M27c
  - HP LaserJet Pro MFP M27cnw
  * Bug fixes (launchpad):
  - 1690515 - DeskJet 3775 - scanner not found
  - 1690516 - Head alignment dont work (HPLIP 3.17.4)</changelog>
  <changelog author="fvogt@suse.com" date="1503662400">- Default to Qt5 on SLE 15 as well to avoid Qt4 with dependency on
  openSSL 1.0</changelog>
  <changelog author="mwilck@suse.com" date="1507118400">- Version update to 3.17.9:
  * Added support for the following new printers:
  - HP OfficeJet Pro 7720 Wide Format All-in-One
  - HP DeskJet AMP All-in-One Printer
  - HP OfficeJet 5220 All-in-One Printer
  - HP OfficeJet 5230 All-in-One Printer
  - HP OfficeJet 5232 All-in-One Printer
  - HP ENVY Photo 6220 All-in-One Printer
  - HP ENVY Photo 6232 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7134 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY 5020 All-in-One Printer
  - HP ENVY 5032 All-in-One Printer
  - HP DeskJet Ink Advantage 3735 All-in-One
  - HP ENVY Photo 6234 All-in-One Printer
  - HP ENVY Photo 6230 All-in-One Printer
  - HP AMP 130 All-in-One Printer
  - HP OfficeJet Pro 7730 Wide Format All-in-One
  - HP ENVY Photo 7155 All-in-One Printer
  - HP ENVY Photo 7164 All-in-One Printer
  - HP ENVY Photo 7155 All-In-One Printer
  - HP ENVY Photo 7800 All-In-One Printer
  - HP ENVY Photo 6200 All-In-One Printer
  - HP ENVY Photo 7130 All-in-One Printer
  - HP ENVY Photo 7830 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY Photo 7855 All-in-One Printer
  - HP DeskJet Ink Advantage 5075 All-in-One Printer
  - HP PageWide Enterprise Color 765dn
  - HP PageWide Managed Color E75160dn
  - HP PageWide Enterprise Color MFP 780dn
  - HP PageWide Enterprise Color Flow MFP 785f
  - HP PageWide Enterprise Color Flow MFP 785zs
  - HP PageWide Enterprise Color Flow MFP 785z+
  - HP PageWide Managed Color MFP E77650dn
  - HP PageWide Managed Color MFP E77650dns
  - HP PageWide Managed Color MFP E77660dn
  - HP PageWide Managed Color Flow MFP E77650z
  - HP PageWide Managed Color Flow MFP E77650zs
  - HP PageWide Managed Color Flow MFP E77650z+
  - HP PageWide Managed Color Flow MFP E77660z
  - HP PageWide Managed Color Flow MFP E77660zs
  - HP PageWide Managed Color Flow MFP E77660z+
  * from 3.17.7:
  - HP DeskJet Ink Advantage 2635 All-in-One
  - HP DeskJet Ink Advantage 2636 All-in-One
  - HP DeskJet Ink Advantage 2675 All-in-One
  - HP DeskJet Ink Advantage 2676 All-in-One
  - HP DeskJet Ink Advantage 2677 All-in-One
  - HP DeskJet Ink Advantage 2678 All-in-One
  - HP DeskJet 2620 All-in-One
  - HP DeskJet 2621 All-in-One
  - HP DeskJet 2622 All-in-One
  - HP DeskJet 2623 All-in-One
  - HP DeskJet Ink Advantage 2200 All-in-One
  - HP DeskJet 3722 All-in-One
  - HP DeskJet Ink Advantage 3789 All-in-One
  - HP DeskJet Ink Advantage 3790 All-in-One</changelog>
  <changelog author="mgorse@suse.com" date="1507809600">- Add no-systray-failure-message.patch: don't display an error if
  unable to find a system tray (boo#1061211).</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Use python3 on tumbleweed and SLE15/Leap15 (bsc#1071255)
  * add pcardext-python3-fixes.patch
  * add hplip-misc-missing-includes-and-definitions.patch
  * hp_ipp.h-add-missing-prototypes.patch
  * spec file: replace "/usr/bin/env python" and "/usr/bin/python" with
    desired interpreter
  * spec file: add py2/py3 selection macros
  * spec file: dropped python-openssl build dependency (not needed anymore)</changelog>
  <changelog author="mwilck@suse.com" date="1521720000">- photocard.py: fixed broken import statement (bsc#1071255)
  * added photocard-fix-import-error-for-pcardext.patch
  * spec file: fixed dependency for dbus-1-python</changelog>
  <changelog author="mwilck@suse.com" date="1527854400">- avoid segfault in DJGenericVIP::DJGenericVIP() (boo#1094141,
  lp#1774660)
  * added hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch</changelog>
  <changelog author="mwilck@suse.com" date="1528372800">- Fix bug in hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch:
  default behavior of DJ9xxVIP device must not be changed</changelog>
  <changelog author="mwilck@suse.com" date="1528804800">- Fix scanning with python-pillow 4.2.0 (boo#1096755, #lp1741214)
  * added Fix-scanning-with-python-pillow-4.2.0.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1529841600">- require python3-Pillow for hp-scan to work (bsc#1100511)</changelog>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
</package>
<package pkgid="2a47b5fe34e4bb96c3fa8a8f0ccbb468c77ea086b1906af8939af2110e68ae86" name="hplip-hpijs" arch="x86_64">
  <version epoch="0" ver="3.18.6" rel="lp150.4.3.1"/>
  <changelog author="jsmeix@suse.de" date="1488456000">- Support most recent HP printing devices for SLE12 by upgrading
  HPLIP to the version that we have currently (as of this writing)
  in openSUSE Factory and this is in use on openSUSE Tumbleweed
  see https://fate.suse.com/322305 (fate#322305).
  In general regarding version upgrades for printer drivers
  see https://en.opensuse.org/SDB:Installing_a_Printer</changelog>
  <changelog author="fvogt@suse.com" date="1489406400">- Use Qt5 on Tumbleweed and Leap &gt;= 42.2 (bsc#1018734)</changelog>
  <changelog author="dsterba@suse.cz" date="1493294400">- Version upgrade to 3.17.4:
  * Added Support for the Following New Printers:
  - HP LaserJet Managed Flow MFP E77822z Printer
  - HP LaserJet Managed MFP E77822dn Printer
  - HP LaserJet Managed Flow MFP E77825z Printer
  - HP LaserJet Managed MFP E77825dn Printer
  - HP LaserJet Managed Flow MFP E77830z Printer
  - HP LaserJet Managed MFP E77830dn Printer
  - HP LaserJet Managed Flow MFP E87640z Printer
  - HP LaserJet Managed MFP E87640dn Printer
  - HP LaserJet Managed Flow MFP E87650z Printer
  - HP LaserJet Managed MFP E87650dn Printer
  - HP LaserJet Managed Flow MFP E87660z Printer
  - HP LaserJet Managed MFP E87660dn Printer
  - HP LaserJet Managed Flow MFP E82540z Printer
  - HP LaserJet Managed MFP E82540dn Printer
  - HP LaserJet Managed Flow MFP E82550z Printer
  - HP LaserJet Managed MFP E82550dn Printer
  - HP LaserJet Managed Flow MFP E82560z Printer
  - HP LaserJet Managed MFP E82560dn Printer
  - HP LaserJet Managed Flow MFP E72525z Printer
  - HP LaserJet Managed MFP E72525dn Printer
  - HP LaserJet Managed Flow MFP E72530z Printer
  - HP LaserJet Managed MFP E72530dn Printer
  - HP LaserJet Managed Flow MFP E72535z Printer
  - HP LaserJet Managed MFP E72535dn Printer
  - HP LaserJet Pro  M203d Printer
  - HP LaserJet Pro  MFP M130a Printer
  - HP LaserJet Pro  MFP M130nw Printer
  - HP LaserJet Pro  MFP M130fn Printer
  - HP LaserJet Pro  MFP M130fw Printer
  - HP LaserJet Pro  MFP M227d Printer
  - HP LaserJet Pro  MFP M227fdn Printer
  - HP LaserJet Ultra MFP M230 sdn Printer</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="mwilck@suse.com" date="1499774400">- Version Upgrade to 3.17.6:
  * Added support for the following new printers:
  - HP LaserJet Enterprise M607n
  - HP LaserJet Enterprise M607dn
  - HP LaserJet Enterprise M608n
  - HP LaserJet Enterprise M608dn
  - HP LaserJet Enterprise M608x
  - HP LaserJet Enterprise M608dh
  - HP LaserJet Enterprise M609dn
  - HP LaserJet Enterprise M609x
  - HP LaserJet Managed E60055dn
  - HP LaserJet Managed E60065dn
  - HP LaserJet Managed E60065x
  - HP LaserJet Managed E60075dn
  - HP LaserJet Managed E60075x
  - HP LaserJet Enterprise MFP M631dn
  - HP LaserJet Enterprise Flow MFP M631h
  - HP LaserJet Enterprise MFP M631z
  - HP LaserJet Enterprise Flow MFP M632z
  - HP LaserJet Enterprise MFP M632fht
  - HP LaserJet Enterprise MFP M632h
  - HP LaserJet Enterprise Flow MFP M633z
  - HP LaserJet Enterprise MFP M633fh
  - HP LaserJet Managed MFP E62555dn
  - HP LaserJet Managed Flow MFP E62565h
  - HP LaserJet Managed MFP E62565hs
  - HP LaserJet Managed Flow MFP E62565z
  - HP LaserJet Managed Flow MFP E62575z
  - HP Color LaserJet Enterprise M652dn
  - HP Color LaserJet Enterprise M652n
  - HP Color LaserJet Enterprise M653dn
  - HP Color LaserJet Enterprise M653dh
  - HP Color LaserJet Enterprise M653x
  - HP Color LaserJet Managed E65050dn
  - HP Color LaserJet Managed E65060dn
  - HP Color LaserJet Managed MFP E67550dh
  - HP Color LaserJet Managed Flow MFP E67560z
  - HP Color LaserJet Enterprise MFP M681dh
  - HP Color LaserJet Enterprise MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M681z
  - HP Color LaserJet Enterprise Flow MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M682z
  - HP PageWide Managed P77750z Multifunction Printer
  - HP Pagewide Pro 750dn
  - HP Pagewide Pro 750dw
  - HP PageWide Pro 772dw Multifunction Printer
  - HP PageWide Managed P77740zs Multifunction Printer
  - HP PageWide Managed P77750zs Multifunction Printer
  - HP PageWide Managed P75050dn Printer
  - HP LaserJet Pro MFP M25a
  - HP LaserJet Pro MFP M25nw
  - HP LaserJet Pro MFP M26a
  - HP LaserJet Pro MFP M26nw
  - HP LaserJet Pro MFP M27c
  - HP LaserJet Pro MFP M27cnw
  * Bug fixes (launchpad):
  - 1690515 - DeskJet 3775 - scanner not found
  - 1690516 - Head alignment dont work (HPLIP 3.17.4)</changelog>
  <changelog author="fvogt@suse.com" date="1503662400">- Default to Qt5 on SLE 15 as well to avoid Qt4 with dependency on
  openSSL 1.0</changelog>
  <changelog author="mwilck@suse.com" date="1507118400">- Version update to 3.17.9:
  * Added support for the following new printers:
  - HP OfficeJet Pro 7720 Wide Format All-in-One
  - HP DeskJet AMP All-in-One Printer
  - HP OfficeJet 5220 All-in-One Printer
  - HP OfficeJet 5230 All-in-One Printer
  - HP OfficeJet 5232 All-in-One Printer
  - HP ENVY Photo 6220 All-in-One Printer
  - HP ENVY Photo 6232 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7134 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY 5020 All-in-One Printer
  - HP ENVY 5032 All-in-One Printer
  - HP DeskJet Ink Advantage 3735 All-in-One
  - HP ENVY Photo 6234 All-in-One Printer
  - HP ENVY Photo 6230 All-in-One Printer
  - HP AMP 130 All-in-One Printer
  - HP OfficeJet Pro 7730 Wide Format All-in-One
  - HP ENVY Photo 7155 All-in-One Printer
  - HP ENVY Photo 7164 All-in-One Printer
  - HP ENVY Photo 7155 All-In-One Printer
  - HP ENVY Photo 7800 All-In-One Printer
  - HP ENVY Photo 6200 All-In-One Printer
  - HP ENVY Photo 7130 All-in-One Printer
  - HP ENVY Photo 7830 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY Photo 7855 All-in-One Printer
  - HP DeskJet Ink Advantage 5075 All-in-One Printer
  - HP PageWide Enterprise Color 765dn
  - HP PageWide Managed Color E75160dn
  - HP PageWide Enterprise Color MFP 780dn
  - HP PageWide Enterprise Color Flow MFP 785f
  - HP PageWide Enterprise Color Flow MFP 785zs
  - HP PageWide Enterprise Color Flow MFP 785z+
  - HP PageWide Managed Color MFP E77650dn
  - HP PageWide Managed Color MFP E77650dns
  - HP PageWide Managed Color MFP E77660dn
  - HP PageWide Managed Color Flow MFP E77650z
  - HP PageWide Managed Color Flow MFP E77650zs
  - HP PageWide Managed Color Flow MFP E77650z+
  - HP PageWide Managed Color Flow MFP E77660z
  - HP PageWide Managed Color Flow MFP E77660zs
  - HP PageWide Managed Color Flow MFP E77660z+
  * from 3.17.7:
  - HP DeskJet Ink Advantage 2635 All-in-One
  - HP DeskJet Ink Advantage 2636 All-in-One
  - HP DeskJet Ink Advantage 2675 All-in-One
  - HP DeskJet Ink Advantage 2676 All-in-One
  - HP DeskJet Ink Advantage 2677 All-in-One
  - HP DeskJet Ink Advantage 2678 All-in-One
  - HP DeskJet 2620 All-in-One
  - HP DeskJet 2621 All-in-One
  - HP DeskJet 2622 All-in-One
  - HP DeskJet 2623 All-in-One
  - HP DeskJet Ink Advantage 2200 All-in-One
  - HP DeskJet 3722 All-in-One
  - HP DeskJet Ink Advantage 3789 All-in-One
  - HP DeskJet Ink Advantage 3790 All-in-One</changelog>
  <changelog author="mgorse@suse.com" date="1507809600">- Add no-systray-failure-message.patch: don't display an error if
  unable to find a system tray (boo#1061211).</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Use python3 on tumbleweed and SLE15/Leap15 (bsc#1071255)
  * add pcardext-python3-fixes.patch
  * add hplip-misc-missing-includes-and-definitions.patch
  * hp_ipp.h-add-missing-prototypes.patch
  * spec file: replace "/usr/bin/env python" and "/usr/bin/python" with
    desired interpreter
  * spec file: add py2/py3 selection macros
  * spec file: dropped python-openssl build dependency (not needed anymore)</changelog>
  <changelog author="mwilck@suse.com" date="1521720000">- photocard.py: fixed broken import statement (bsc#1071255)
  * added photocard-fix-import-error-for-pcardext.patch
  * spec file: fixed dependency for dbus-1-python</changelog>
  <changelog author="mwilck@suse.com" date="1527854400">- avoid segfault in DJGenericVIP::DJGenericVIP() (boo#1094141,
  lp#1774660)
  * added hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch</changelog>
  <changelog author="mwilck@suse.com" date="1528372800">- Fix bug in hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch:
  default behavior of DJ9xxVIP device must not be changed</changelog>
  <changelog author="mwilck@suse.com" date="1528804800">- Fix scanning with python-pillow 4.2.0 (boo#1096755, #lp1741214)
  * added Fix-scanning-with-python-pillow-4.2.0.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1529841600">- require python3-Pillow for hp-scan to work (bsc#1100511)</changelog>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
</package>
<package pkgid="b75ca256ea73740a9750258a4a2dfde43cf9b8356f9de8ad4f28183a6ceedae0" name="hplip-sane" arch="x86_64">
  <version epoch="0" ver="3.18.6" rel="lp150.4.3.1"/>
  <changelog author="jsmeix@suse.de" date="1488456000">- Support most recent HP printing devices for SLE12 by upgrading
  HPLIP to the version that we have currently (as of this writing)
  in openSUSE Factory and this is in use on openSUSE Tumbleweed
  see https://fate.suse.com/322305 (fate#322305).
  In general regarding version upgrades for printer drivers
  see https://en.opensuse.org/SDB:Installing_a_Printer</changelog>
  <changelog author="fvogt@suse.com" date="1489406400">- Use Qt5 on Tumbleweed and Leap &gt;= 42.2 (bsc#1018734)</changelog>
  <changelog author="dsterba@suse.cz" date="1493294400">- Version upgrade to 3.17.4:
  * Added Support for the Following New Printers:
  - HP LaserJet Managed Flow MFP E77822z Printer
  - HP LaserJet Managed MFP E77822dn Printer
  - HP LaserJet Managed Flow MFP E77825z Printer
  - HP LaserJet Managed MFP E77825dn Printer
  - HP LaserJet Managed Flow MFP E77830z Printer
  - HP LaserJet Managed MFP E77830dn Printer
  - HP LaserJet Managed Flow MFP E87640z Printer
  - HP LaserJet Managed MFP E87640dn Printer
  - HP LaserJet Managed Flow MFP E87650z Printer
  - HP LaserJet Managed MFP E87650dn Printer
  - HP LaserJet Managed Flow MFP E87660z Printer
  - HP LaserJet Managed MFP E87660dn Printer
  - HP LaserJet Managed Flow MFP E82540z Printer
  - HP LaserJet Managed MFP E82540dn Printer
  - HP LaserJet Managed Flow MFP E82550z Printer
  - HP LaserJet Managed MFP E82550dn Printer
  - HP LaserJet Managed Flow MFP E82560z Printer
  - HP LaserJet Managed MFP E82560dn Printer
  - HP LaserJet Managed Flow MFP E72525z Printer
  - HP LaserJet Managed MFP E72525dn Printer
  - HP LaserJet Managed Flow MFP E72530z Printer
  - HP LaserJet Managed MFP E72530dn Printer
  - HP LaserJet Managed Flow MFP E72535z Printer
  - HP LaserJet Managed MFP E72535dn Printer
  - HP LaserJet Pro  M203d Printer
  - HP LaserJet Pro  MFP M130a Printer
  - HP LaserJet Pro  MFP M130nw Printer
  - HP LaserJet Pro  MFP M130fn Printer
  - HP LaserJet Pro  MFP M130fw Printer
  - HP LaserJet Pro  MFP M227d Printer
  - HP LaserJet Pro  MFP M227fdn Printer
  - HP LaserJet Ultra MFP M230 sdn Printer</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="mwilck@suse.com" date="1499774400">- Version Upgrade to 3.17.6:
  * Added support for the following new printers:
  - HP LaserJet Enterprise M607n
  - HP LaserJet Enterprise M607dn
  - HP LaserJet Enterprise M608n
  - HP LaserJet Enterprise M608dn
  - HP LaserJet Enterprise M608x
  - HP LaserJet Enterprise M608dh
  - HP LaserJet Enterprise M609dn
  - HP LaserJet Enterprise M609x
  - HP LaserJet Managed E60055dn
  - HP LaserJet Managed E60065dn
  - HP LaserJet Managed E60065x
  - HP LaserJet Managed E60075dn
  - HP LaserJet Managed E60075x
  - HP LaserJet Enterprise MFP M631dn
  - HP LaserJet Enterprise Flow MFP M631h
  - HP LaserJet Enterprise MFP M631z
  - HP LaserJet Enterprise Flow MFP M632z
  - HP LaserJet Enterprise MFP M632fht
  - HP LaserJet Enterprise MFP M632h
  - HP LaserJet Enterprise Flow MFP M633z
  - HP LaserJet Enterprise MFP M633fh
  - HP LaserJet Managed MFP E62555dn
  - HP LaserJet Managed Flow MFP E62565h
  - HP LaserJet Managed MFP E62565hs
  - HP LaserJet Managed Flow MFP E62565z
  - HP LaserJet Managed Flow MFP E62575z
  - HP Color LaserJet Enterprise M652dn
  - HP Color LaserJet Enterprise M652n
  - HP Color LaserJet Enterprise M653dn
  - HP Color LaserJet Enterprise M653dh
  - HP Color LaserJet Enterprise M653x
  - HP Color LaserJet Managed E65050dn
  - HP Color LaserJet Managed E65060dn
  - HP Color LaserJet Managed MFP E67550dh
  - HP Color LaserJet Managed Flow MFP E67560z
  - HP Color LaserJet Enterprise MFP M681dh
  - HP Color LaserJet Enterprise MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M681z
  - HP Color LaserJet Enterprise Flow MFP M681f
  - HP Color LaserJet Enterprise Flow MFP M682z
  - HP PageWide Managed P77750z Multifunction Printer
  - HP Pagewide Pro 750dn
  - HP Pagewide Pro 750dw
  - HP PageWide Pro 772dw Multifunction Printer
  - HP PageWide Managed P77740zs Multifunction Printer
  - HP PageWide Managed P77750zs Multifunction Printer
  - HP PageWide Managed P75050dn Printer
  - HP LaserJet Pro MFP M25a
  - HP LaserJet Pro MFP M25nw
  - HP LaserJet Pro MFP M26a
  - HP LaserJet Pro MFP M26nw
  - HP LaserJet Pro MFP M27c
  - HP LaserJet Pro MFP M27cnw
  * Bug fixes (launchpad):
  - 1690515 - DeskJet 3775 - scanner not found
  - 1690516 - Head alignment dont work (HPLIP 3.17.4)</changelog>
  <changelog author="fvogt@suse.com" date="1503662400">- Default to Qt5 on SLE 15 as well to avoid Qt4 with dependency on
  openSSL 1.0</changelog>
  <changelog author="mwilck@suse.com" date="1507118400">- Version update to 3.17.9:
  * Added support for the following new printers:
  - HP OfficeJet Pro 7720 Wide Format All-in-One
  - HP DeskJet AMP All-in-One Printer
  - HP OfficeJet 5220 All-in-One Printer
  - HP OfficeJet 5230 All-in-One Printer
  - HP OfficeJet 5232 All-in-One Printer
  - HP ENVY Photo 6220 All-in-One Printer
  - HP ENVY Photo 6232 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7134 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY 5020 All-in-One Printer
  - HP ENVY 5032 All-in-One Printer
  - HP DeskJet Ink Advantage 3735 All-in-One
  - HP ENVY Photo 6234 All-in-One Printer
  - HP ENVY Photo 6230 All-in-One Printer
  - HP AMP 130 All-in-One Printer
  - HP OfficeJet Pro 7730 Wide Format All-in-One
  - HP ENVY Photo 7155 All-in-One Printer
  - HP ENVY Photo 7164 All-in-One Printer
  - HP ENVY Photo 7155 All-In-One Printer
  - HP ENVY Photo 7800 All-In-One Printer
  - HP ENVY Photo 6200 All-In-One Printer
  - HP ENVY Photo 7130 All-in-One Printer
  - HP ENVY Photo 7830 All-in-One Printer
  - HP ENVY Photo 7120 All-in-One Printer
  - HP ENVY Photo 7820 All-in-One Printer
  - HP ENVY Photo 7855 All-in-One Printer
  - HP DeskJet Ink Advantage 5075 All-in-One Printer
  - HP PageWide Enterprise Color 765dn
  - HP PageWide Managed Color E75160dn
  - HP PageWide Enterprise Color MFP 780dn
  - HP PageWide Enterprise Color Flow MFP 785f
  - HP PageWide Enterprise Color Flow MFP 785zs
  - HP PageWide Enterprise Color Flow MFP 785z+
  - HP PageWide Managed Color MFP E77650dn
  - HP PageWide Managed Color MFP E77650dns
  - HP PageWide Managed Color MFP E77660dn
  - HP PageWide Managed Color Flow MFP E77650z
  - HP PageWide Managed Color Flow MFP E77650zs
  - HP PageWide Managed Color Flow MFP E77650z+
  - HP PageWide Managed Color Flow MFP E77660z
  - HP PageWide Managed Color Flow MFP E77660zs
  - HP PageWide Managed Color Flow MFP E77660z+
  * from 3.17.7:
  - HP DeskJet Ink Advantage 2635 All-in-One
  - HP DeskJet Ink Advantage 2636 All-in-One
  - HP DeskJet Ink Advantage 2675 All-in-One
  - HP DeskJet Ink Advantage 2676 All-in-One
  - HP DeskJet Ink Advantage 2677 All-in-One
  - HP DeskJet Ink Advantage 2678 All-in-One
  - HP DeskJet 2620 All-in-One
  - HP DeskJet 2621 All-in-One
  - HP DeskJet 2622 All-in-One
  - HP DeskJet 2623 All-in-One
  - HP DeskJet Ink Advantage 2200 All-in-One
  - HP DeskJet 3722 All-in-One
  - HP DeskJet Ink Advantage 3789 All-in-One
  - HP DeskJet Ink Advantage 3790 All-in-One</changelog>
  <changelog author="mgorse@suse.com" date="1507809600">- Add no-systray-failure-message.patch: don't display an error if
  unable to find a system tray (boo#1061211).</changelog>
  <changelog author="mwilck@suse.com" date="1521633600">- Use python3 on tumbleweed and SLE15/Leap15 (bsc#1071255)
  * add pcardext-python3-fixes.patch
  * add hplip-misc-missing-includes-and-definitions.patch
  * hp_ipp.h-add-missing-prototypes.patch
  * spec file: replace "/usr/bin/env python" and "/usr/bin/python" with
    desired interpreter
  * spec file: add py2/py3 selection macros
  * spec file: dropped python-openssl build dependency (not needed anymore)</changelog>
  <changelog author="mwilck@suse.com" date="1521720000">- photocard.py: fixed broken import statement (bsc#1071255)
  * added photocard-fix-import-error-for-pcardext.patch
  * spec file: fixed dependency for dbus-1-python</changelog>
  <changelog author="mwilck@suse.com" date="1527854400">- avoid segfault in DJGenericVIP::DJGenericVIP() (boo#1094141,
  lp#1774660)
  * added hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch</changelog>
  <changelog author="mwilck@suse.com" date="1528372800">- Fix bug in hpijs-avoid-segfault-in-DJGenericVIP-DJGenericVIP.patch:
  default behavior of DJ9xxVIP device must not be changed</changelog>
  <changelog author="mwilck@suse.com" date="1528804800">- Fix scanning with python-pillow 4.2.0 (boo#1096755, #lp1741214)
  * added Fix-scanning-with-python-pillow-4.2.0.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1529841600">- require python3-Pillow for hp-scan to work (bsc#1100511)</changelog>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
</package>
<package pkgid="547e882c59d43f34c26b285fdd363d2da0dd76b268042361c3a137efa0aff60f" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.314" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="22f21bb5034bd58ba935d184ed78e5b56b5b01b1aefe29ab7a0abd9c44bc7b00" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.320" rel="lp150.16.1"/>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.315:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Update to version 0.318:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547121600">- Update to version 0.319:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1549972800">- Update to version 0.320 (bsc#1121410):
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="dc5200b5fe7699d07debba459a3fb2b1b4f897504a39df6b3564319699529965" name="hwdata" arch="src">
  <version epoch="0" ver="0.320" rel="lp150.16.1"/>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537963200">- Update to version 0.315:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Update to version 0.318:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1547121600">- Update to version 0.319:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1549972800">- Update to version 0.320 (bsc#1121410):
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="374b14f6ae4b3a2e5add281fc056cf43dc1630649893d9f4a3fec486e8058bf4" name="hwinfo" arch="src">
  <version epoch="0" ver="21.57" rel="lp150.2.3.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="8e2590af28f947e795b564a7fff9761e1f70f854239178f385394f0c8fda59f0" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.57" rel="lp150.2.3.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="81503dc8011fb54905fb79ad44bcf23732bab8edf8768067c24d65337d02adf5" name="hwinfo" arch="src">
  <version epoch="0" ver="21.63" rel="lp150.2.6.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
</package>
<package pkgid="5bb37c1a74660a12653b1ed800bfe95d1775b346f96dc7690d1fc3fc155b0291" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.63" rel="lp150.2.6.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
</package>
<package pkgid="1ba10746b7c0d38d2443f48a40186d31ca1e4e34da6684193cf0c5ac42f602b7" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.57" rel="lp150.2.3.1"/>
  <changelog author="snwint@suse.com" date="1491393600">- powerpc: support ibmvnic network interfaces (bsc#1031676)
- 21.39</changelog>
  <changelog author="snwint@suse.de" date="1491566400">- sanitize changelog</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493208000">- enhance documentation
- merge gh#openSUSE/hwinfo#45
- small doc changes
- 21.40</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899200">- remove references to qlogic-firmware (bsc#1036884)
- 21.41</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493899201">- merge gh#openSUSE/hwinfo#46
- include updated hd.h in package archive
- update pci and usb ids (fate#321448)
- 21.42</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#47
- block i/o access when reading mode list from BIOS (bsc#1033832)
- 21.43</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494244801">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
</package>
<package pkgid="d9b505c05be72a0b40605c1821861d2960fc824c9ec247c9bd1b250fd818d046" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.63" rel="lp150.2.6.1"/>
  <changelog author="wfeldt@opensuse.org" date="1494244800">- merge gh#openSUSE/hwinfo#48
- fix conditional expression in hddb.c (gh#openSUSE/hwinfo#20)
- 21.44</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494417600">- merge gh#openSUSE/hwinfo#49
- avoid access to video memory (bsc#1033832)
- 21.45</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/hwinfo#50
- map also alternate video bios entry points (bsc#1033832)
- try harder to get the video mode list
- add links to technical specifications
- 21.46</changelog>
  <changelog author="wfeldt@opensuse.org" date="1501243200">- merge gh#openSUSE/hwinfo#53
- really set default timeout to 20s for Video BIOS emulation calls
  (bsc#1051076)
- 21.47</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/hwinfo#51
- sort input files (boo#1041090)
- allow to override current time (boo#1047218)
- 21.48</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1505217601">- merge gh#openSUSE/hwinfo#52
- Ensure /var/lib/hardware/udi exists and with 755 permissions
- 21.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1509019200">- merge gh#openSUSE/hwinfo#54
- support SMBIOS 3.0 spec (bsc#1062562)
- 21.50</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515758400">- merge gh#openSUSE/hwinfo#55
- Please make CDBISDN_DATE ignore timezone.
- 21.51</changelog>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/hwinfo#57
- add another sanity check on scsi serial id (bsc#1078511)
- 21.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524225600">- merge gh#openSUSE/hwinfo#60
- detect usb controller in ARM platform device (bsc#1072450)
- add xhci interface constant
- 21.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528286400">- merge gh#openSUSE/hwinfo#63
- detect ARM HISILICON SAS controller (bsc#1072450)
- 21.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528459200">- merge gh#openSUSE/hwinfo#64
- try a more agressive way to catch all usb platform controllers
  (bsc#1072450)
- 21.55</changelog>
  <changelog author="schwab@suse.de" date="1530187200">- merge gh#openSUSE/hwinfo#66
- Add support for RISC-V
- 21.56</changelog>
  <changelog author="snwint@suse.de" date="1537185600">- merge gh#openSUSE/hwinfo#69
- check for vmware only when running in a vm (bsc#1105003)
- 21.57</changelog>
  <changelog author="snwint@suse.de" date="1538049600">- merge gh#openSUSE/hwinfo#59
- ensure udev device links are unique (bsc#1084700)
- 21.58</changelog>
  <changelog author="snwint@suse.de" date="1539345600">- merge gh#openSUSE/hwinfo#70
- The location of the S-Par drivers virtual buses has changed
  (bsc#1107196)
- The location of the S-Par drivers virtual buses has changed
- 21.59</changelog>
  <changelog author="snwint@suse.de" date="1539777600">- merge gh#openSUSE/hwinfo#71
- add network interfaces found on mdio bus (bsc#1018271)
- 21.60</changelog>
  <changelog author="snwint@suse.de" date="1540814400">- merge gh#openSUSE/hwinfo#72
- fix id of s-par storage controller (bsc#1107196)
- 21.61</changelog>
  <changelog author="snwint@suse.de" date="1541764800">- merge gh#openSUSE/hwinfo#73
- update pci and usb ids (fate#326431)
- add script to update pci and usb ids
- adjust hwinfo know about RISC-V
- update git2log script
- fix curl commands
- 21.62</changelog>
  <changelog author="snwint@suse.de" date="1544097600">- merge gh#openSUSE/hwinfo#75
- adjust system type detection (bsc#1117982)
- rework version number generation in header file
- small correction
- 21.63</changelog>
</package>
<package pkgid="2b3d853280672bf0c7fb3cd196b37f6430977209ff331d62c2571cbada5f50ca" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="dd7aa3f7fc660aa2fed32f2093b13db9efc1102aa492dedbeec2b58b0e623c86" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="9e682269177f0d35f27334b3db555bc3c7443ef5adbfa1f3fb7dd20a9cac66fb" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.9.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="28a8fd77345e846b3da4976e20495a9e44ca4f921a7392e221c95f81b8d17741" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="336c39d346eb17b7b73bd32564d5665508fdf9f61944f659841e5cf3568362e6" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="6e2970dc6cb98842ff9ba4b14ebf5a756656e733a7fdf5489bb507019820e895" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.9.1"/>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
</package>
<package pkgid="d5a2b5fd3c5cf2d24c45dbfc76f52c4b6bcbb1ea8033971c847ffb2c880455a8" name="hyper-v" arch="src">
  <version epoch="0" ver="7" rel="lp150.4.3.2"/>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
</package>
<package pkgid="0f87b1276fa45324966873a3d885d24f0e7cd6e2d57744439f70b54029c369d0" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.4.3.2"/>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
</package>
<package pkgid="9701e80fb5e600a4d437a171273132af8fac3a95dd47986eca8989e46aee0415" name="ibacm" arch="x86_64">
  <version epoch="0" ver="16.9" rel="lp150.4.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1504180800">- Update to v15-rc3-52-gd3ca56f1
  * Fix rdma-sriov.service dependencies and remove install section
  * 50-libmlx4.conf is not a config file</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505736000">- Update to rdma-core v15
  * Remove dracut requirement (bsc#1058504)
  * Includes Broadcom patches (bsc#1060413)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1508328000">- Backport patches from upstream:
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
    Fixes a byte order issue which causes ibacm to fail to join a multicast
    group on recent on recent kernels. (bsc#1063639, bsc#1063697)
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
    Fixes a sefgault of ibacm when a provider other than default
    is set (bsc#1063642, bsc#1063698)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509624000">- Backport patch from upstream:
  * libqedr-fix-inline-data-copy.patch
    Fix data integrity issue while sending inline data (bsc#1050543, fate#322894)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510142400">- Add libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * Fix issue with umad when QSFP is not plugged in (bnc#1058539)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510228800">- Backport upstream patches
  * bnxt_re-lib-fix-the-memory-barrier-call-during-poll-cq.patch
    Fix memory ordering issue
  * bnxt_re-lib-increment-psn-in-case-of-0-length-packets.patch
    Fix PSN getting out of sync when sending 0 length packet
  * verbs-Do-not-block-QP-attr_masks-used-by-older-kernels.patch
    Fix bits detection to allow RDMA CM to work on older kernsl
- Refresh older patches to include commit logs:
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
  * libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * libqedr-fix-inline-data-copy.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511870400">- Update to rdma-core v15.1
  * Backport CI checks on centos/SUSE from master
  * Stable ABI auto checks
  * Backport fixes:
  * verbs: Do not block QP attr_masks used by older kernels
  * libibumad/umad.c: In get_port, ignore sysfs rate file errors
  * bnxt_re/lib: fix the memory barrier call during poll-cq
  * bnxt_re/lib: increment psn in case of 0 length packets
  * libqedr: fix inline data copy
  * verbs: Fix declaration of C++ include file in C-block
  * verbs: Fix C++ compilation break
  * verbs: fix compilation error with ICC
  * hns: Fix create QP structure layout
  * ibacm: Incorrect list used for subnet list causes a segfault
  * ibacm: Incorrect usage of BE byte order of MLID attach/detach_mcast()
- Remove patches that were merged to v15.1:
  * bnxt_re-lib-fix-the-memory-barrier-call-during-poll-cq.patch
  * bnxt_re-lib-increment-psn-in-case-of-0-length-packets.patch
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
  * libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * libqedr-fix-inline-data-copy.patch
  * verbs-Do-not-block-QP-attr_masks-used-by-older-kernels.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v16.9 (bsc#996146)
  - rdma-core-16.9:
  - suse: fix dracut support
  - rdma-core-16.8:
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - mlx4: Allow loopback when using raw Ethernet QP
  - travis: Change SuSE package target due to Travis CI failures
  - cbuild: fix tumbleweed docker image
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0
  - rdma-core-16.7:
  - mlx5: Fix SL to Ethernet priority conversion
  - rdma-core-16.6:
  - travis: Fix travis failures
  - verbs: If the uverbs module is not loaded allow get_devices to retry init
  - mlx5: Fix flow tag mask
  - rxe: fix rxe compilation with newer kernels
  - Revert "buildlib: pick leap over tumbleweed"
  - buildlib: pick leap over tumbleweed
  - mlx5: Fix compilation on 32 bit systems when sse3 is on
  - mlx5: Allocate huge page chunks only when needed
  - rxe: Do not use _sockaddr in struct rxe_av
  - rxe: Remove duplicate include</changelog>
</package>
<package pkgid="0401834c9edd4dd6ab5ba986c95c196e697a80c2d93dc31ba9c024b402768089" name="ibmtss" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="902104f0bc136702e99ecb8aef567f864be296ef1f8d320219201042657a1b12" name="ibmtss-base" arch="noarch">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="98887ed038810deeb3f2aae16d9effc2251d0798d224ff110e1b8511b647afa2" name="ibmtss-devel" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="7e13381951529a7174c17efa6012dbfc92ad7f0c15832531c414c8df1eb8cd93" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="7444de7595b2df004fe28616b802eaac277cdc5c502eed763910e605b840cb41" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="2f426875d60261c4e68fdaf52a28c10278347c425416a7e604526e15b207d7e2" name="ibus-branding-openSUSE-KDE" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="3f82b6c4a1ab97df00212085e72905019404e77e6f2bae0d6d6e3501d1c33028" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="f2b4b2b0bf6c19456ccc6680663af953ba6116d9bf9c2e7fa77c3e0bef9765a5" name="ibus-gtk" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="04a7a02f2ec42b0bd8f094272af3214a782eb8182df46005be9840bcc1b53225" name="ibus-gtk-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="ef7790b5d9787c829844b40973b924f112c857237e6df53a9189a9d6b8333e88" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="be388d2a3d64d92b7692753dd7afa3c53a4fda6cc1b7b702e5a3e63371542876" name="ibus-gtk3-32bit" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="318f62d1a144bea71e3c39efe93cdf22081124a507ed8695d73038728a76627b" name="ibus-lang" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="lp150.4.3.1"/>
  <changelog author="qzhao@suse.com" date="1456660800">- Add ibus-adapt-new-vala.patch: Fix ibus compile error under
  new vala compiler in SLE Desktop 12 SP2.</changelog>
  <changelog author="fcrozat@suse.com" date="1458734400">- Do not apply SLE patches on openSUSE 13.2.
- Drop ibus-adapt-new-vala.patch, not needed after all with vala
  0.32.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1460548800">- Own all oxygen icon subdirs, starting with KF 5.21.0, oxygen is
  no longer installed to the same location</changelog>
  <changelog author="ftake@geeko.jp" date="1460980800">- Drop show-input-mode-icon.patch
  * this feature has been reimplemented in another approach</changelog>
  <changelog author="ftake@geeko.jp" date="1460980801">- Upstream update to 1.5.13
  * Add SetCursorLocationRelative D-Bus method
- Upstream update to 1.5.12
  * Fix ibus-daemon does not update user cache
  * Fix lookup window on a secondary monitor cannot get its correct
    size
  * Fix default position of property panel under multi monitor
    environments
  * Change language code from ISO 939-2 to ISO 639-1
  * Fix minor bugs</changelog>
  <changelog author="hillwood@opensuse.org" date="1472126400">- Update to 1.5.14
  * Don't warn if DISPLAY is not set.
  * Install a DBus service file
  * configure: don't hardcode pkg-config
  * conf/gconf: Fix SEGV in ibus_config_gconf_get_values
  * client/gtk2: Fix SEGV with Wayland display
  * ui/gtk3: Fix panel CSS format for GTK 3.20
  * engine: Implement Emoji typing with XKB engines
  * engine: Add emoji-list.html
  * engine: Use annotations/en.xml from unocode.org but not
    emoji-list.html
  * Fix typo in configure.ac
  * tests/ibus-engine-switch: Don't try to remove non-existing GSource
  * Fix make dist
  * Fix Croatian language code in simple.xml
  * Replace deprecated GSimpleAsyncResult with GTask since GLib 2.46</changelog>
  <changelog author="hillwood@opensuse.org" date="1482926400">- Disable emoji dict build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488369600">- Add ibus-vala-0.36.patch: Fix build with vala 0.36, which is
  stricter in its binding usage. Patch only respective vala
  versions.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369601">- Drop ibus-vala-0.18.patch: No longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489320000">- Drop ibus-vala-0.36.patch: No longer needed, since vala 0.36
  re-introduced the compatibility layer.</changelog>
  <changelog author="ftake@geeko.jp" date="1495627200">- Update to 1.5.16
  * Implement shortcut keys on emoji dialog
  * Move language settings from IBusEmojier to ibus-setup
  * Improve `ibus emoji` command to work on Wayland
  * Emoji-related improvements
  * Add man page of `ibus emoji` command
- Update to 1.5.15
  * Fix memory leaks
  * Fix warnings during resizing panel
  * Improve emoji lookup window
  * Support scrill event in GTK3 candidate panel
  * Avoid emoji typing during Unicode typing
  * Fix potential buffer overrun in CreateNestedListi()
  * Set emoji preview text on font setting
  * Add `ibus emoji` command
- Clean up spec file</changelog>
  <changelog author="qzhao@suse.com" date="1495886400">- Update ibus.spec: copy auto-start files to SOURCE directory
  to enable modifications before compile.
- Add ibus-disable-engines-preload-in-GNOME.patch: Disable load
  preload-engines actions in SLE, which is unnecessary for mono IMF
  in SLE and may cause CJK user login failed (bsc#1036729).</changelog>
  <changelog author="ftake@geeko.jp" date="1500811200">- Fix boo#1047912: ibus-setup crashes on Tumbleweed
  * fix missing dependency on python?-gobject-Gdk</changelog>
  <changelog author="alarrosa@suse.com" date="1504008000">- Don't build the branding-openSUSE-KDE package on SLE</changelog>
  <changelog author="ftake@geeko.jp" date="1509192000">- Update to 1.5.17
  * ui/gtk3: Emojier supports Ctrl-c,v,x and Ctrl-Shift-c
  * Make all emoji dicts for fully qualified
  * ui/gtk3: Fix SEGV of Emojier on de_DE.UTF-8
  * ui/gtk3: Do not activate emoji cells on mouse until mouse moves
  * ui/gtk3: Fix SEGV of XKeysymToKeycode() on Wayland
  * client/gtk2: include the scaling factor in Wayland
  * Add IBus portal service to support Flatpack
  * ui/gtk3: Switcher should ignore mouse until it moves
  * client/gtk2: Do not send key events to GtkIMContextSimple
  * ui/gtk3: Fix PropertyPanel position in workarea
  * ui/gtk3: Fix to enable menu button on PropertyPanel
  * ui/gtk3: Increase timeout of window filter in PropertyPanel
  * ui/gtk3: Unset GDK_CORE_DEVICE_EVENTS
  * ui/gtk3: Unref Panel and Indicator when double panels run
  * engine: Add Malay and Mongolian keymaps
  * Update translations</changelog>
  <changelog author="hillwood@opensuse.org" date="1509796800">- Enable python3 build</changelog>
  <changelog author="hillwood@opensuse.org" date="1511092800">- Enable emoji support for openSUSE.
- Use %fdupes in python3-ibus.</changelog>
  <changelog author="ftake@geeko.jp" date="1513684800">- Fix boo#1073524: IBus does not work on Qt5 applicatin under
  Qt5 only environment
  * do not set QT_IM_MODULE=xim for Qt5 applications
  * use QT4_IM_MODULE for Qt4 applications</changelog>
  <changelog author="qzhao@suse.com" date="1516881600">- Change xim.d-ibus-121: Unset LC_CTYPE to make LANG variable
  can change system locale successful(boo#1076854).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1568203200">- Add ibus-CVE-2019-14822.patch: Fix misconfiguration of the DBus
  server allows to unprivileged user could monitor and send method
  calls to the ibus bus of another user(CVE-2019-14822 bnc#1150011).</changelog>
</package>
<package pkgid="10a0f2a5f4f4254ece29038c071fc14bdd9a090adf5ebc53ad488e12cd9f858b" name="ibus-mozc" arch="x86_64">
  <version epoch="0" ver="2.18.2612.102" rel="lp150.3.3.1"/>
  <changelog author="liujianfeng1994@gmail.com" date="1417435200">- Upstream update to 1.15.1917.102
  * Fix Warning message from keymap editor should be updated
- Upstream update to 1.15.1895.102
  * Fix Partial suggestion for numbers are not annotated by &lt;????&gt;</changelog>
  <changelog author="ftake@geeko.jp" date="1418904000">- Add boo906143-revert-session.patch
  * Fix pre-edit is not reset after focus lost (boo#906143)</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1419768000">- Upstream update to 2.16.2003.102
  * Updated main dictionary, Emoji dictionary, emoticon dictionary, and single kanji dictionary
  * Fix IME crashes when using US International hardware keyboard
  * Fix ibus-mozc + XIM: preedit text is not cleared after preedit commit triggered by focus change
  * Fix An empty word can be suggested in the candidate list
- Remove boo906143-revert-session.patch: Merged by upstream
- Update gyp to r2012</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1421928000">- Upstream update to 2.16.2020.102
  * Fix Noisy candidate "itsumo" due to language aware conversion
  * Fix AssertionError in gen_zip_code_seed.py</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1425470400">- Upstream update to 2.16.2037.102
  * Fix: Inconsistency between suggestion candidates and conversion candidates
  * add llvm-clang as build dependence</changelog>
  <changelog author="i@marguerite.su" date="1435492800">- add fcitx-mozc-2.16.2037.102.2.patch
- add mozc-ninja-verbose-build.patch
- update gyp 20150628
- use-libprotobuf=0 for internal protobuf to workaround system
  one's symbol undefined errors caused by gcc-5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1439467200">- ExcludeArch ppc ppc64 ppc64le because no support in
  third_party/protobuf/src/google/protobuf/stubs/ atomicops</changelog>
  <changelog author="dvaleev@suse.com" date="1439812800">- Enable PowerPC builds.
  * Add generic atomics on Power (protobuf-generic-atomic.patch ,
    protobuf-atomic.patch)
  * Workaround llvm bug https://llvm.org/bugs/show_bug.cgi?id=22248
    (mozc-stack-protector.patch)</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Fix ibus-mozc does not allow to remove tha last character
  of preedit text on Qt5 application
  * workaround for the Qt5 bug (boo#947013)
  * Add ibus-qt5-hide_preedit_text-workaround.patch</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1444392000">- Upstream update to 2.17.2123.102
  * Update system dictionary
  * Support rule-based zero query suggestion in 2.16.2080.102
  * GYP repository is switched from code.google.com to chromium.googlesource.com
  * Fix: ibus predict window is shown at the previous cursor position
  * Fix: Preedit and candidate changes buffer modification flag
  * Fix a typo
  * Fix: Possible build failure due to missing dependency on commands_proto from key_info_util
  * Fix: ibus-mozc should enable undo-commit if and only if IBUS_CAP_SURROUNDING_TEXT is set
  * ibus-mozc no longer tries to align suggestion window to the left edge of the composing text
- add fcitx-mozc-2.17.2102.102.1.patch
- remove fcitx-mozc-2.16.2037.102.2.patch
- Specify GYP_DEFINES="use_libzinnia=1" to link to system-installed Zinnia</changelog>
  <changelog author="ftake@geeko.jp" date="1457438400">- Upstream update to 2.17.2313.102
  * "-j" option is deprecated
  * Calculator supports inputs starting with "="
  * ibus-mozc supports "icon_prop_key" and input mode labels are
    shown on tray icon
  * Minor updates and refactoring
- Update ibus-provide-layout-variations.patch
- Update mozc-ninja-verbose-build.patch</changelog>
  <changelog author="ftake@geeko.jp" date="1467460800">- Update Japanese zip code / address table (June 2016)</changelog>
  <changelog author="qzhao@suse.com" date="1469620800">- Add mozc-build-gcc.patch, Force mozc build with gcc(g++).
  Exclude PPC, PPC64, PPC64LE and AARCH64 build target.(bsc#990844)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1469793600">- remove ExcludeArch as related failure caused by workaround
- remove workaround https://llvm.org/bugs/show_bug.cgi?id=22248
  in spec as now using gcc not clang.
  remove mozc-stack-protector.patch</changelog>
  <changelog author="ftake@geeko.jp" date="1470139200">- fix unnecessary "BuildRequires: protobuf-devel"</changelog>
  <changelog author="mgorse@suse.com" date="1471953600">- Disable fcitx on SLE again.</changelog>
  <changelog author="i@marguerite.su" date="1480852800">- update 2.18.2612.102
  * fixed unexpected size bloat of the APK
  * fixed duplicate candidates after undo
  * fixed suggestion-only user dictionary entry may not work
  * fixed abbreviation user dictionary entry may not work
  * fixed suppression word may not work
  * fixed single character noun user dictionary entry may not work
- fcitx-mozc updated to 2.18.2612.102
  * dropped patch: fcitx-mozc-2.17.2102.102.1.patch
  * added patch: fcitx-mozc-2.18.2612.102.1.patch
- protobuf updated to 3.1.0
  * dropped patch: protobuf-atomic.patch, upstreamed
  * dropped patch: protobuf-generic-atomic.patch, upstreamed
- gyp updated to latest master@940a15e
- added patch: mozc-gen_zip_code_seed_py.patch</changelog>
  <changelog author="ro@suse.de" date="1521979200">- add excludearch for ppc/ppc64/s390/s390x as the code assumes
  little endian all over the place (bsc#1086763)</changelog>
  <changelog author="ftake@geeko.jp" date="1532433600">- add gcc-8.1-ZeroQueryDict-iterator.patch
  * fix a build error with gcc 8</changelog>
  <changelog author="ftake@geeko.jp" date="1555070400">- update to support the Japanese new era, Reiwa (boo#1132450)
  * add-Japanese-new-era-reiwa-ligature-to-dict.patch
  * add-Japanese-new-era-reiwa-to-date_rewriter.patch
  * add-Japanese-new-era-reiwa-to-dict.patch
- update zip code dictionary</changelog>
</package>
<package pkgid="5f4926eebadfd8890de705e641a780fd0c5558a41d77780534b07f474e0fef88" name="ibus-mozc-candidate-window" arch="x86_64">
  <version epoch="0" ver="2.18.2612.102" rel="lp150.3.3.1"/>
  <changelog author="liujianfeng1994@gmail.com" date="1417435200">- Upstream update to 1.15.1917.102
  * Fix Warning message from keymap editor should be updated
- Upstream update to 1.15.1895.102
  * Fix Partial suggestion for numbers are not annotated by &lt;????&gt;</changelog>
  <changelog author="ftake@geeko.jp" date="1418904000">- Add boo906143-revert-session.patch
  * Fix pre-edit is not reset after focus lost (boo#906143)</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1419768000">- Upstream update to 2.16.2003.102
  * Updated main dictionary, Emoji dictionary, emoticon dictionary, and single kanji dictionary
  * Fix IME crashes when using US International hardware keyboard
  * Fix ibus-mozc + XIM: preedit text is not cleared after preedit commit triggered by focus change
  * Fix An empty word can be suggested in the candidate list
- Remove boo906143-revert-session.patch: Merged by upstream
- Update gyp to r2012</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1421928000">- Upstream update to 2.16.2020.102
  * Fix Noisy candidate "itsumo" due to language aware conversion
  * Fix AssertionError in gen_zip_code_seed.py</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1425470400">- Upstream update to 2.16.2037.102
  * Fix: Inconsistency between suggestion candidates and conversion candidates
  * add llvm-clang as build dependence</changelog>
  <changelog author="i@marguerite.su" date="1435492800">- add fcitx-mozc-2.16.2037.102.2.patch
- add mozc-ninja-verbose-build.patch
- update gyp 20150628
- use-libprotobuf=0 for internal protobuf to workaround system
  one's symbol undefined errors caused by gcc-5</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1439467200">- ExcludeArch ppc ppc64 ppc64le because no support in
  third_party/protobuf/src/google/protobuf/stubs/ atomicops</changelog>
  <changelog author="dvaleev@suse.com" date="1439812800">- Enable PowerPC builds.
  * Add generic atomics on Power (protobuf-generic-atomic.patch ,
    protobuf-atomic.patch)
  * Workaround llvm bug https://llvm.org/bugs/show_bug.cgi?id=22248
    (mozc-stack-protector.patch)</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Fix ibus-mozc does not allow to remove tha last character
  of preedit text on Qt5 application
  * workaround for the Qt5 bug (boo#947013)
  * Add ibus-qt5-hide_preedit_text-workaround.patch</changelog>
  <changelog author="liujianfeng1994@gmail.com" date="1444392000">- Upstream update to 2.17.2123.102
  * Update system dictionary
  * Support rule-based zero query suggestion in 2.16.2080.102
  * GYP repository is switched from code.google.com to chromium.googlesource.com
  * Fix: ibus predict window is shown at the previous cursor position
  * Fix: Preedit and candidate changes buffer modification flag
  * Fix a typo
  * Fix: Possible build failure due to missing dependency on commands_proto from key_info_util
  * Fix: ibus-mozc should enable undo-commit if and only if IBUS_CAP_SURROUNDING_TEXT is set
  * ibus-mozc no longer tries to align suggestion window to the left edge of the composing text
- add fcitx-mozc-2.17.2102.102.1.patch
- remove fcitx-mozc-2.16.2037.102.2.patch
- Specify GYP_DEFINES="use_libzinnia=1" to link to system-installed Zinnia</changelog>
  <changelog author="ftake@geeko.jp" date="1457438400">- Upstream update to 2.17.2313.102
  * "-j" option is deprecated
  * Calculator supports inputs starting with "="
  * ibus-mozc supports "icon_prop_key" and input mode labels are
    shown on tray icon
  * Minor updates and refactoring
- Update ibus-provide-layout-variations.patch
- Update mozc-ninja-verbose-build.patch</changelog>
  <changelog author="ftake@geeko.jp" date="1467460800">- Update Japanese zip code / address table (June 2016)</changelog>
  <changelog author="qzhao@suse.com" date="1469620800">- Add mozc-build-gcc.patch, Force mozc build with gcc(g++).
  Exclude PPC, PPC64, PPC64LE and AARCH64 build target.(bsc#990844)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1469793600">- remove ExcludeArch as related failure caused by workaround
- remove workaround https://llvm.org/bugs/show_bug.cgi?id=22248
  in spec as now using gcc not clang.
  remove mozc-stack-protector.patch</changelog>
  <changelog author="ftake@geeko.jp" date="1470139200">- fix unnecessary "BuildRequires: protobuf-devel"</changelog>
  <changelog author="mgorse@suse.com" date="1471953600">- Disable fcitx on SLE again.</changelog>
  <changelog author="i@marguerite.su" date="1480852800">- update 2.18.2612.102
  * fixed unexpected size bloat of the APK
  * fixed duplicate candidates after undo
  * fixed suggestion-only user dictionary entry may not work
  * fixed abbreviation user dictionary entry may not work
  * fixed suppression word may not work
  * fixed single character noun user dictionary entry may not work
- fcitx-mozc updated to 2.18.2612.102
  * dropped patch: fcitx-mozc-2.17.2102.102.1.patch
  * added patch: fcitx-mozc-2.18.2612.102.1.patch
- protobuf updated to 3.1.0
  * dropped patch: protobuf-atomic.patch, upstreamed
  * dropped patch: protobuf-generic-atomic.patch, upstreamed
- gyp updated to latest master@940a15e
- added patch: mozc-gen_zip_code_seed_py.patch</changelog>
  <changelog author="ro@suse.de" date="1521979200">- add excludearch for ppc/ppc64/s390/s390x as the code assumes
  little endian all over the place (bsc#1086763)</changelog>
  <changelog author="ftake@geeko.jp" date="1532433600">- add gcc-8.1-ZeroQueryDict-iterator.patch
  * fix a build error with gcc 8</changelog>
  <changelog author="ftake@geeko.jp" date="1555070400">- update to support the Japanese new era, Reiwa (boo#1132450)
  * add-Japanese-new-era-reiwa-ligature-to-dict.patch
  * add-Japanese-new-era-reiwa-to-date_rewriter.patch
  * add-Japanese-new-era-reiwa-to-dict.patch
- update zip code dictionary</changelog>
</package>
<package pkgid="9e7611fa54523bfd37c7ba5167c6bf7ba4e03c9a15bfa9daec1f72addf9c216c" name="ibutils" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="b9a61cfda0b23b8aac89dbd2893eef7ffad47baf5daacfd1029e72d28784d641" name="ibutils-devel" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="dc7a6003b69cb8e23a1b72a1d3e9de837cf8c62bfdd748f7484d77e88aeccd7d" name="ibutils-ui" arch="x86_64">
  <version epoch="0" ver="1.5.7.0.2" rel="lp150.2.3.1"/>
  <changelog author="jjolly@novell.com" date="1273838400">- Updated the ibutils tarball to the one found in the OFED 1.4.2
  release.  There is no version change as the ibutils package in
  OFED changed, but did not change version numbers.</changelog>
  <changelog author="jjolly@novell.com" date="1274702400">- Updated to v1.5.4 from OFED 1.5.1
- Removed patch for libreplace
- Updated the retval patch to include a fix to CredLoops.cpp</changelog>
  <changelog author="pth@suse.de" date="1336478400">- BuildRequire automake, autoconf and libtool.</changelog>
  <changelog author="pth@suse.de" date="1347364800">- Update to 1.5.7-0.1.g05a9d1a from OFED 1.5.4.1:
  New Features:
  * Added scripts that convert OSM dump files for ibdmchk
  ibutils: added support for GUIDInfo MAD in ibis and simulator
  Major Bugs Fixed:
  * ibmgtsim: fixed various bugs with running simulations
  * ibutils: fixed rpmbuild with and w/o ibmgtsim
  Known Issues:
  * Ibdiagnet "-wt" option may generate a bad topology file when
    running on a cluster that contains complex switch systems.
  * ibutils works only partially on any distro with TCL 8.5.
    ibdiagnet/ibdiagpath/ibis don't work with TCL 8.5 due to a change
    in TCL behavior: the built-in TCL function "dump" on TCL 8.5
    always includes field names.
    Until the fix, any user script that uses ibis needs to be fixed
    in order to function correctly on TCL 8.5
- Adapt the patch.
- Package static library in a devel-static package.</changelog>
  <changelog author="pth@suse.de" date="1377691200">- Add ibutils-tk-8.6.patch to include tk 8.6 in the check for accetable
  tk versions.
- Add ibutils-add_shebang.patch to add a shebang to git_version.tcl
  which is installed in _bindir.
- Run fdupes to eleminate file duplication.
- Add a rpmlintrc file to silence useless warnings.
- Add ibutils-autotools.patch to modify the neccessary files
  so that autoreconf can be called.
- (Build)Require graphviz-tcl as ibdiag won't work correctly without
  the graphviz tcl plugin.</changelog>
  <changelog author="pth@suse.de" date="1389960000">- Update to OFED 3.12 daily snapshot
- Use spdx.org format for license specification</changelog>
  <changelog author="pth@suse.de" date="1401796800">- Update to OFED 3.12 final.</changelog>
  <changelog author="pth@suse.de" date="1405598400">- Do not build and install the dynamic library so remove all
  traces.
- Remove .la files as they were only needed for the static libs.</changelog>
  <changelog author="pth@suse.de" date="1405684800">- Remove the bogus rpath from ibdmsh and that vein do not link
  ibdmsh statically.</changelog>
  <changelog author="p.drouand@gmail.com" date="1423828800">- Update to version 1.5.7-0.2
  * No changelog available
- Remove ibutils-add_shebang.patch; not needed anymore
- Use download Url as source</changelog>
  <changelog author="mgorse@suse.com" date="1424692800">- Add COPYING to package docs.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1490875200">- Add ibutils-diagui.patch to allow UI less compilation
- Add a separate ibutils-ui package for UI tools. BSC #1030891</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Normalize all macros
- Replace "1 tool" by one tool for better reading</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Scriptlets and %packages need not be wrapped in %if.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1496404800">- Fix ibutils-diagui.patch to not build ibdiagui
  with the ibutils package.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1527076800">- Move ibdm and ibis library directories to libibdm1 package (bsc#1092166)</changelog>
</package>
<package pkgid="0898f88f592debd316c2b528311d36a1f382c8cc9b7e5a12b0cda87f6b2cbab2" name="icecast" arch="src">
  <version epoch="0" ver="2.4.3" rel="lp150.4.1"/>
  <changelog author="tiwai@suse.de" date="1166529600">- fix comparison of string literal in cfgfile.c (#226380).</changelog>
  <changelog author="mmarek@suse.cz" date="1170417600">- fix build with curl-7.16
- fixed more comparison with string literals by using static char*
  variables instead of #defines to string constans to detect
  whether a default or malloced value is used</changelog>
  <changelog author="tiwai@suse.de" date="1213790400">- updated to version 2.3.2:
  * Character set support
  * Authentication improvements
  * Listening socket update
  * XSL update
  * Updates for stream directory handling.
  * Updates for Win32.
  * Accept/Ban IP support.
  * A Mountpoint is exported to the slaves even if no mount
    section is defined for it.
  * Relays handle redirection (HTTP 302) if one is received at
    startup.
  * Automatically generate XSPF playlist like we do with M3U, the
    mountpoint extension is .xspf
  * Header updates for proxy handling and certain clients like
    some shoutcast source clients and flash players.
  * Added Kate/Skeleton codecs to Ogg handler.
  * Various stats cleanups.
  * The streamlist passed from master to slave had a limited
    length
  * Documentation updates.
  * Relay startup/shutdown is cleaner.
  * several build cleanups.
  * several resource leaks and race conditions fixed</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot ?.? to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="6c92f316ffc9d77f917dcf0a6bc94f461a1f7f36ec42c04c8378349134de31b8" name="icecast" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp150.4.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot ?.? to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="6380bdcc6e19b0ad1da05d3727cf2304bd288238c037c0efb293fa9c24d65195" name="icecast-doc" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="lp150.4.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with --no-add-needed
- Enable SSL support.</changelog>
  <changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="tiwai@suse.de" date="1330948800">- Fix VUL-1: icecast log injection (CVE-2011-4612, bnc#737255)</changelog>
  <changelog author="dimstar@opensuse.org" date="1353326400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
  <changelog author="jw@suse.com" date="1358856000">- nuked %make_install to make SLES11 SP2 happy.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1370433600">- update to 2.3.3:
  * security:
    + Improved HTTPS cipher handling and added support for chained certificates.
    + Allow the source password to be undefined. There was a corner case, where
    a default password would have taken effect. It would require the admin to
    remove the 'source-password' from the icecast config to take effect. Default
    configs ship with the password set, so this vulnerability doesn't trigger
    there.
    + Prevent error log injection of control characters by substituting
    non-alphanumeric characters with a '.' (CVE-2011-4612). Injection attempts
    can be identified via access.log, as that stores URL encoded requests.
    Investigation if further logging code needs to have sanitized output is
    ongoing.
  * bugfixes:
    + On-demand relaying - Reject listeners while reconnecting. Fix stats for
    relays without mount section.
    + Prevent too frequent YP updates.
    + Only allow raw metadata updates from same IP as connected source (unless
    user is admin). This addresses broken client software that issues updates
    without being connected.
    + Minor memory leaks
    + XSPF file installation
    + Fix case of global listeners count becoming out of sync.
    + Setting an interval of 0 in mount should disable shoutcast metadata inserts.
  * authentication:
    + Sources can now be authenticated via URL, like listeners. Post info is
    "action=stream_auth&amp;mount=/stream&amp;ip=IP&amp;server=SERVER&amp;port=8000&amp;user=fred&amp;pass=pass"
    As admin requests can come in for a stream (eg metadata update) these
    requests can be issued while stream is active. For these &amp;admin=1 is added to
    the POST details.
  * XSL update:
    + automatically generate VCLT playlist like we do with M3U, the mountpoint
    extension is .vclt
- package updates:
  * add systemd service file
  * add logrotate configuration
  * add Gentoo patches
  * set pidfile directive in default config file to make it work with
    systemd
  * split out HTML documentation into -doc subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1385726400">- remove dependency to syslog.target in icecast.service, as it doesn't exist
  any more, see bnc#852314</changelog>
  <changelog author="tiwai@suse.de" date="1392120000">- Remove the obsoleted icecast-2.3.2-CVE-2011-4612.diff that leads
  to invalid access to freed memory (bnc#862096)</changelog>
  <changelog author="mail@davykager.nl" date="1400587200">- Update to version 2.4.0:
  * Support for WebM video
  * Support for Opus audio in Ogg
  * Fixes for some race conditions
  * Allow (standard strftime(3)) %x codes in &lt;dump-file&gt;. Disabled for win32.
  * Dropped debian packaging directory as debian use their own.
- Disable Gentoo patches because they have no effect on the OBS builds.
  icecast-2.3.3-libkate.patch (has no effect on automated builds)
  icecast-2.3.3-fix-xiph_openssl.patch (spec file guarantees openssl exists)
- Rebase icecast-fix-no-add-needed.patch for version 2.4.0.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre script</changelog>
  <changelog author="fisiu@opensuse.org" date="1415966400">- Add icecast-2.4.0-produce-valid-json.patch: produce valid json status,
  fix boo#905468.</changelog>
  <changelog author="fisiu@opensuse.org" date="1416657600">- Add icecast-mp3-frame-validation.patch: validate mp3 frame.</changelog>
  <changelog author="tiwai@suse.de" date="1416916800">- updated to version 2.4.1:
  * Fixes in logging, &lt;auth&gt; in default mounts, JSON status API
  * SSL Security improvements:
  * Handle empty strings in config file better
  * Require Content-Type header for PUT requests
  * Fix possible leak of on-connect scripts (CVE-2014-9018,bnc#906538)
  More details, see http://icecast.org/news/icecast-release-2_4_1/
- Remove obsoleted patch:
  icecast-2.4.0-produce-valid-json.patch
- Change doc subpackage to noarch
- Spec file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1421668800">- Remove sysvinit support as the package now build only for systems
  with systemd support
- Add a backward rc compatibility symlink to systemd service file
- Only require systemd-rpm-macros to build; no need to require
  entire systemd environment
- Clean up specfile</changelog>
  <changelog author="tiwai@suse.de" date="1428494400">- update to version 2.4.2:
  Fix crash when URL Auth is used with stream_autho without
  credentials (bnc#926402)</changelog>
  <changelog author="avindra@opensuse.org" date="1513512000">- update to version 2.4.3:
  * Fixes Windows only vulnerability (CVE-2005-0837), where an
    attacker could access the raw XSLT template file by appending a
    dot ?.? to the URL. To be clear, no runtime information could be
    accessed this way.
- cleanup spec file with spec-cleaner
- fix bad line endings warning in CSS file
- rebase icecast-fix-no-add-needed.patch
- replace PreReq statements with Requires(pre)</changelog>
  <changelog author="tiwai@suse.de" date="1541160000">- Fix buffer overflow in url-auth (CVE-2018-18820, bsc#1114434):
  icecast-CVE-2018-18820-1.patch
  icecast-CVE-2018-18820-2.patch</changelog>
</package>
<package pkgid="f209cca78a8cd47829cdf8260308aa418b186f4d2872c68397fe1677868a5e4c" name="icedtea-web" arch="src">
  <version epoch="0" ver="1.7.2" rel="lp150.2.3.1"/>
  <changelog author="pjanouch@suse.de" date="1467979200">- Fix bsc#982622 net.sourceforge.jnlp.LaunchException
  with icedtea-web-1.6.1-fix-2746.patch taken from 1.6.2</changelog>
  <changelog author="fstrba@suse.com" date="1469102400">- Bump build java-devel version requirements to 1.7 or bigger
  * The build system requires it</changelog>
  <changelog author="fstrba@suse.com" date="1487678400">- Removed patch:
  * icedtea-web-1.6.1-fix-2746.patch
    + Part of 1.6.2</changelog>
  <changelog author="fstrba@suse.com" date="1498219200">- Remove the java-*-openjdk-plugin.spec files
- Build only one version of plugin and javaws, that works with the
  default java alternative
- Name the package back icedtea-web
- Depend on tagsoup to handle the majority badly formed html out
  there</changelog>
  <changelog author="fstrba@suse.com" date="1498737600">- Handle the plugin with alternatives
- Register icedtea-web's javaws as default handler for jnlp and
  jnlps protocols</changelog>
  <changelog author="fstrba@suse.com" date="1501243200">- Update to 1.7
  * PR3366 - bash completion file was split to three, and is
    setup-able by bashcompdir environment variable
  * added experimental support for windows
  * added experimental support for java 9 (linux only)
  * added experimental support for jnlp protocol (see
    https://bugs.openjdk.java.net/browse/JDK-8055464)
  * restricted to JDK8 and higher
  * all connection restrictions now consider also port
  * Enabled Entry-Point attribute check
  * permissions sandbox and signed app and unsigned app with
    permissions all-permissions now run in sandbox instead of not
    at all.
  * fixed DownloadService
  * PR2779: html-gen.sh: Don't try to call hg if .hg directory
    isn't present
  * PR2591 - IcedTea-Web request resources twice for meta
    informations and causes ClientAbortException on tomcat in
    conjunction with JnlpDownloadServlet
  * PR2690 - Can't run BOM into JNLP file
  * PR2669 - remove bash-specific syntax from top level Makefile.am
  * PR2489 - various NPEs when codebase is null
  * PR2855 - configure.ac: Remove unnecessary checks for libX11 and
    zlib
  * PR878 - (http-511) Handle HTTP error 511 Network Authentication
    Required (standard secure proxy authentification/captive portal
    detection)
  * PR1190 - unuseable javaws cache handling
  * PR3227 - can not save file with query longer then (together
    with name) then 255 chars
  * comments in deployment.properties now should persists load/save
  * fixed bug in caching of files with query
  * fixed issues with recreating of existing shortcut
  * trustAll/trustNone now processed correctly
  * headless no longer shows dialogues
  * RH1231441 Unable to read the text of the buttons of the
    security dialogue
  * Fixed RH1233697 icedtea-web: applet origin spoofing
  * Fixed RH1233667 icedtea-web: unexpected permanent authorization
    of unsigned applets
  * FIXED PR3263 - Cannot retrieve JavaScript Engine using
    ScriptEngineManager.getEngineByName
  * fixed fatal impact of initialization error of FileLog
  * MissingALACAdialog made available also for unsigned applications
    (but ignoring actual manifest value) and fixed
  * more dialogs got remember me possibility
  - MissingALACAttributePanel
  - AccessWarning
  - MissingPermissionsAttributePanel
  - MatchingALACAttributePanel
  - UnsignedAppletTrustWarningPanel
  - PartiallySignedAppTrustWarningPanel
  * Itw-settings
  - All rememberable dialogues can have saved value modified
  * NetX
  - fixed issues with -html shortcuts
  - fixed issue with -html receiving garbage in width and height
  - main-class attribute trimmed by default
  - in strict mode, main-class attribute checked for invalid
    characters
  - added -browser switch as workaround around most uttermost
    http authentications cornercases
  * PolicyEditor
  - Entry list is sorted, entries will appear with consistent
    ordering
  - file flag made to work when used standalone
  - file flag cannot be used in combination with main argument
  - defaultfile flag added
  - support for SignedBy and Principals along with existing
    Codebase
  * Plugin
  - RH1273691 - Escaped equals signs in deployment.properties not
    un-escaped when used
  - PR2746 - IcedTea-Web Plugin 1.6.1:
    net.sourceforge.jnlp.LaunchException
  - PR2714 - IcedTea-Web plugin sends uninitialized memory
    garbage across a pipe when NPN_GetValueForURL call fails
  - PR3198 - Error in webmin
  - PR2968 - IcedTea-Web crashes on Dell EqualLogic SAN</changelog>
  <changelog author="fstrba@suse.com" date="1504612800">- Added patch:
  * icedtea-web-exports.patch
  - Fixing "java.lang.IllegalAccessError: class
    netscape.javascript.JSObject (in module jdk.jsobject) cannot
    access class sun.applet.PluginDebug (in module java.desktop)
    because module java.desktop does not export sun.applet to
    module jdk.jsobject" with
    https://www.java.com/en/download/installed8.jsp?detect=jre</changelog>
  <changelog author="fstrba@suse.com" date="1504612801">- Added patch:
  * icedtea-web-x509factory.patch
  - Allow building of icedtea-web (with some limitations) using
    jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1504612802">- Added patch:
  * icedtea-web-javadoc9.patch
  - Allow building of icedtea-web-javadoc with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506427200">- Modified patch:
  * icedtea-web-exports.patch
    + Fix typo in patch</changelog>
  <changelog author="fstrba@suse.com" date="1510660800">- Added patch:
  * icedtea-web-jdk10.patch
    + Allow build/run with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1510747200">- Bumped by mistake build requirement, bump it back.
  Build with java-devel &gt;= 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1511438400">- Modified patch:
  * icedtea-web-jdk10.patch
    + more future-proof determination of java version</changelog>
  <changelog author="fstrba@suse.com" date="1513339200">- Update to 1.7.1
  * better work with authors file
  * better work with jdk9
  * Added possibility to turn off https preference via deployment
    properties
- Removed patches:
  * icedtea-web-exports.patch
  * icedtea-web-javadoc9.patch
  * icedtea-web-x509factory.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Disable the native plugin for SLE from version 15 (fate#323976)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526385600">- Drop java Supplements: We no longer want to install this browser
  plugin for all users that have java installed by default. It is
  no longer supported by the majority of browsers in use, including
  Mozilla Firefox.</changelog>
  <changelog author="fstrba@suse.com" date="1528891200">- Remove dependency on objectweb-asm, since the build does not need
  it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- BuildConflict with java &gt;= 11, since it cannot build icedtea-web
  due to removed classes.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- Make the plugin opt-in for all distributions and architectures</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1564142400">- Update to 1.7.2
  * added support for javafx-desc and so allow run of pure-javafx
    only applications
  * --nosecurity enhanced for possibility to skip invalid
    signatures
  * enhanced to allow resources to be read also from j2se/java
    element (OmegaT)
  * PR3644 - java.lang.NoClassDefFoundError: Could not initialize class
    net.sourceforge.jnlp.runtime.JNLPRuntime$DeploymentConfigurationHolder
  * deployment.config now support generic url instead just file
  * Added support for windows desktop shortcuts via
    https://github.com/DmitriiShamrikov/mslinks
  * cache can now be operated by groups, list by -Xcacheids
    (details via -verbose, can filter by regex), Xclearcache now can
    clear only selected id. There is also gui to operate cache via
    id in itweb-settings now.
  * desktop shortcut name get shortened to title or file if title
    is missing.
  * scripted launchers rework: Windows bat launchers rewritten to
    be feature complete, Linux shell launchers made portable, build
    enhanced to produce platform independent image
- Removed patch:
  * icedtea-web-jdk10.patch
    + integrated upstream
- Added patches:
  * CVE-2019-10181.patch
    + Upstream patch to fix bsc#1142835, CVE-2019-10181:
    icedtea-web: unsigned code injection in a signed JAR file
  * CVE-2019-10182_1.patch
  * CVE-2019-10182_2.patch
    + Upstream patches to fix bsc#1142825, CVE-2019-10182:
    icedtea-web: path traversal while processing &lt;jar/&gt; elements
    of JNLP files results in arbitrary file overwrite
  * CVE-2019-10185.patch
    + Upstream patch to fix bsc#1142832, CVE-2019-10185:
    icedtea-web: directory traversal in the nested jar
    auto-extraction leading to arbitrary file overwrite</changelog>
</package>
<package pkgid="aee58ba1257c082ed66b9f90fd1c80022ee53f2ac6fd730e63a9f86d49e2c06a" name="icedtea-web" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="lp150.2.3.1"/>
  <changelog author="pjanouch@suse.de" date="1467979200">- Fix bsc#982622 net.sourceforge.jnlp.LaunchException
  with icedtea-web-1.6.1-fix-2746.patch taken from 1.6.2</changelog>
  <changelog author="fstrba@suse.com" date="1469102400">- Bump build java-devel version requirements to 1.7 or bigger
  * The build system requires it</changelog>
  <changelog author="fstrba@suse.com" date="1487678400">- Removed patch:
  * icedtea-web-1.6.1-fix-2746.patch
    + Part of 1.6.2</changelog>
  <changelog author="fstrba@suse.com" date="1498219200">- Remove the java-*-openjdk-plugin.spec files
- Build only one version of plugin and javaws, that works with the
  default java alternative
- Name the package back icedtea-web
- Depend on tagsoup to handle the majority badly formed html out
  there</changelog>
  <changelog author="fstrba@suse.com" date="1498737600">- Handle the plugin with alternatives
- Register icedtea-web's javaws as default handler for jnlp and
  jnlps protocols</changelog>
  <changelog author="fstrba@suse.com" date="1501243200">- Update to 1.7
  * PR3366 - bash completion file was split to three, and is
    setup-able by bashcompdir environment variable
  * added experimental support for windows
  * added experimental support for java 9 (linux only)
  * added experimental support for jnlp protocol (see
    https://bugs.openjdk.java.net/browse/JDK-8055464)
  * restricted to JDK8 and higher
  * all connection restrictions now consider also port
  * Enabled Entry-Point attribute check
  * permissions sandbox and signed app and unsigned app with
    permissions all-permissions now run in sandbox instead of not
    at all.
  * fixed DownloadService
  * PR2779: html-gen.sh: Don't try to call hg if .hg directory
    isn't present
  * PR2591 - IcedTea-Web request resources twice for meta
    informations and causes ClientAbortException on tomcat in
    conjunction with JnlpDownloadServlet
  * PR2690 - Can't run BOM into JNLP file
  * PR2669 - remove bash-specific syntax from top level Makefile.am
  * PR2489 - various NPEs when codebase is null
  * PR2855 - configure.ac: Remove unnecessary checks for libX11 and
    zlib
  * PR878 - (http-511) Handle HTTP error 511 Network Authentication
    Required (standard secure proxy authentification/captive portal
    detection)
  * PR1190 - unuseable javaws cache handling
  * PR3227 - can not save file with query longer then (together
    with name) then 255 chars
  * comments in deployment.properties now should persists load/save
  * fixed bug in caching of files with query
  * fixed issues with recreating of existing shortcut
  * trustAll/trustNone now processed correctly
  * headless no longer shows dialogues
  * RH1231441 Unable to read the text of the buttons of the
    security dialogue
  * Fixed RH1233697 icedtea-web: applet origin spoofing
  * Fixed RH1233667 icedtea-web: unexpected permanent authorization
    of unsigned applets
  * FIXED PR3263 - Cannot retrieve JavaScript Engine using
    ScriptEngineManager.getEngineByName
  * fixed fatal impact of initialization error of FileLog
  * MissingALACAdialog made available also for unsigned applications
    (but ignoring actual manifest value) and fixed
  * more dialogs got remember me possibility
  - MissingALACAttributePanel
  - AccessWarning
  - MissingPermissionsAttributePanel
  - MatchingALACAttributePanel
  - UnsignedAppletTrustWarningPanel
  - PartiallySignedAppTrustWarningPanel
  * Itw-settings
  - All rememberable dialogues can have saved value modified
  * NetX
  - fixed issues with -html shortcuts
  - fixed issue with -html receiving garbage in width and height
  - main-class attribute trimmed by default
  - in strict mode, main-class attribute checked for invalid
    characters
  - added -browser switch as workaround around most uttermost
    http authentications cornercases
  * PolicyEditor
  - Entry list is sorted, entries will appear with consistent
    ordering
  - file flag made to work when used standalone
  - file flag cannot be used in combination with main argument
  - defaultfile flag added
  - support for SignedBy and Principals along with existing
    Codebase
  * Plugin
  - RH1273691 - Escaped equals signs in deployment.properties not
    un-escaped when used
  - PR2746 - IcedTea-Web Plugin 1.6.1:
    net.sourceforge.jnlp.LaunchException
  - PR2714 - IcedTea-Web plugin sends uninitialized memory
    garbage across a pipe when NPN_GetValueForURL call fails
  - PR3198 - Error in webmin
  - PR2968 - IcedTea-Web crashes on Dell EqualLogic SAN</changelog>
  <changelog author="fstrba@suse.com" date="1504612800">- Added patch:
  * icedtea-web-exports.patch
  - Fixing "java.lang.IllegalAccessError: class
    netscape.javascript.JSObject (in module jdk.jsobject) cannot
    access class sun.applet.PluginDebug (in module java.desktop)
    because module java.desktop does not export sun.applet to
    module jdk.jsobject" with
    https://www.java.com/en/download/installed8.jsp?detect=jre</changelog>
  <changelog author="fstrba@suse.com" date="1504612801">- Added patch:
  * icedtea-web-x509factory.patch
  - Allow building of icedtea-web (with some limitations) using
    jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1504612802">- Added patch:
  * icedtea-web-javadoc9.patch
  - Allow building of icedtea-web-javadoc with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506427200">- Modified patch:
  * icedtea-web-exports.patch
    + Fix typo in patch</changelog>
  <changelog author="fstrba@suse.com" date="1510660800">- Added patch:
  * icedtea-web-jdk10.patch
    + Allow build/run with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1510747200">- Bumped by mistake build requirement, bump it back.
  Build with java-devel &gt;= 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1511438400">- Modified patch:
  * icedtea-web-jdk10.patch
    + more future-proof determination of java version</changelog>
  <changelog author="fstrba@suse.com" date="1513339200">- Update to 1.7.1
  * better work with authors file
  * better work with jdk9
  * Added possibility to turn off https preference via deployment
    properties
- Removed patches:
  * icedtea-web-exports.patch
  * icedtea-web-javadoc9.patch
  * icedtea-web-x509factory.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Disable the native plugin for SLE from version 15 (fate#323976)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526385600">- Drop java Supplements: We no longer want to install this browser
  plugin for all users that have java installed by default. It is
  no longer supported by the majority of browsers in use, including
  Mozilla Firefox.</changelog>
  <changelog author="fstrba@suse.com" date="1528891200">- Remove dependency on objectweb-asm, since the build does not need
  it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- BuildConflict with java &gt;= 11, since it cannot build icedtea-web
  due to removed classes.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- Make the plugin opt-in for all distributions and architectures</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1564142400">- Update to 1.7.2
  * added support for javafx-desc and so allow run of pure-javafx
    only applications
  * --nosecurity enhanced for possibility to skip invalid
    signatures
  * enhanced to allow resources to be read also from j2se/java
    element (OmegaT)
  * PR3644 - java.lang.NoClassDefFoundError: Could not initialize class
    net.sourceforge.jnlp.runtime.JNLPRuntime$DeploymentConfigurationHolder
  * deployment.config now support generic url instead just file
  * Added support for windows desktop shortcuts via
    https://github.com/DmitriiShamrikov/mslinks
  * cache can now be operated by groups, list by -Xcacheids
    (details via -verbose, can filter by regex), Xclearcache now can
    clear only selected id. There is also gui to operate cache via
    id in itweb-settings now.
  * desktop shortcut name get shortened to title or file if title
    is missing.
  * scripted launchers rework: Windows bat launchers rewritten to
    be feature complete, Linux shell launchers made portable, build
    enhanced to produce platform independent image
- Removed patch:
  * icedtea-web-jdk10.patch
    + integrated upstream
- Added patches:
  * CVE-2019-10181.patch
    + Upstream patch to fix bsc#1142835, CVE-2019-10181:
    icedtea-web: unsigned code injection in a signed JAR file
  * CVE-2019-10182_1.patch
  * CVE-2019-10182_2.patch
    + Upstream patches to fix bsc#1142825, CVE-2019-10182:
    icedtea-web: path traversal while processing &lt;jar/&gt; elements
    of JNLP files results in arbitrary file overwrite
  * CVE-2019-10185.patch
    + Upstream patch to fix bsc#1142832, CVE-2019-10185:
    icedtea-web: directory traversal in the nested jar
    auto-extraction leading to arbitrary file overwrite</changelog>
</package>
<package pkgid="c545c2fe39f4b5ca277ab74e0a87ce599d93fb6bbb15cb66a616b6b856660efb" name="icedtea-web-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="lp150.2.3.1"/>
  <changelog author="pjanouch@suse.de" date="1467979200">- Fix bsc#982622 net.sourceforge.jnlp.LaunchException
  with icedtea-web-1.6.1-fix-2746.patch taken from 1.6.2</changelog>
  <changelog author="fstrba@suse.com" date="1469102400">- Bump build java-devel version requirements to 1.7 or bigger
  * The build system requires it</changelog>
  <changelog author="fstrba@suse.com" date="1487678400">- Removed patch:
  * icedtea-web-1.6.1-fix-2746.patch
    + Part of 1.6.2</changelog>
  <changelog author="fstrba@suse.com" date="1498219200">- Remove the java-*-openjdk-plugin.spec files
- Build only one version of plugin and javaws, that works with the
  default java alternative
- Name the package back icedtea-web
- Depend on tagsoup to handle the majority badly formed html out
  there</changelog>
  <changelog author="fstrba@suse.com" date="1498737600">- Handle the plugin with alternatives
- Register icedtea-web's javaws as default handler for jnlp and
  jnlps protocols</changelog>
  <changelog author="fstrba@suse.com" date="1501243200">- Update to 1.7
  * PR3366 - bash completion file was split to three, and is
    setup-able by bashcompdir environment variable
  * added experimental support for windows
  * added experimental support for java 9 (linux only)
  * added experimental support for jnlp protocol (see
    https://bugs.openjdk.java.net/browse/JDK-8055464)
  * restricted to JDK8 and higher
  * all connection restrictions now consider also port
  * Enabled Entry-Point attribute check
  * permissions sandbox and signed app and unsigned app with
    permissions all-permissions now run in sandbox instead of not
    at all.
  * fixed DownloadService
  * PR2779: html-gen.sh: Don't try to call hg if .hg directory
    isn't present
  * PR2591 - IcedTea-Web request resources twice for meta
    informations and causes ClientAbortException on tomcat in
    conjunction with JnlpDownloadServlet
  * PR2690 - Can't run BOM into JNLP file
  * PR2669 - remove bash-specific syntax from top level Makefile.am
  * PR2489 - various NPEs when codebase is null
  * PR2855 - configure.ac: Remove unnecessary checks for libX11 and
    zlib
  * PR878 - (http-511) Handle HTTP error 511 Network Authentication
    Required (standard secure proxy authentification/captive portal
    detection)
  * PR1190 - unuseable javaws cache handling
  * PR3227 - can not save file with query longer then (together
    with name) then 255 chars
  * comments in deployment.properties now should persists load/save
  * fixed bug in caching of files with query
  * fixed issues with recreating of existing shortcut
  * trustAll/trustNone now processed correctly
  * headless no longer shows dialogues
  * RH1231441 Unable to read the text of the buttons of the
    security dialogue
  * Fixed RH1233697 icedtea-web: applet origin spoofing
  * Fixed RH1233667 icedtea-web: unexpected permanent authorization
    of unsigned applets
  * FIXED PR3263 - Cannot retrieve JavaScript Engine using
    ScriptEngineManager.getEngineByName
  * fixed fatal impact of initialization error of FileLog
  * MissingALACAdialog made available also for unsigned applications
    (but ignoring actual manifest value) and fixed
  * more dialogs got remember me possibility
  - MissingALACAttributePanel
  - AccessWarning
  - MissingPermissionsAttributePanel
  - MatchingALACAttributePanel
  - UnsignedAppletTrustWarningPanel
  - PartiallySignedAppTrustWarningPanel
  * Itw-settings
  - All rememberable dialogues can have saved value modified
  * NetX
  - fixed issues with -html shortcuts
  - fixed issue with -html receiving garbage in width and height
  - main-class attribute trimmed by default
  - in strict mode, main-class attribute checked for invalid
    characters
  - added -browser switch as workaround around most uttermost
    http authentications cornercases
  * PolicyEditor
  - Entry list is sorted, entries will appear with consistent
    ordering
  - file flag made to work when used standalone
  - file flag cannot be used in combination with main argument
  - defaultfile flag added
  - support for SignedBy and Principals along with existing
    Codebase
  * Plugin
  - RH1273691 - Escaped equals signs in deployment.properties not
    un-escaped when used
  - PR2746 - IcedTea-Web Plugin 1.6.1:
    net.sourceforge.jnlp.LaunchException
  - PR2714 - IcedTea-Web plugin sends uninitialized memory
    garbage across a pipe when NPN_GetValueForURL call fails
  - PR3198 - Error in webmin
  - PR2968 - IcedTea-Web crashes on Dell EqualLogic SAN</changelog>
  <changelog author="fstrba@suse.com" date="1504612800">- Added patch:
  * icedtea-web-exports.patch
  - Fixing "java.lang.IllegalAccessError: class
    netscape.javascript.JSObject (in module jdk.jsobject) cannot
    access class sun.applet.PluginDebug (in module java.desktop)
    because module java.desktop does not export sun.applet to
    module jdk.jsobject" with
    https://www.java.com/en/download/installed8.jsp?detect=jre</changelog>
  <changelog author="fstrba@suse.com" date="1504612801">- Added patch:
  * icedtea-web-x509factory.patch
  - Allow building of icedtea-web (with some limitations) using
    jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1504612802">- Added patch:
  * icedtea-web-javadoc9.patch
  - Allow building of icedtea-web-javadoc with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506427200">- Modified patch:
  * icedtea-web-exports.patch
    + Fix typo in patch</changelog>
  <changelog author="fstrba@suse.com" date="1510660800">- Added patch:
  * icedtea-web-jdk10.patch
    + Allow build/run with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1510747200">- Bumped by mistake build requirement, bump it back.
  Build with java-devel &gt;= 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1511438400">- Modified patch:
  * icedtea-web-jdk10.patch
    + more future-proof determination of java version</changelog>
  <changelog author="fstrba@suse.com" date="1513339200">- Update to 1.7.1
  * better work with authors file
  * better work with jdk9
  * Added possibility to turn off https preference via deployment
    properties
- Removed patches:
  * icedtea-web-exports.patch
  * icedtea-web-javadoc9.patch
  * icedtea-web-x509factory.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Disable the native plugin for SLE from version 15 (fate#323976)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526385600">- Drop java Supplements: We no longer want to install this browser
  plugin for all users that have java installed by default. It is
  no longer supported by the majority of browsers in use, including
  Mozilla Firefox.</changelog>
  <changelog author="fstrba@suse.com" date="1528891200">- Remove dependency on objectweb-asm, since the build does not need
  it</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- BuildConflict with java &gt;= 11, since it cannot build icedtea-web
  due to removed classes.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1549368000">- Make the plugin opt-in for all distributions and architectures</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1564142400">- Update to 1.7.2
  * added support for javafx-desc and so allow run of pure-javafx
    only applications
  * --nosecurity enhanced for possibility to skip invalid
    signatures
  * enhanced to allow resources to be read also from j2se/java
    element (OmegaT)
  * PR3644 - java.lang.NoClassDefFoundError: Could not initialize class
    net.sourceforge.jnlp.runtime.JNLPRuntime$DeploymentConfigurationHolder
  * deployment.config now support generic url instead just file
  * Added support for windows desktop shortcuts via
    https://github.com/DmitriiShamrikov/mslinks
  * cache can now be operated by groups, list by -Xcacheids
    (details via -verbose, can filter by regex), Xclearcache now can
    clear only selected id. There is also gui to operate cache via
    id in itweb-settings now.
  * desktop shortcut name get shortened to title or file if title
    is missing.
  * scripted launchers rework: Windows bat launchers rewritten to
    be feature complete, Linux shell launchers made portable, build
    enhanced to produce platform independent image
- Removed patch:
  * icedtea-web-jdk10.patch
    + integrated upstream
- Added patches:
  * CVE-2019-10181.patch
    + Upstream patch to fix bsc#1142835, CVE-2019-10181:
    icedtea-web: unsigned code injection in a signed JAR file
  * CVE-2019-10182_1.patch
  * CVE-2019-10182_2.patch
    + Upstream patches to fix bsc#1142825, CVE-2019-10182:
    icedtea-web: path traversal while processing &lt;jar/&gt; elements
    of JNLP files results in arbitrary file overwrite
  * CVE-2019-10185.patch
    + Upstream patch to fix bsc#1142832, CVE-2019-10185:
    icedtea-web: directory traversal in the nested jar
    auto-extraction leading to arbitrary file overwrite</changelog>
</package>
<package pkgid="75036c13d68cd8634f8439d7a038b2d9786adc4f7e124d859caf3a78b18fcf41" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp150.11.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="2177b3f1a9f16ca418a1d6113f7da63072d48a89943ad1ce396aca33a4196500" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.11.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="6824a3dda9d845785264b7d59f728266829f5e1c4060cdc9e1d83b1e4a6a6d2e" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="406ee61b4f8ac919b6aa1de89715eb7e2942745196ea7db6398ba11c65150bda" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="dd10dc5ff54f4f926f215641c3f8c23be04bd307c3927d7ee31bd43b7ab39c92" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.11.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="8600f79f131a5a99a820676ff89feac23759d641e9ddf312921c3a5086e183a4" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="d36984f271e9bbce3c2bd21c67961bff74591f5386fb8b2ec9f22dfbf30884f1" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.11.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="54052cba3003b516f2855ee91b6ca145a10aebc1d36962daa934ce89e08a16cb" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="ebb986136dcfa093a011ab11681826d4975790778bf3b4af5fbf7759315a07b2" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.11.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="4c6c47cb01e7c2b319d7ea4337a2d8827b42a23c88632e9b136e65c7c1825182" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="3f02c31c9726bfeeec99625c4366cea1ddc3956bcbb097c28b3056cad6cab22c" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.11.1"/>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
</package>
<package pkgid="878dc30ce2a1b19533fb29877603db542baddc2c3acf4af8feac63125a7a2f72" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="0f68158289a4cb56617f256215ce083ca706541d5978fea8e237f4aca5e224e0" name="imobiledevice-tools" arch="x86_64">
  <version epoch="0" ver="1.2.0+git20170122.45fda81" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1405339200">- add hard depedency on libplist-devel for libimobiledevice-devel
  * fix build for openSUSE Factory
  * I don't know why it didn't automatically requires it.</changelog>
  <changelog author="m.szulecki@libimobiledevice.org" date="1413547200">- Update to version 1.1.7
  * Fix broken app args, environment handling and memory leaks in idevicedebug
  * Make all tools print an error if lockdown connection fails
  * Convert int16_t macro error types into enum for better type-checking and
  * for various debugging benefits
  * Avoid exporting non-public symbols for better ABI stability
  * Fix failing backup process for devices having a passcode set and entering
  * lock state during the process in idevicebackup2
  * API: Added lockdownd_start_service_with_escrow_bag()
  * API: Added afc_remove_path_and_contents() for recursive deletion
  * Fix last memory leak with OpenSSL through proper library deinitialization
  * Add new idevicedebug tool to interact with debugserver on a device
  * API: Add debugserver service implementation
  * Handle new PermissionDenied error of file_relay due new security in iOS 8+
  * Fix retry loop problem when device requests 0 files in idevicebackup2
  * Add trust dialog related error codes to Cython bindings
  * Fix various memory leaks in AFC implementation
  * Fix disk image upload with latest iOS 8 in ideviceimagemounter
  * Add new "dump" command to print information about a provisioning profile in
  * ideviceprovision
  * Refactor plist print helper code and move it into common module for better
  * reuse accross the tools
  * Do not crash if retrieving the system buid fails
  * API: Make generic "propery_list_service_client" public
  * Moved doc comments from private to public headers
  * Fix possible segfault when using lockdownd_get_value() due to always
  * returning success
  * Do not read files entirely into memory during restore in idevicebackup
  * Plug a few memory leaks and fix invalid password check in idevicebackup2
  * Add support for file sizes &gt; 4GB on Win32 in idevicebackup2
  * Fix declaration for DllMain on Win32
  * Silence various compiler warnings
  * Fix assert within pairing logic</changelog>
  <changelog author="i@marguerite.su" date="1425211200">- update version 1.2.0
  * Require autoconf 2.64 or later
  * Remove dev tools, will return either as proper tools or website examples
  * Refactor installation proxy service implementation and normalize code
  * API: Added instproxy_lookup() to efficiently lookup app information
  * API: Added instproxy_check_capabilities_match() to check device capabilities
  * API: Added various instproxy command and status plist getters
  * API: Make debugserver_client_set_ack_mode() public
  * Fix handling of clients reconnecting in idevicedebugserverproxy which
    previously didn't work properly
  * Flush stdout for every line in idevicesyslog
  * Fix shutdown of idevicedebugserverproxy tool which could hang
  * Notify user when erroneously using idevicebackup with iOS 4 or later
  * Enable build of idevicecrashreport on WIN32
  * Fix thread handle leaks on WIN32 adding thread_new and thread_free
  * cython: Add receive/receive_timeout methods for iDeviceConnection to
    receive raw data from a connection
  * cython: Add new FILE_RELAY_E_PERMISSION_DENIED(-6) error
  * API: Refactor lockdown service internal error checking and add a bunch of
    new native errors
  * Convert int16_t macro error types into enum within common module, too
  * Add new "idevicenotificationproxy" tool to post or observe notifications
  * Fix overlong blocking in np_client_free()
  * Improve maintainability and Requires of pkg-config file
  * API: Add new LOCKDOWN_E_SERVICE_LIMIT error to detect service limit states
  * API: Remove const argv requirement for debugserver_command_new
  * cython: Add get_path_for_bundle_identifier() method to
    InstallationProxyClient
  * cython: Add DebugServerClient class to communicate with debugserver
  * Comply to strict function prototypes by using (void) instead of just ()
  * Fix notification proxy shutdown process which was incorrectly implemented
  * Fix linking problems on OS X
  * Fix missing debug output which broke with the last release
  * Unify and improve various debug messages
  * Fix re-pairing if pairing with existing pair record failed initially
  * Skip printing long plist (16kb+) files to prevent excessive debug output
  * Move a few common helpers from backup tools to common utility helper code
  * Remove incorrect flags from afc_file_open() documentation
  * Fix various memory leaks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1437220800">- libimobiledevice-nosslv3.patch: In tumbleweed, SSLv3_method
  fails because there is no sslv3 support, use SSLv233_method instead
  to negotiate the highest TLS version available.</changelog>
  <changelog author="i@marguerite.su" date="1438171200">- fix baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1464350400">- Add libimobiledevice-CVE-2016-5104.patch: Make sure sockets only
  listen locally (CVE-2016-5104, boo#982014).</changelog>
  <changelog author="i@marguerite.su" date="1485086400">- update version 1.2.0+git20170122.45fda81
  * m4: use python-config if available to fix python3 support
    on newer distros
  * lockdown: remove unneeded plist_free() calls since entire dict
    is freed later
  * lockdown: add more error codes
  * add new lockdownd_pair_with_options() function
  * fix installation_proxy when using GnuTLS instead of OpenSSL
  * tools: fix inverted abort condition in idevicecrashreport
  * tools: idevicecrashreport: propertly initialize buffer used
    to check for ping message
  * tools: idevicecrashreport: fix missing 0-term when creating local
    filename
  * make sure sockets only listen locally
  * idevicebackup: fix some timestamps that are relative to the Mac
    epoch instead of Unix one
  * avoid potential NULL pointer dereference (leading to segfault) if
    functions are called w/ null arguments
  * add new functions to get the underlying file descriptor of an
    idevice connection
  * idevicedebug: show error if container info not found
  * diagnostics_relay: plug small memory leak
  * file_relay: plug small memory leak
  * update GnuTLS certificate callback to new API
  * fix SSL version negotiation with newer versions of OpenSSL
  * lockdown: remove unnecessary check for pair record file during
    pairing
  * userpref: remove obsoleted function userpref_has_pair_record()
  * idevice: update GnuTLS code to support iOS 10
  * lockdown: return LOCKDOWN_E_INVALID_HOST_ID when missing pair record
  * idevicebackup2: fix removal of snapshot dir during backup w iOS 10+
  * idevicebackup2: add installed application info to Info.plist
    during backup
  * idevicebackup2: fix assertion occuring when copying non-present MEID
  * idevicebackup2: suppress repeated printing of global status when
    100% is reached
  * idevicebackup2: use remove_file() wrapper instead of remove()
  * idevicebackup2: don't report an error when file to remove doesn't
    exist
  * idevicebackup2: fix heap buffer out-of-bounds write caused by
    wrong buffer size
  * userpref: [GnuTLS]fix pairing record generation and improve
    error handling
  * idevicebackup2: plug some small memory leaks
  * misagent: add new misagent_copy_all() function (introduced in iOS 9.3)
  * ideviceprovision: use newer API to get list of profiles on iOS 9.3+
  * ideviceprovision: check output directory parameter for 'copy'
    command and return exit code on error
  * ideviceprovision: allow copying single profiles instead of all
  * ideviceprovision: add new remove-all command to remove all installed
    profiles at once
  * idevicebackup2: fix logical bug when checking for success of backup
    operation
  * ideviceprovision: fix ASN1 parsing for large provisioning profiles
  * property_list_service: remove packet length check when receiving
    plist data
- drop libimobiledevice-CVE-2016-5104.patch, upstreamed
- drop libimobiledevice-nosslv3.patch, upstream changed default
  method from SSLv3_method to TLSv1_method.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- SRPM group assignment fix. Trim DLL/library format baggage
  from description.</changelog>
  <changelog author="i@marguerite.su" date="1486036801">- added _service file to clearly show the package origin</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1565697600">- Add libimobiledevice-boo1103546-double-free.patch: avoid double
  free with OpenSSL 1.1 (boo#1103546).</changelog>
</package>
<package pkgid="b99e7cefdec31aeae4d14973ae1baf15395ac94786543df37655f583be8aaa9f" name="install-initrd-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="4bae077f2821a59634972a84fb7b5d57369aab8671958c8dd5fb0b4aa9513eb1" name="install-initrd-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.385" rel="lp150.7.1"/>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
  <changelog author="jslaby@suse.cz" date="1527681600">- merge gh#openSUSE/installation-images#246
- etc: update module.config to match 4.17
- 14.374</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528200000">- merge gh#openSUSE/installation-images#251
- include all kernel input modules (bsc#1095289)
- 14.375</changelog>
  <changelog author="afaerber@suse.de" date="1529928000">- merge gh#openSUSE/installation-images#252
- Tidy module.config comment notes
- Add mailbox modules (boo#1040492)
- 14.376</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530532800">- merge gh#openSUSE/installation-images#253
- add bcm43xx-firmware (bsc#1099327)
- 14.377</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530878400">- merge gh#openSUSE/installation-images#255
- add pinctrl-* modules (bsc#1095796)
- 14.378</changelog>
  <changelog author="jslaby@suse.cz" date="1532347200">- merge gh#openSUSE/installation-images#256
- etc: update module.config to match 4.18
- 14.379</changelog>
  <changelog author="snwint@suse.com" date="1533816000">- get leap version from %sle_version macro (bsc#1103208)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1534766400">- merge gh#openSUSE/installation-images#258
- add raspberry pi firmware files</changelog>
  <changelog author="agraf@suse.de" date="1534766401">- Fix rpi file list
- hdimage: Use at least FAT16
- 14.380</changelog>
  <changelog author="snwint@suse.de" date="1537531200">- merge gh#openSUSE/installation-images#259
- add bcache-tools to installation initrd (fate#325346)
- add bcache-tools to installatio initrd (fate#325346)
- 14.381</changelog>
  <changelog author="snwint@suse.de" date="1537876800">- merge gh#openSUSE/installation-images#260
- Add ptp_qoriq to module.config
- 14.382</changelog>
  <changelog author="snwint@suse.de" date="1537963200">- merge gh#openSUSE/installation-images#261
- Make monitor miror mode during installation the default again
  (bsc#1108905)</changelog>
  <changelog author="snwint@suse.de" date="1537963201">- merge gh#openSUSE/installation-images#262
- adjust to iptables using update-alternatives (bsc#1108289)
- added 'clear' to instsys (bsc#1108005)
- 14.383</changelog>
  <changelog author="snwint@suse.de" date="1537963202">- merge gh#openSUSE/installation-images#264
- aarch64: add gpio-thunderx.ko module (bsc#1106114)
- 14.384</changelog>
  <changelog author="snwint@suse.de" date="1538395200">- merge gh#openSUSE/installation-images#267
- adjust to glibc-locale package split
- 14.385</changelog>
</package>
<package pkgid="fb559e2eea08743aaeb038b4e472763e451a537bd867962cb14800eee0f73400" name="installation-images-debuginfodeps-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="187a56e4d9ba3579b2dda496d69cdd18473b905a8c3a2d3cd14bdae03599fb5a" name="installation-images-debuginfodeps-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.385" rel="lp150.7.1"/>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
  <changelog author="jslaby@suse.cz" date="1527681600">- merge gh#openSUSE/installation-images#246
- etc: update module.config to match 4.17
- 14.374</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528200000">- merge gh#openSUSE/installation-images#251
- include all kernel input modules (bsc#1095289)
- 14.375</changelog>
  <changelog author="afaerber@suse.de" date="1529928000">- merge gh#openSUSE/installation-images#252
- Tidy module.config comment notes
- Add mailbox modules (boo#1040492)
- 14.376</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530532800">- merge gh#openSUSE/installation-images#253
- add bcm43xx-firmware (bsc#1099327)
- 14.377</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530878400">- merge gh#openSUSE/installation-images#255
- add pinctrl-* modules (bsc#1095796)
- 14.378</changelog>
  <changelog author="jslaby@suse.cz" date="1532347200">- merge gh#openSUSE/installation-images#256
- etc: update module.config to match 4.18
- 14.379</changelog>
  <changelog author="snwint@suse.com" date="1533816000">- get leap version from %sle_version macro (bsc#1103208)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1534766400">- merge gh#openSUSE/installation-images#258
- add raspberry pi firmware files</changelog>
  <changelog author="agraf@suse.de" date="1534766401">- Fix rpi file list
- hdimage: Use at least FAT16
- 14.380</changelog>
  <changelog author="snwint@suse.de" date="1537531200">- merge gh#openSUSE/installation-images#259
- add bcache-tools to installation initrd (fate#325346)
- add bcache-tools to installatio initrd (fate#325346)
- 14.381</changelog>
  <changelog author="snwint@suse.de" date="1537876800">- merge gh#openSUSE/installation-images#260
- Add ptp_qoriq to module.config
- 14.382</changelog>
  <changelog author="snwint@suse.de" date="1537963200">- merge gh#openSUSE/installation-images#261
- Make monitor miror mode during installation the default again
  (bsc#1108905)</changelog>
  <changelog author="snwint@suse.de" date="1537963201">- merge gh#openSUSE/installation-images#262
- adjust to iptables using update-alternatives (bsc#1108289)
- added 'clear' to instsys (bsc#1108005)
- 14.383</changelog>
  <changelog author="snwint@suse.de" date="1537963202">- merge gh#openSUSE/installation-images#264
- aarch64: add gpio-thunderx.ko module (bsc#1106114)
- 14.384</changelog>
  <changelog author="snwint@suse.de" date="1538395200">- merge gh#openSUSE/installation-images#267
- adjust to glibc-locale package split
- 14.385</changelog>
</package>
<package pkgid="8610f943573eb9d86a3e90583e59e5f2b9a418e4bcba74f6ba8134e12be67355" name="installation-images-openSUSE" arch="src">
  <version epoch="0" ver="14.385" rel="lp150.7.1"/>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
  <changelog author="jslaby@suse.cz" date="1527681600">- merge gh#openSUSE/installation-images#246
- etc: update module.config to match 4.17
- 14.374</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528200000">- merge gh#openSUSE/installation-images#251
- include all kernel input modules (bsc#1095289)
- 14.375</changelog>
  <changelog author="afaerber@suse.de" date="1529928000">- merge gh#openSUSE/installation-images#252
- Tidy module.config comment notes
- Add mailbox modules (boo#1040492)
- 14.376</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530532800">- merge gh#openSUSE/installation-images#253
- add bcm43xx-firmware (bsc#1099327)
- 14.377</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530878400">- merge gh#openSUSE/installation-images#255
- add pinctrl-* modules (bsc#1095796)
- 14.378</changelog>
  <changelog author="jslaby@suse.cz" date="1532347200">- merge gh#openSUSE/installation-images#256
- etc: update module.config to match 4.18
- 14.379</changelog>
  <changelog author="snwint@suse.com" date="1533816000">- get leap version from %sle_version macro (bsc#1103208)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1534766400">- merge gh#openSUSE/installation-images#258
- add raspberry pi firmware files</changelog>
  <changelog author="agraf@suse.de" date="1534766401">- Fix rpi file list
- hdimage: Use at least FAT16
- 14.380</changelog>
  <changelog author="snwint@suse.de" date="1537531200">- merge gh#openSUSE/installation-images#259
- add bcache-tools to installation initrd (fate#325346)
- add bcache-tools to installatio initrd (fate#325346)
- 14.381</changelog>
  <changelog author="snwint@suse.de" date="1537876800">- merge gh#openSUSE/installation-images#260
- Add ptp_qoriq to module.config
- 14.382</changelog>
  <changelog author="snwint@suse.de" date="1537963200">- merge gh#openSUSE/installation-images#261
- Make monitor miror mode during installation the default again
  (bsc#1108905)</changelog>
  <changelog author="snwint@suse.de" date="1537963201">- merge gh#openSUSE/installation-images#262
- adjust to iptables using update-alternatives (bsc#1108289)
- added 'clear' to instsys (bsc#1108005)
- 14.383</changelog>
  <changelog author="snwint@suse.de" date="1537963202">- merge gh#openSUSE/installation-images#264
- aarch64: add gpio-thunderx.ko module (bsc#1106114)
- 14.384</changelog>
  <changelog author="snwint@suse.de" date="1538395200">- merge gh#openSUSE/installation-images#267
- adjust to glibc-locale package split
- 14.385</changelog>
</package>
<package pkgid="f1db4b74814b589bc1bd4de36654574aa730219aa343afd71b9fba7c6c2a1d90" name="installation-images-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.385" rel="lp150.7.1"/>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
  <changelog author="jslaby@suse.cz" date="1527681600">- merge gh#openSUSE/installation-images#246
- etc: update module.config to match 4.17
- 14.374</changelog>
  <changelog author="wfeldt@opensuse.org" date="1528200000">- merge gh#openSUSE/installation-images#251
- include all kernel input modules (bsc#1095289)
- 14.375</changelog>
  <changelog author="afaerber@suse.de" date="1529928000">- merge gh#openSUSE/installation-images#252
- Tidy module.config comment notes
- Add mailbox modules (boo#1040492)
- 14.376</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530532800">- merge gh#openSUSE/installation-images#253
- add bcm43xx-firmware (bsc#1099327)
- 14.377</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530878400">- merge gh#openSUSE/installation-images#255
- add pinctrl-* modules (bsc#1095796)
- 14.378</changelog>
  <changelog author="jslaby@suse.cz" date="1532347200">- merge gh#openSUSE/installation-images#256
- etc: update module.config to match 4.18
- 14.379</changelog>
  <changelog author="snwint@suse.com" date="1533816000">- get leap version from %sle_version macro (bsc#1103208)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1534766400">- merge gh#openSUSE/installation-images#258
- add raspberry pi firmware files</changelog>
  <changelog author="agraf@suse.de" date="1534766401">- Fix rpi file list
- hdimage: Use at least FAT16
- 14.380</changelog>
  <changelog author="snwint@suse.de" date="1537531200">- merge gh#openSUSE/installation-images#259
- add bcache-tools to installation initrd (fate#325346)
- add bcache-tools to installatio initrd (fate#325346)
- 14.381</changelog>
  <changelog author="snwint@suse.de" date="1537876800">- merge gh#openSUSE/installation-images#260
- Add ptp_qoriq to module.config
- 14.382</changelog>
  <changelog author="snwint@suse.de" date="1537963200">- merge gh#openSUSE/installation-images#261
- Make monitor miror mode during installation the default again
  (bsc#1108905)</changelog>
  <changelog author="snwint@suse.de" date="1537963201">- merge gh#openSUSE/installation-images#262
- adjust to iptables using update-alternatives (bsc#1108289)
- added 'clear' to instsys (bsc#1108005)
- 14.383</changelog>
  <changelog author="snwint@suse.de" date="1537963202">- merge gh#openSUSE/installation-images#264
- aarch64: add gpio-thunderx.ko module (bsc#1106114)
- 14.384</changelog>
  <changelog author="snwint@suse.de" date="1538395200">- merge gh#openSUSE/installation-images#267
- adjust to glibc-locale package split
- 14.385</changelog>
</package>
<package pkgid="9679730b753d908e2e7051b19e26cad7a02601bb283b34d6a863b4e0e20d4716" name="intel-gpu-tools" arch="x86_64">
  <version epoch="0" ver="1.19" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashism in intel_gpu_abrt script that uses bash-specific
  constructions
- add patches:
  * intel-gpu-tools-1.7-fix-bashisms.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1416225601">- rename intel-gpu-tools-1.7-fix-bashisms.patch to
  u_intel-gpu-tools-1.7-fix-bashisms.patch according to our patch
  guidelines</changelog>
  <changelog author="sfalken@opensuse.org" date="1421582400">- Update to version 1.9:
  + Patches refactored for new sources
  + post-build-checks disabled, due to check failure:
    I: Program returns random data in a function
    E: intel-gpu-tools no-return-in-nonvoid-function
    intel_renderstate_gen8.c:441
  + Dropped:
  - n_missing_check-ndebug.h.patch
  - intel-gpu-tools-1.7.tar.bz2
  + Added:
  - intel-gpu-tools-1.9.tar.bz2
  + Changes from version 1.7
  - More Android porting
  - Fixes to documentation warnings
  - Updates to UPDATE, MAINTAINERS, and README
  - lib:
  - Fix out of tree build of version.h
  - added function to lock memory into RAM
  - add option log domain filtering
  - introduce log domains
  - igt_debugfs: Don't setup crc in _new
  - igt_debugfs: Throw away the two first CRCs
  - igt.cocci: Deal with min/max/swap
  - add swap() macro
  - always reset connectors after the state is forced
  - remove igt_edid.h
  - tests:
  - gem_tiled_swapping: use igt_info logging wrapper
  - replaced 3D test images
  - kms_cursor_crc: Restore the valid pipe/connector combo check
  - kms_mmio_vs_cs_flip: Count valid tests for all crtcs
  - kms_flip:
  * Target the back buffer with the dummy load
  * Calibrate the dummy load delay in kms_flip
  * Use fixed size (2kx2k) buffers for dummy load
  * Refactor blit code
  - Run lib/igt.cocci
  - pm_rps: vlv:
  * roundmiddle point to freq supported by HW
  * load gpu for idle min/max tests\
  * wait for freq to settleo
  - add gem_gpgpu_fill to .gitignore
  - use base edid
  - tools:
  - add missing copyright headers
  - terminate getopt_long long option arrays properly
  - drv_hangman: Remove unused function
  - kms_cursor_crc: Remove value to 'return' in a void function
  - igt/drm_read: Require that pipe 0 is active
  - igt/drm_read: Abuse read(drm)
  - intel_error_decode: Decode the ERROR register on Sandybridge
    and Ivybridge
  - gem_bad_reloc: Don't flip-flop between SKIP and PASS</changelog>
  <changelog author="sndirsch@suse.com" date="1421755200">- reenabled post build checks
- u_build-fixes.patch
  * fix post build checks</changelog>
  <changelog author="sndirsch@suse.com" date="1426507200">- Update to version 1.10
  * New frequency manipulation tool (intel_gpu_frequency)
  * Adjustments for the Solaris port (Alan Coopersmith).
  * Remove tests/NAMING-CONVENTION since it's all in the docbook now,
    to avoid divergent conventions.
  * New CRITICAL log level for really serious stuff (Thomas Wood).
  * Interactive test mode can now be enabled by the shared cmdline
    option --interactive-debug=$var (Rodrigo Vivi).
  * Improved logging to kmsg to better line up test runs with kernel
    messages (Chris Wilson).
  * Record all log levels (including disabled levels) in a ringbuffer
    and dump that on test failures for quicker diagnostics of automated
    test run results (Thomas Wood).
  * A lot of small polish all over the test library.
  * Piles of new testcases and improvements to existing ones as usual.</changelog>
  <changelog author="sndirsch@suse.com" date="1426593600">- u_Fix-pointer-cast-in-order-to-fix-build-on-32bit-arch.patch
  * fixes build on 32bit</changelog>
  <changelog author="sndirsch@suse.com" date="1434110400">- Update to version 1.11
  * Various new tests and tools
  * Single combined test list (supported by piglit since commit 8a122bb)
  * Optional dependency on libunwind to provide automatic stack traces on test
    failures. (Thomas Wood)
  * Add optional default debug and optimisation flags for tests to enable better
    stack traces and debugging. (Thomas Wood)
  * Test programs are now installed into libexec. This is useful when building a
    complete software stack for a DUT from scratch. (Building and installing
    tests can still be disabled by the --disable-tests configure flag.)
    (Joonas Lahtinen)
  * New tool to decode watermark registers (Ville Syrjälä)
  * Timeout mechanism now reports test as failed
  * Introduce intel_reg as the one Intel graphics register multitool to replace
    intel_reg_read, intel_reg_write, intel_iosf_sb_read, intel_iosf_sb_write,
    intel_vga_read, intel_vga_write, intel_reg_dumper, intel_reg_snapshot,
    and quick_dump.py. (Jani Nikula)
  * Add functions to manipulate i915.ko parameters and ensure features are enabled
    for testing. (Paulo Zanoni)
- supersedes u_Fix-pointer-cast-in-order-to-fix-build-on-32bit-arch.patch
- added new buildrequires to gtk-doc and libunwind
- added /usr/lib/intel-gpu-tools/* and /usr/share/intel-gpu-tools/* to filelist</changelog>
  <changelog author="sndirsch@suse.com" date="1434110401">- use correct filelist macros</changelog>
  <changelog author="sndirsch@suse.com" date="1442232000">- intel-gpu-tools 1.12
  - Various new tests and tools
  - New statistical analysis functions. (Damien Lespiau)
  - New benchmark tests. (Chris Wilson)
  - Old register tools that were superseded by intel_reg have been removed.
  - Various tests have been marked "basic", to indicate they are suitable for
    use in basic acceptance testing. (Jesse Barnes)
  - Per-ring gem_storedw_loop tests combined into a single test with subtests.
    (Jesse Barnes)
  - New "aubdump" tool, used to launch an application and capture rendering to
    an AUB file. (Kristian Høgsberg Kristensen)
  - Cherryview support added to intel_display_poller. (Ville Syrjälä)
  - Skylake and Broadwell support added to gem_gpgpu_fill tests.
    (Dominik Zeromski)
  - Support for running core drm tests on any platform. (Micah Fedke)
  - Many other bug fixes
- supersedes patch 'u_build-fixes.patch"</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 1.13:
  + New tests:
  - kms_atomic tests atomic mode setting.
  - core_prop_blob tests blob properties.
  - gem_request_retire targets request retirement code paths.
  - core_setmaster_vs_auth checks that drop/setMaster correctly
    transfer master state.
  + Wildcard characters are now accepted when using the
  - -run-subtest command line option to specify multiple subtests
    to run.
  + Add support for Broxton in intel_audio_dump.
  + Added Kabylake support.
  + Many other bug fixes and improvements.
- Add pkgconfig(libudev) and pkgconfig(xrandr) BuildRequires,
  configure looks for them so lets build with those supported too.</changelog>
  <changelog author="sndirsch@suse.com" date="1457092800">- Update to version 1.14
  * New test: gem_create validate parameters for GEM_CREATE ioctl
    (Ankitprasad Sharma)
  * New test: gem_softpin exercise the userptr ioctl to create shared
    buffers between CPU and GPU (Vinay Belgaumkar)
  * New tests: prime_mmap_coherency/kms_mmap_write_crc cache coherency
    tests (Tiago Vignatti)
  * New test: prime_mmap mmap() on dma-buf fds (Rob Bradford)
  * New test: gem_exec_reloc sanity check of execbuf-ioctl relocations (Chris
    Wilson)
  * New test: gem_exec_basic sanity check of execbuf-ioctl rings (Chris Wilson)
  * improved igt_hang_ring() infrastructure for generic hang injection support
    in the core library (Chris Wilson)
  * new igt_pm library to collect power management testing helpers (David
    Weinehall)
  * lig/igt_vc4: VC4 support library (Eric Anholt)
  * kms_frontbuffer_tracking: included in BAT (Paulo Zanoni)
  * kms_psr_sink_crc: Add BAT test for PSR active (Rodrigo Vivi)
  * gem_wait: test superseded by gem_latency in benchmarks (Chris Wilson)
  * igt_core: Fix logging to display extended line (Derek Morton)
  * igt_core: Expand --run-subtest functionality (Derek Morton)
  * kms_force_connector_basic: various fixes and included in BAT set (Daniel
    Vetter)
  * Many other improvements and bug fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464782400">Update to version 1.15
- New KMS test: tests/kms_cursor_legacy (Stress legacy cursor ioctl)
  (Chris Wilson)
- Several GEM tests have been removed from BAT: tests/gem_exec_whisper,
  tests/gem_sync (dropped individual engines), test/gem_cs_prefetch (replaced
  by test/gem_exec_gttfill), tests/gem_ctx_param_basic (got relabeled
  to tests/gem_ctx_param) (Chris Wilson)
- build: Skip configure step if is NOCONFIGURE set (Tomeu Vizoso)
- tools/intel_bios_reader: Added options for dumping individual panels, specific
  section, hex format and other various fixes (Jani Nikula)
- build: Add optional --enable-werror
  (hard-fail in case of compiler warnings) (Marius Vlad)
- New KMS test: tests/prime_mmap_kms (show case dma-buf new API
  and processes restrictions) (Tiago Vignatti)
- Several tests have gained to ability to be run on different platforms
  than Intel: tests/testdisplay (Tomeu Vizoso), tests/kms_panel_fitting
  (Robert Foss), tests/kms_flip_event_leak, tests/kms_flip (Tomeu Vizoso).
- compute exitcode first: In the case of running multiple subtests which all
  happen to be skipped, igt_exitcode is 0, but the final exit code will be 77.
  (Chris Wilson)
- Shorten tests/kms_flip test (Tvrtko Ursulin)
- Half the timeout for suspend to RAM and a third for suspend to disk
  (Marius Vlad)
- lib: Pass format instead of bpp to create_bo_for_fb (Ville Syrjälä)
- Removed from tests/test-list.txt, tests/gem_concurrent_all and added
  tests/test-list-full.txt that contains all the tests. This will speed
  up considerably piglit when starting tests. (Gabriel Feceoru)
- piglit changed its behaviour to prevent overwriting the results. A fairly new
  version of piglit is required to run i-g-t tests. (Gabriel Feceoru)
- lib: Replace drmIoctl() with a layer of indirection (Chris Wilson)
- Adding missing Broxton PCI IDs (Rodrigo Vivi)
- Added COMMIT_ATOMIC (lib/igt_kms, w/ tests/kms_rotation_crc).
  Requires nuclear_pageflip parameter turned on in the i915 driver.
  (Mayuresh Gharpure, Pratik Vishwakarma)
- man/: rewrite manual pages in reStructuredText (Jani Nikula)
- tests/drv_module_reload_basic: perform fault injection (Chris Wilson)
  with various improvements (Imre Deak)
- Removed tests/gem_multi_bsd_sync_loop which was superseded by
  tests/gem_ring_sync_loop and tests/gem_dummy_reloc_loop by
  tests/gem_exec_reloc (Chris Wilson)
- New GEM tests: tests/gem_exec_whisper, tests/gem_exec_store,
  test/gem_exec_gttfill, tests/gem_exec_suspend, tests/gem_exec_flush
  (Chris Wilson)
- New benchmarks: benchmarks/gem_syslatency, benchmarks/gem_exec_fault
  (Chris Wilson)
- tests/gem_exec_nop included in BAT (Chris Wilson)
- tests/pm_rpm: Fix crash on machines that lack LLC (David Weinehall)
- lib/igt_fb: Fix domain tracking for GTT cairo surfaces (Chris Wilson)
- Add igt_subtest_group to allow igt_fixture for only a subset of subtests
  without skipping/failing all subsequent subtests. (Daniel Vetter)
- Many more fixes and improvements.
  Added python3-docutils to BuildRequires, since manual pages are now built
  via rst2man.</changelog>
  <changelog author="sndirsch@suse.com" date="1474545600">- Update to version 1.16
  A new intel-gpu-tools quarterly release is available with the following
  changes:
- Build automatically tests required when issueing a make check, Tests/subtests
  that receive a crash signal should print a backtrace when i-g-t is built with
  libunwind support (Marius Vlad)
- lib/igt_kms: Force connector probing on first use (Chris Wilson)
- vc4: Add a test for BO lookup failure error path (Eric Anholt)
- tests/gem_mocs_settings: Remove direct register tests,
  and added RC6 tests (Peter Antoine)
- Check for libdrm_intel and build if present, Add stubs for intel_bufmgr
  (Robert Foss)
- igt/gem_mmap_gtt: Add a test to detect non-WC access (Chris Wilson)
- Various documentation improvements (Daniel Vetter)
- Added new tests: tests/kms_rmfb and tests/kms_atomic_transition, a test for
  fastboot, tests/kms_panel_fitting, and a test that only tries to set the
  current property values back, tests/kms_properties. Various improvements to
  tests/kms_cursor_legacy (Maarten Lankhorst)
- lib/igt_kms: Use pipes for committing, not outputs and assign pipe properties
  in pipe init and many other improvements (Maarten Lankhorst)
- tests/gem_workarounds: read test added as a basic test, fix assertion of num
  of regs (Mika Kuoppala)
- Various improvements to tools/intel_bios_reader and tools/intel_reg (Ville
  Syrj�l�)
- lib: Add x86 cpuid based feature detection (Chris Wilson)
- demos/intel_sprite_on: Instead of looping until the first disconnected port
  is found, now go through all possible connectors, drawing the sprite on any
  connected display. (Jim Bride)
- Multiple improvements to lib/igt_kms (Robert Foss)
- lib/igt_aux: Framework for measuring latency in raising signals (Chris
  Wilson)
- Various modifications to intel_chipset: Replace lookup of GT size with
  computation, remove unused PCI_CHIP ids, converting platforms names using
  device info (Chris Wilson)
- tests/kms_chv_cursor_fail: Run the tests with fewer steps
  (Maarten Lankhorst)
- lib/intel_chipset: Add more Kabylake PCI IDs and removed PCI IDs that are no
  longer listed as Kabylake (Rodrigo Vivi)
- Basic framework for GVT-g testing has landed (Chris Wilson)
- Various improvements to tests/kms_flip (Ville Syrj�l�)
- igt/kms_cursor_legacy: Add a rudimentary test to detect stalled cursors,
  detect pageflip errors and check that cursor updates do not stall flips
  (Chris Wilson)
- vGEM support: lib and added tests/vgem_basic, tests/vgem_slow and
  tests/vgem_reload_basic (Chris Wilson)
- Various fixes to tests/kms_frontbuffer_tracking: prefer BLT drawing, recreate
  FBS at every subtest and properly handle mixing GTT and WC mmaps (Paulo Zanoni)
- Replace drv_missed_irq_hang script with a C-equivalent: tests/drv_missed_irq
  (Chris Wilson)
- Added a test case for polling dma-buf fences: tests/prime_busy (Chris Wilson)
- lib/igt_gt: Omit illegal instruction on gen8+ and time
  constrains on hang detection (igt/gem_reset_stats) (Mika Kuoppala)
- Added tests/kms_invalid_dotclock, a test that makes sure every modeset gets
  rejected by the kernel if the requested dotclock is beyond the hardware
  capabilities (Ville Syrj�l�)
- tests/gem_stolen: Verify contents of stolen-backed objects across
  hibernation, fix for no_mmap subtest and check for available stolen memory size
  (Ankitprasad Sharma)
- tests/core_prop_blob: Add invalid tests to set fb props (Daniel Vetter)
- Many more fixes and improvements.</changelog>
  <changelog author="chris@computersalat.de" date="1484222400">- Release 1.17 (2016-12-02)
  * Library changes:
  - Added an iterator that generate primes for creating input data that
    should not fall into any patterns that may be optimised by the
    drivers. (Chris Wilson)
  - Crashes in fixture blocks now print a stacktrace. (Marius Vlad)
  - Added support for various system suspend/resume options. (Imre Deak)
  - Added linked list helpers from the Wayland project. (Lyude)
  - Added a generic dummy workload helper for submitting GPU workloads
    that consume exactly a specified amount of time. (Abdiel Janulgue)
  - Added C functions for driver loading/unloading, pkill and lsof, for
    converting shell script tests to C code. (Marius Vlad)
  * Tools changes:
  - intel_reg: Add Kabylake support. (Jani Nikula)
  - intel_bios_reader: Also dump PSR info. (Ville Syrjälä)
  - intel_guc_logger: New tool for capturing logs from the GuC
    firmware. (Akash Goel)
  - intel_aubdump: Added commandline option to stream the dump to
    another process. (Lionel Landwerlin)
  - intel_aubdump: Annotate the dump with the application name and the
    used PCI ID. (Jason Ekstrand)
  * Benchmark changes:
  - gem_latency: Added support for measuring fence wakeup latencies. (Chris Wilson)
  - prime_lookup: New microbenchmark for stressing prime_fd_to_handle
    and prime_handle_to_fd. (Chris Wilson)
  * Test changes:
  - Multiple new tests.
  - Added an explicit list of tests used for Intel CI. (Petri Latvala)
  - Converted multiple shell script tests to C. (Marius Vlad)
  * And many other bug fixes and improvements.
- add new deps
  * pkgconfig(libkmod)
  * pkgconfig(libprocps)
- rebase patches
- fix libkmod.h include path
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path_1315.patch
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path_1320.patch
  * add N_intel-gpu-tools_Fix_libkmod.h_include_path.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486296000">- Add u_respect_cflags.diff
- supersedes N_intel-gpu-tools_Fix_libkmod.h_include_path_1320.patch,
  N_intel-gpu-tools_Fix_libkmod.h_include_path_1315.patch,
  N_intel-gpu-tools_Fix_libkmod.h_include_path.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1489492800">- Release 1.18 (2017-03-13)
  * Library changes:
  - Various changes to library functions so that they don't assume Intel
    hardware. (Lyude)
  - Added helper functions for managing synchronization primitives.
    (Robert Foss)
  - Added support for the new generic CRC capture kernel ABI. (Tomeu
    Vizoso)
  - Added Geminilake platform support. (Ander Conselvan de Oliveira)
  - Added helpers for sysfs hotplug events. (Lyude)
  - Added support for hotplug testing with the Chamelium device (Lyude)
  * Tools changes:
  - intel_dp_compliance: New tool for running automated DisplayPort
    compliance tests. (Manasi Navare)
  - Renamed intel_bios_reader to intel_vbt_decode. (Jani Nikula)
  - intel_gvtg_test: New tool for setting up GVT-g guests based on
    KVMGT. (Terrence Xu)
  * Test changes:
  - Multiple new tests.
  * And many other bug fixes and improvements.
- refreshed patches: n_disable-build-of-pm_rpm.patch, u_respect_cflags.diff</changelog>
  <changelog author="sndirsch@suse.com" date="1491998400">- SLE merge
  * update to latest version, Stack release 2016Q1
    (fate #315643-315645, 319159-319161, 319618)</changelog>
  <changelog author="sndirsch@suse.com" date="1497787200">- Release 1.19 (2017-06-09)
  * Library changes:
  - Changed debugfs handlers to open files for the DRM device in use,
    for setups with more than one DRM device. (Tomeu Vizoso)
  - Added support for 4K and audio HDMI EDID injection. (Abdiel
    Janulgue, Marius Vlad)
  - Added support for AMDGPU devices. (Chris Wilson)
  * Tools changes:
  - intel_error_decode now automatically opens a pager. (Chris Wilson)
  - intel_error_decode now dumps the GuC firmware logs if available.
    (Chris Wilson)
  * Benchmark changes:
  - gem_wsim: New benchmark that simulates command submission
    workloads. (Tvrtko Ursulin)
  * Scripts changes:
  - trace.pl: New tool to parse i915 tracepoints for performance
    analysis. (Tvrtko Ursulin)
  - media-bench.pl: New tool to programmatically analyze simulated media
    workloads using gem_wsim to find the optimal load balancing
    strategy. (Tvrtko Ursulin)
  * Test changes:
  - Imported amdgpu tests from libdrm. (Chris Wilson)
  - Multiple other new tests.
  * And many other bug fixes and improvements.</changelog>
  <changelog author="chris@computersalat.de" date="1502884800">- add Source signature file</changelog>
  <changelog author="sndirsch@suse.com" date="1535544000">- U_intel_gpu_top-Use-drm_open_driver-don-t-need-drm-mas.patch
  * fixes intel_gpu_top; Use drm_open_driver, don't need drm master
    (boo#1106186, fdo#102380)</changelog>
</package>
<package pkgid="70b54d5cc5aa2ab6b4ac521510bb9f7906bba9665d5d159d8da20f8c75130a52" name="iotop" arch="noarch">
  <version epoch="0" ver="0.6" rel="lp150.3.3.1"/>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
</package>
<package pkgid="5e1394d664e2ccedae65d47300ac078af0c4102c9b1f48baf177eadae3712e32" name="ipa-ex-fonts" arch="src">
  <version epoch="0" ver="004.01" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1279886400">- initial version: 001.02.</changelog>
  <changelog author="tiwai@suse.de" date="1280318400">- add hintnone to default hintstyle</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- Renamed IPAexGothic -&gt; ipa-ex-gothic-fonts,
  IPAexMincho -&gt; ipa-ex-mincho-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- IPA license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1339416000">- Fix the priority of ipa-ex-*-hinting.conf from 21 to 51 for
  avoiding the override by suse-hinting.conf (bnc#766319)</changelog>
  <changelog author="tiwai@suse.de" date="1339502400">- Drop own font config files since the default config for these
  fonts are now included in fontconfig package</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="ftake@geeko.jp" date="1346500800">- update to version 001.03
  * glyphs of 55 characters are updated for the new daily-use
  characters table</changelog>
  <changelog author="ftake@geeko.jp" date="1379160000">- update to version 002.01
  * new six glyphs for JIS X 0213:2000
  * new 12 ideographic description characters
  * a new KangXi radical
  * slightly update shapes of 8 glyphs
  * update implementation of ideographic variation sequences
  * add vertical and horizontal shape change settings for hyphens</changelog>
  <changelog author="ftake@geeko.jp" date="1556366400">- update to version 004.01
  * new glyph U+32FF ?SQUARE ERA NAME REIWA? (boo#1112183)
- update to version 003.01
  * add standardized variation sequences of 93 characters
  * update spaces of the two glyphs (U+26FF8, U+663B)
- remove old Obsoletes and Provides for the past naming rule change</changelog>
</package>
<package pkgid="09198a65fb35a78e6c0aa10430e0c14dcb8f19e0d81a576a851fae3e3a680cbd" name="ipa-ex-gothic-fonts" arch="noarch">
  <version epoch="0" ver="004.01" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1280318400">- add hintnone to default hintstyle</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- Renamed IPAexGothic -&gt; ipa-ex-gothic-fonts,
  IPAexMincho -&gt; ipa-ex-mincho-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- IPA license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1339416000">- Fix the priority of ipa-ex-*-hinting.conf from 21 to 51 for
  avoiding the override by suse-hinting.conf (bnc#766319)</changelog>
  <changelog author="tiwai@suse.de" date="1339502400">- Drop own font config files since the default config for these
  fonts are now included in fontconfig package</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="ftake@geeko.jp" date="1346500800">- update to version 001.03
  * glyphs of 55 characters are updated for the new daily-use
  characters table</changelog>
  <changelog author="ftake@geeko.jp" date="1379160000">- update to version 002.01
  * new six glyphs for JIS X 0213:2000
  * new 12 ideographic description characters
  * a new KangXi radical
  * slightly update shapes of 8 glyphs
  * update implementation of ideographic variation sequences
  * add vertical and horizontal shape change settings for hyphens</changelog>
  <changelog author="ftake@geeko.jp" date="1556366400">- update to version 004.01
  * new glyph U+32FF ?SQUARE ERA NAME REIWA? (boo#1112183)
- update to version 003.01
  * add standardized variation sequences of 93 characters
  * update spaces of the two glyphs (U+26FF8, U+663B)
- remove old Obsoletes and Provides for the past naming rule change</changelog>
</package>
<package pkgid="7610923de07aaef28b231159035d89fb1541abfc169918861e5e4659a4eea88c" name="ipa-ex-mincho-fonts" arch="noarch">
  <version epoch="0" ver="004.01" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1280318400">- add hintnone to default hintstyle</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- Renamed IPAexGothic -&gt; ipa-ex-gothic-fonts,
  IPAexMincho -&gt; ipa-ex-mincho-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- IPA license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1339416000">- Fix the priority of ipa-ex-*-hinting.conf from 21 to 51 for
  avoiding the override by suse-hinting.conf (bnc#766319)</changelog>
  <changelog author="tiwai@suse.de" date="1339502400">- Drop own font config files since the default config for these
  fonts are now included in fontconfig package</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="ftake@geeko.jp" date="1346500800">- update to version 001.03
  * glyphs of 55 characters are updated for the new daily-use
  characters table</changelog>
  <changelog author="ftake@geeko.jp" date="1379160000">- update to version 002.01
  * new six glyphs for JIS X 0213:2000
  * new 12 ideographic description characters
  * a new KangXi radical
  * slightly update shapes of 8 glyphs
  * update implementation of ideographic variation sequences
  * add vertical and horizontal shape change settings for hyphens</changelog>
  <changelog author="ftake@geeko.jp" date="1556366400">- update to version 004.01
  * new glyph U+32FF ?SQUARE ERA NAME REIWA? (boo#1112183)
- update to version 003.01
  * add standardized variation sequences of 93 characters
  * update spaces of the two glyphs (U+26FF8, U+663B)
- remove old Obsoletes and Provides for the past naming rule change</changelog>
</package>
<package pkgid="9ad0048f60dadf053f360d8b3079d96f1ddafba00ac5ff92c2b6816b33c11972" name="ipset" arch="src">
  <version epoch="0" ver="6.36" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Update to new upstream release 6.30
  * hash:ipmac type support added to ipset</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 6.31
  * ipset: avoid kernel null pointer exception in ipset list:set
  * fix bug: sometimes valid entries in hash:* types of sets were
    evicted
- Update to new upstream release 6.32
  * fix possible truncated output in ipset output buffer handling</changelog>
  <changelog author="kstreitova@suse.com" date="1505476800">- fix build for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1548849600">- add ipset-6.36_service_names_for_ports.patch to fix parsing
  service names for ports. Parsing is attempted both for numbers
  and service names and the temporary stored error message
  triggered to reset the state parameters about the set
  [bsc#1122853]</changelog>
</package>
<package pkgid="7192e329cd024c419dd898968a0a9f82dbdf72a55dd4d612fc3de1ed63f95743" name="ipset" arch="x86_64">
  <version epoch="0" ver="6.36" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Update to new upstream release 6.30
  * hash:ipmac type support added to ipset</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 6.31
  * ipset: avoid kernel null pointer exception in ipset list:set
  * fix bug: sometimes valid entries in hash:* types of sets were
    evicted
- Update to new upstream release 6.32
  * fix possible truncated output in ipset output buffer handling</changelog>
  <changelog author="kstreitova@suse.com" date="1505476800">- fix build for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1548849600">- add ipset-6.36_service_names_for_ports.patch to fix parsing
  service names for ports. Parsing is attempted both for numbers
  and service names and the temporary stored error message
  triggered to reset the state parameters about the set
  [bsc#1122853]</changelog>
</package>
<package pkgid="f330b20b2a8c7c3fa72d62870a71618e0522a1c0a390e0f2dcd2d992971b912e" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="6.36" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1382270400">- Add 0001-build-fix-incorrect-library-versioning.patch</changelog>
  <changelog author="jengelh@inai.de" date="1382961600">- Update to new upstream release 6.20.1
  * build fixes for kernel 3.8 and the userspace library
- Remove 0001-build-fix-incorrect-library-versioning.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1394020800">- Update to new upstream release 6.21.1
  * add userspace support for forceadd
  * fix ifname "physdev:" prefix parsing
  * print mark &amp; mark mask in hex rather then decimal
  * add markmask for hash:ip,mark data type
  * add hash:ip,mark data type to ipset
  * Fix all set output from list/save when set with counters in use.
  * ipset: Fix malformed output from list/save for ICMP types in port
  field
  * ipset: fix timeout data type size (Nikolay Martynov)</changelog>
  <changelog author="jengelh@inai.de" date="1410868800">- Update to new upstream release 6.22
  * includes the new set type hash:mac
  * The new skbinfo extension makes possible to store fw mark, tc
  class and/or hardware queue parameters together with the set
  elements and then attach them to the matchig packets by the SET
  target.
- Add sovers.diff to counter missing symbol errors</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Update to new upstream release 6.23
  * Order create and add options in manpage so that generic ones
  come first
  * Centralise generic create options (family, hashsize, maxelem)
  on top of man page in the generic options section.
  * Add description of hash:mac set type to man page.
  * Add missing space for skbinfo option synopsis.
  * Support updating extensions when the set is full
- Drop sovers.diff (no longer needed)</changelog>
  <changelog author="jengelh@inai.de" date="1416830400">- Update to new upstream release 6.24
  * Alignment problem between 64bit kernel 32bit userspace fixed
  * Potential read beyond the end of buffer resolved
  * Fix parallel resizing and listing of the same set
  * Introduce RCU in all set types instead of rwlock per set
  * Remove rbtree from hash:net,iface in order to run under RCU
  * Explicitly add padding elements to hash:net,net and
  hash:net,port,net
  * Allocate the proper size of memory when /0 networks are supported
  * Simplify cidr handling for hash:*net* types
  * Indicate when /0 networks are supported</changelog>
  <changelog author="jengelh@inai.de" date="1435233600">- Update to new upstream release 6.25.1
  * Add element count to all set types header
  * Add element count to hash headers
  * Support linking libipset to C++ programs
  * When a single set is destroyed, make sure it cannot
  be grabbed by dump
  * Check CIDR value only when attribute is given
  * Permit CIDR equal to the host address CIDR in IPv6</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 6.26
  * Out of bound access in hash:net* types fixed
  * Make struct htype per ipset family
  * Optimize hash creation routine</changelog>
  <changelog author="kstreitova@suse.com" date="1453118400">- update to 6.27:
  * kernel part changes
  * fix reported memory size for hash:* types
  * fix hash type expire: release empty hash bucket block
  * fix hash type expiration: incorrect index fixed
  * collapse same condition body to a single one
  * fix extension alignment
  * compatibility: include linux/export.h when needed
  * compatibility: make sure vmalloc.h is included for kvfree()
  * compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
  * compatibility: Protect definition of RCU_INIT_POINTER in
    compatibility header file
  * netfilter: ipset: Fix sleeping memory allocation in atomic
    context (Nikolay Borisov)
  * userspace changes
  * handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
  Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1457784000">- Update to new upstream release 6.28
  * Test added to check 0.0.0.0/0,iface to be matched in
  hash:net,iface type
  * Check IPSET_ATTR_ETHER netlink attribute length
  * Fix set:list type crash when flush/dump set in parallel
  * Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
  undo spec-cleaner refucktoring
- Add ipset-destdir.diff</changelog>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Update to new upstream release 6.30
  * hash:ipmac type support added to ipset</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 6.31
  * ipset: avoid kernel null pointer exception in ipset list:set
  * fix bug: sometimes valid entries in hash:* types of sets were
    evicted
- Update to new upstream release 6.32
  * fix possible truncated output in ipset output buffer handling</changelog>
  <changelog author="kstreitova@suse.com" date="1505476800">- fix build for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1548849600">- add ipset-6.36_service_names_for_ports.patch to fix parsing
  service names for ports. Parsing is attempted both for numbers
  and service names and the temporary stored error message
  triggered to reset the state parameters about the set
  [bsc#1122853]</changelog>
</package>
<package pkgid="b2454c84ad190ac3a18bf3ab7cf39c929941568c7417bf6be3a628d04d358fb6" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.2.4.1"/>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
</package>
<package pkgid="d42e59f58c5e8b178b55efbb6d1a1ed0ded1cc6a1fc5ef1f5d7ad4021689314e" name="irssi" arch="src">
  <version epoch="0" ver="1.1.3" rel="lp150.33.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="8c63fc44f8cda363aad6f4b7d1695ed928f3c2379d4e98e337b7c7e412973eae" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp150.33.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="3cd1ee88e1430b441da677bdf19bd4f4497a613844dfe867e8da1aae3705a0fc" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp150.2.4.1"/>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
</package>
<package pkgid="c87739c1f335c63e2488d3500cd177e7c1fe54411a985330ebac2b1a0f75af56" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="lp150.33.1"/>
  <changelog author="astieger@suse.com" date="1452427200">- downloads moved to github
- verify source signature</changelog>
  <changelog author="idonmez@suse.com" date="1456920000">- Update to version 0.8.18
  New Features
  + CAP SASL PLAIN login is now supported natively.
  + Paste bracket markers can be requested from terminal with
    /set paste_use_bracketed_mode on
  + "Self messages" generated by some bouncers can now be received in
    the proper window.
  + Try to split long lines on spaces to avoid words being splitted.
    Adds a new option: split_line_on_space which defaults to on.
  + Add setting hilight_nick_matches_everywhere (#56).
  + The config parser is more robust and prints out better diagnostics
    on incorrect config files.
  + Ctrl+^ (FS#721) and Ctrl+J can now be bound.
  + Command history can be cleared with /window history -clear
  + /hilight -mask -line is now supported (FS#275).
  + CHANTYPES are now supported.
  + Improved reload speed of ignores.
  + Add -date feature to /lastlog
  + irssiproxy can be more easily enabled and disabled.
  + Expando for hostname (FS#829).
  + UNIX sockets can now also be specified in the config file.
  + Disable SSLv3 due to the POODLE vulnerability.
  + SSL ciphers can now be specified per server.
  + Added SNI support for SSL.
  Bugfixes
  + /ignore now respects -pattern on merge (#78).
  + irssiproxy (BNC) module now uses correct line endings.
  + Fix missing lines on large pastes (FS#905).
  + Correctly preserve STATUSMSG prefixes (#291).
  + Fix infinite recursion in key bindings (FS#817).
  + Fix incomplete awaylog caused by buffering.
  + Fix calculation of UTF-8 string length display in some cases.
  + Fix some Perl warnings related to @ISA.
  + EXEC windowitems now get proper references on the Perl side.
  + Incremental help file improvements.
  + ANSI attributes are now properly reset.
  + Fixed regression where text would blink when terminal lacks color support.
  + Permit the usage of Freenode extban syntax in /ban (#150)
  + Fixed regression in scriptassist on unload of scripts.
  + Fixed regression in -actcolor %n
- Remove irssi-0.8.15-ssl-passphrase.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1458993600">- Update to version 0.8.19
  * Fixed regression when joining and parting channels on IRCnet
  * Fixed SASL EXTERNAL
  * Fixed regression when not using SASL
  * Fixed incorrect SSL disconnects when using SSL from modules/scripts
  * Fixed regression where proxy_string could not be configured or
  certain file transfers could not be accepted
  * Fixed storing layout of !channels
  * Fixed restoration of bracketed paste mode on quit
  * Make the usage of meta-O for cursor keys configurable with
  /set term_appkey_mode off</changelog>
  <changelog author="meissner@suse.com" date="1474459200">- Update to version 0.8.20
  - Correct the name of an emitted sasl signal (#484)
  - Correct the prototype for the 'message private' signal (#515)
  - Corrections in away and hilight help text (#477, #518)
  - /squery and /servlist commands have been restored.
  - Where Irssi would previously only report "System error" on connect,
    it will now try harder to retrieve the system error message.
  - Fixed issue with +channels not working properly (#533)
  - Fixed crash in optchan when item has no server (#485)
  - Fixed random remote crash in the nicklist handling (#529)
  - Fixed remote crash due to incorrect bounds checking on
  formats, reported by Gabriel Campana and Adrien Guinet from
  Quarkslab. (CVE-2016-7044, CVE-2016-7045, bsc#999199)</changelog>
  <changelog author="mrueckert@suse.de" date="1474459201">- add BR for xz to fix build on sle11
- switch to %{?_smp_mflags}
- pass --disable-silent-rules to get verbose makefiles again</changelog>
  <changelog author="mrueckert@suse.de" date="1474459202">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561809600">- update to 1.1.3
  ! Contains all changes from 1.0.8
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045 bsc#1139802</changelog>
</package>
<package pkgid="7953831cb92a0fa8c7abc7785ef1ecb2ae684851ee3096de8f172cbc5b0285f2" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.13.2"/>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="61db55f4b2d33b006b2fa62b137da39be7e3971aad5e4c2fb2c96e989ad75e24" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.16.1"/>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1552046400">- Cherry picked upstream commit (bsc#1127913):
  + cda251fc8bcf iscsiuio: Release xmit_mutex in error code path.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Fixed issues surrounding output from "iscsiadm -m node ... -P1" and
  "iscsiadm -m discovery -t st ... -o new -P1" (bsc#1128972),
  cherry-picking 3 commits from upstream:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Fix node print return value when no nodes.
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Update to latest upstream/factory version of open-iscsi and
  iscsiuio (bsc#1113712). Summary of changes:
  * ***********************************************************
    Christian Ehrhardt (2):
  iscsiuio: avoid loosing bad rc in nic_nl_open
  iscsiuio: fail on nic_nl_open failing
    Floris Bos (1):
  context.h: add missing stdarg.h include
    Lee Duncan (37):
  Plugging a memory leak from discovery.
  Allow reading sysfs "port" to fail gracefully.
  Fix incorrect sysfs logic for port and ip address.
  Fix reading of sysfs signed integers when negative.
  Create a new error for "target not connected".
  Fix bug in error message when reading sysfs numbers.
  Handle ENOTCONN error separately when reading sysfs values.
  Limit session relogin attempts using config value.
  Removed unused value 'one'.
  Include stdio.h for use of snprintf().
  Fix qsort() comparator function call.
  Do not allow multiple sessions when nr_sessions=1
  When reopen_max=0 retry reopening forever.
  Use libkmod instead of fork/exec of modprobe.
  Update GPLv2 License information.
  Make reconnect to session on startup forever default.
  Restore space in node-mode level 0 output
  Added service file for iscsi logins
  Use sd_notify() to tell systemd when iscsid is ready.
  Update systemd unit files for iscsid
  Preparing for version 2.0.877
  iscsistart is not installed
  Fix i586 build issues with string length overflow.
  Use pkg-config in Makefiles for newer libraries.
  Updated iscsiadm man page: add "onboot" handling.
  Fix output for iscsiadm node/iface print level P1
  When displaying interfaces, skip "iface.example"
  Fix node print return value when no nodes.
  Fix printing of node database again.
  Fix output of node printing for multiple paths.
  Stop using /var directory for PIDfile and locks
  Improve daemon synchronization, fix err msgs
  Fix pipe notification code
  Add systemd support for iscsiuio
  Make iscsid systemd usage optional
  Fix possible discovery hang when timing out
  Handle systemd disablement correctly in iscsiuio
    Manish Rangankar (4):
  iscsiuio: Release xmit_mutex in error code path.
  iscsiuio: Do not flush tx queue on each uio interrupt.
  qedi: Set buf_size in case of ICMP and ARP packet.
  qedi: Use uio BD index instead on buffer index.
    Nilesh Javali (4):
  iscsiuio: limit retries of performing dhcpv6 before declaring dhcp failure
  iscsiuio: v0.7.8.5
  iscsiuio: allow processing of iscsid requests in DHCP failure condition
  iscsiuio: update version to 0.7.8.6
    Scott Moser (2):
  Close file handles when writing pid files.
  Better error message and failure if netlink socket fails.
    Xiubo Li (1):
  rec update: disable the idbm_lock in read/write when updating the rec
    fredvx (1):
  Add Restart=on-failure option to iscsid.service
    igo95862 (2):
  Make iscsid.service a requirement.
  Fixed iscsi.service considering every signal and exit code as successful. Now only code 21 (no objects found to execute on) and normal exit conditions are valid.
  * ***********************************************************
  Which updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="71965c99bd30ffd509dc1838c43ff427ecd51b6743f61a2166e5bf6eedc0e3b8" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.3.1"/>
  <changelog author="lduncan@suse.com" date="1504699200">- Start iscsi logins before remote filesystems (bsc#1028323),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1512216000">- Added fixes for working with latest gcc (7.2.1),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1513252800">- Fix vulnerabilities found in iscsiuio by qualsys (bsc#1072312),
  updating: open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1516622400">- Update to latest upstream vesion 2.0.876, with very few
  SUSE-specific modifications, namely around things upstream
  does not care about, like SUSE-specific systemd files. Also,
  version number modified to add "-suse", as usual. See
  the Changelog file for more details on changes in this
  upstream version.
  This replaces open-iscsi-2.0.875-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2, and resets
  open-iscsi-SUSE-latest.diff.bz2 to contain only changes
  since the 2.0.876-suse tag.
  These changes added a new libopeniscsiusr.so library, as
  well as include files under a new open-iscsi-dev package,
  if you want to link against this library.
  The SPEC file was also cleaned up using spec-cleaner.</changelog>
  <changelog author="lduncan@suse.com" date="1516708800">- Removed the "rpm/" source directory from both the
  open-iscsi-2.0.876-suse.tar.bz2  and open-iscsi-SUSE-latest.diff.bz2
  files, since they are not needed for building and are not part
  of the upstream sources. They are still available under the
  git repository at github.com/hreinecke/open-iscsi.git. This means
  that changes to the spec file or the changes file will no longer
  require a change to the "*SUSE-latest*" file.</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="38382e77ab4d24986a6f2560954253f3b8a00fa1b735fd79efe6d432792fe143" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.6.1"/>
  <changelog author="lduncan@suse.com" date="1516622400">- Update to latest upstream vesion 2.0.876, with very few
  SUSE-specific modifications, namely around things upstream
  does not care about, like SUSE-specific systemd files. Also,
  version number modified to add "-suse", as usual. See
  the Changelog file for more details on changes in this
  upstream version.
  This replaces open-iscsi-2.0.875-suse.tar.bz2 with
  open-iscsi-2.0.876-suse.tar.bz2, and resets
  open-iscsi-SUSE-latest.diff.bz2 to contain only changes
  since the 2.0.876-suse tag.
  These changes added a new libopeniscsiusr.so library, as
  well as include files under a new open-iscsi-dev package,
  if you want to link against this library.
  The SPEC file was also cleaned up using spec-cleaner.</changelog>
  <changelog author="lduncan@suse.com" date="1516708800">- Removed the "rpm/" source directory from both the
  open-iscsi-2.0.876-suse.tar.bz2  and open-iscsi-SUSE-latest.diff.bz2
  files, since they are not needed for building and are not part
  of the upstream sources. They are still available under the
  git repository at github.com/hreinecke/open-iscsi.git. This means
  that changes to the spec file or the changes file will no longer
  require a change to the "*SUSE-latest*" file.</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="cc87483ae5ee72fdfff32eadbf9963174cb92f0e4fec2e9ca3cdaf785b3c8c72" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.2" rel="lp150.9.9.1"/>
  <changelog author="jengelh@inai.de" date="1518004800">- Trim filler wording from description.
  Update old commands/RPM variables to macros.
- Implement shared library packaging guideline.
- Do not let fdupes run across partitions.</changelog>
  <changelog author="lduncan@suse.com" date="1519128000">- Fix ARP booting issue with different subnets
  (bsc#1058463), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1519214400">- Ensure correct dependencies: main package must depend
  on (new) libopeniscsiusr package, and devel package
  must depend on main package (updating spec file)</changelog>
  <changelog author="lduncan@suse.com" date="1521720000">- Cleaned up complaints by gcc-8 about strings (bsc#1084640)
- Fixed rpmlint complaint about libopeniscsiusr summary
  not starting with a capital letter
- Fixed libopeniscsiusr global variable overload
- No functional changes. This updates:
  * open-iscsi-SUSE-latest.diff.bz2, and
  * open-iscsi.spec</changelog>
  <changelog author="lduncan@suse.com" date="1523620800">- Added 2 upstream commits to address issue of iscsi_if.h
  stayig in sync with kernel vesion (bsc#1086344), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524052800">- Added upstream patch to allow host_id of 0 (bsc#1089687),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1524484800">- Ensure we can get qedi transport name (bsc#1090275), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1527768000">- Fix a core dump which can occur if iscsiuio is started then
  immediately stopped (bsc#1094797), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1529064000">- Updated SPEC file to use "%license" for COPYING file</changelog>
  <changelog author="lduncan@suse.com" date="1533643200">- Update to latest upstream, including fixes for iscsiuio
  (bsc#1100349), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1535716800">- iscsiuio: limit retries of dhpcv6 (bsc#1106694), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1536753600">- Use libkmod instead of running modprobe (bsc#1106685), updating
  the spec file, and:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540123200">- Restore space to output of "iscsiadm -m node" (bsc#1111608),
  from upstream commit, updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382400">- New library version needs to Obsolete the prevoius version,
  and add a note about *not* editing the SPEC file directly,
  both updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540382401">- when iscsid started up and found stale sessions it tried
  forever to reconnect them, during which time the session
  info was printed incorrectly. Fix that printing, and add
  ability to limit reconnect retries (bsc#1088389), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728000">- Do not allow multiple sessions just because they were started
  in parallel (bsc#1107753), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1540728001">- iscsiuio: Do not flush tx queue on each uio interrupt. This
  makes ping to such NICs work better (bsc#1102589), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1541505600">- Update idbm.c files to stop i586 string overflow warnings,
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1546862400">- Added two upstream qedi/iscsiuio fixes (bsc#1116711):
  * qedi: Set buf_size in case of ICMP and ARP packet.
  * qedi: Use uio BD index instead on buffer index.
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1548331200">- Fix output for iscsiadm node/iface print level P1 (bsc#1122938),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
</package>
<package pkgid="20642ca45ded87f662d5d7a827386bca584bb7e5a460634deefb37837ff48a62" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp150.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
</package>
<package pkgid="cbccd1dcafed363a13dc44326d6bbcd10cfdc53195c9f7305e61c182308fc432" name="issue-generator" arch="src">
  <version epoch="0" ver="1.5" rel="lp150.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
</package>
<package pkgid="c82d73aac94af614c3fa46c0027a0833dfb6707595ffbd6a8ed734891e4cd708" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.6" rel="lp150.3.6.2"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
</package>
<package pkgid="525b9c25d33121f9113fd17beb5604b0423a2f5b00d5c7ed55c2fd79db654634" name="issue-generator" arch="src">
  <version epoch="0" ver="1.6" rel="lp150.3.6.2"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
</package>
<package pkgid="719cbcfc5d324b08ba76d5d65bf7e6ed0c47e969b823bc3c1b4262b4bc9ba06e" name="itstool" arch="noarch">
  <version epoch="0" ver="2.0.5" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1306238400">- Initial package, version 1.0.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1309262400">- Update to version 1.1.0:
  + Added itst:context to set msgctxt
  + Added itst:drop to drop context from translations
  + Allow XML attribute to be translated
  + Allow locNotePointer to return a string
  + Allow localization notes to be space-preserving
  + Allow both XLink and child rules on its:rules
  + Fixed Unicode encoding/decoding errors
  + Added automated test suite
  + Added a man page
  + Python 3 fixes</changelog>
  <changelog author="vuntz@opensuse.org" date="1316520000">- Update to version 1.1.1:
  + Catch XML parsing errors and exit with error code
  + Fixed placeholder translation when it contains sub-elements
  + Improved autogen.sh for out of tree compilations</changelog>
  <changelog author="dimstar@opensuse.org" date="1328443200">- Update to version 1.1.2:
  + Better handling of XML errors in PO files.</changelog>
  <changelog author="coolo@suse.com" date="1331035200">- Remove python BuildRequires and %py_requires: we only need a
  minimal python, which libxml2-python will bring in both cases;
  and we don't need a specific version of python.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Update to version 1.1.3:
  + Handle UTF-8 in attribute values
  + Don't output non-translatable external ref messages
  + Better error handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 1.2.0:
  + Added new "join mode" for multilingual XML formats.
  + Correctly handle ITS version attribute.
  + Better handling of multiple localization notes.
  + XML path markers are now in dedicated comments.
  + Show language code when failing to get translation from PO.
  + Added more regression tests.</changelog>
  <changelog author="dimstar@opensuse.org" date="1383825600">- Update to version 2.0.0:
  + Support for ITS 2.0 Preserve Space data category.
  + Support for ITS 2.0 Locale Filter data category.
  + Support for ITS 2.0 External Resource data category.
  + Support for ITS 2.0 ID Value data category.
  + Support for ITS 2.0 parameters, including user overrides.
  + Support for ITS 2.0 local withinText attribute.
  + Fixed handling of localization note inheritance.
  + Fixed handling of namespace prefixes on elements.
  + Added option to retain entity references in PO files.
  + Added option to load external DTDs.
  + Added built-in rules for DocBook 5.
  + Updated built-in rules to use ITS 2.0 Preserve Space and
    External Resource instead of 1.x custom extensions.
  + Excluded editor remarks and comments in built-in DocBook and
    Mallard rules with Locale Filter.
  + Made all DocBook *info children not within text in built-in
    rules.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385294400">- Update to version 2.0.1:
  + Reworked default ITS rules for better performance.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385380800">- Add itstool-fix-crash.patch: Fixed crash in locale filter and
  drop rule (bgo#715116).</changelog>
  <changelog author="dimstar@opensuse.org" date="1387886400">- Update to version 2.0.2:
  + Fixed crash in locale filter and drop rule (bgo#715116).
  + Don't hardcode python path (fdo#72533).
  + Updated man page.
- Drop itstool-fix-crash.patch: fixed upstream.
- No longer replace the shebang in itstool and itstool.in: the
  upstream provided solution sets it based on configure's findings.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507204800">- Update to version 2.0.3:
  + Added:
  - Python 3 support. Keeping Python 2 support for now.
  - --path option for extra paths for ITS files.
  + Fixed:
  - --keep-entities mode after some libxml2 changes.
  - UTF-8 handling for translated attributes.
  + Don't error out (except under -s) for mismatched placeholders.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508846400">- Update to version 2.0.4:
  + Fixed a massive performance issue.
- Add itstool-2.0.4-no-freedoc.patch: Do not free xmlDocs, avoid
  crashes (gh#itstool/itstool#17).</changelog>
  <changelog author="dimstar@opensuse.org" date="1508846401">- Switch to python3 version:
  + Add python3-base BuildRequires: unlike python2, py3 is not
    implicit in the buildroot yet.
  + Export PYTHON=python3 before configure.
  + Replace libxml2-python (Build)?Requires with
    python3-libxml2-python.
- Replace itstool-2.0.4-no-freedoc.patch with
  itstool-2.0.4-memory-management.patch: use upstream provided
  solution for the crshes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Introduce _python_ver variable, currently set to '2': allow for
  an easy way to toggle between python3 and python2 based itstool.
  Currently using python2, as python3-based itstool still has
  issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mcepl@suse.com" date="1529496000">- Add patch itstool-2.0.4-serialize_to_str.patch
  to fix upstream big #19 (fix str/bytes issue)
- Be consistent in using python%{_python_ver}</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Switch directly to py3 istool, as it seems it does not break there
  should be no real requirement to use the python2 variant (even on
  old products it should be ok to use py3 one) (bsc#1111019)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545220800">- Update to version 2.0.5:
  + Allow preserveSpace on XML attributes.
  + Fixed issue with writing files under macOS.
  + Fixed various differences between Python 2 and 3.
  + Fixed issues with libxml2 memory management.
- Add itstool-Apply-ITS-files.patch: Apply ITS files passed with -i
  in --join mode.
- Drop patch itstool-2.0.4-serialize_to_str.patch and
  itstool-2.0.4-memory-management.patch: fixed upstream.</changelog>
</package>
<package pkgid="1aa8378e76264fd54f535f4ca8cfbf8c6647fe589bcbefbd4967510478001efd" name="itstool" arch="src">
  <version epoch="0" ver="2.0.5" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1306238400">- Initial package, version 1.0.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1309262400">- Update to version 1.1.0:
  + Added itst:context to set msgctxt
  + Added itst:drop to drop context from translations
  + Allow XML attribute to be translated
  + Allow locNotePointer to return a string
  + Allow localization notes to be space-preserving
  + Allow both XLink and child rules on its:rules
  + Fixed Unicode encoding/decoding errors
  + Added automated test suite
  + Added a man page
  + Python 3 fixes</changelog>
  <changelog author="vuntz@opensuse.org" date="1316520000">- Update to version 1.1.1:
  + Catch XML parsing errors and exit with error code
  + Fixed placeholder translation when it contains sub-elements
  + Improved autogen.sh for out of tree compilations</changelog>
  <changelog author="dimstar@opensuse.org" date="1328443200">- Update to version 1.1.2:
  + Better handling of XML errors in PO files.</changelog>
  <changelog author="coolo@suse.com" date="1331035200">- Remove python BuildRequires and %py_requires: we only need a
  minimal python, which libxml2-python will bring in both cases;
  and we don't need a specific version of python.</changelog>
  <changelog author="vuntz@opensuse.org" date="1336996800">- Update to version 1.1.3:
  + Handle UTF-8 in attribute values
  + Don't output non-translatable external ref messages
  + Better error handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1340798400">- Update to version 1.2.0:
  + Added new "join mode" for multilingual XML formats.
  + Correctly handle ITS version attribute.
  + Better handling of multiple localization notes.
  + XML path markers are now in dedicated comments.
  + Show language code when failing to get translation from PO.
  + Added more regression tests.</changelog>
  <changelog author="dimstar@opensuse.org" date="1383825600">- Update to version 2.0.0:
  + Support for ITS 2.0 Preserve Space data category.
  + Support for ITS 2.0 Locale Filter data category.
  + Support for ITS 2.0 External Resource data category.
  + Support for ITS 2.0 ID Value data category.
  + Support for ITS 2.0 parameters, including user overrides.
  + Support for ITS 2.0 local withinText attribute.
  + Fixed handling of localization note inheritance.
  + Fixed handling of namespace prefixes on elements.
  + Added option to retain entity references in PO files.
  + Added option to load external DTDs.
  + Added built-in rules for DocBook 5.
  + Updated built-in rules to use ITS 2.0 Preserve Space and
    External Resource instead of 1.x custom extensions.
  + Excluded editor remarks and comments in built-in DocBook and
    Mallard rules with Locale Filter.
  + Made all DocBook *info children not within text in built-in
    rules.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385294400">- Update to version 2.0.1:
  + Reworked default ITS rules for better performance.</changelog>
  <changelog author="dimstar@opensuse.org" date="1385380800">- Add itstool-fix-crash.patch: Fixed crash in locale filter and
  drop rule (bgo#715116).</changelog>
  <changelog author="dimstar@opensuse.org" date="1387886400">- Update to version 2.0.2:
  + Fixed crash in locale filter and drop rule (bgo#715116).
  + Don't hardcode python path (fdo#72533).
  + Updated man page.
- Drop itstool-fix-crash.patch: fixed upstream.
- No longer replace the shebang in itstool and itstool.in: the
  upstream provided solution sets it based on configure's findings.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507204800">- Update to version 2.0.3:
  + Added:
  - Python 3 support. Keeping Python 2 support for now.
  - --path option for extra paths for ITS files.
  + Fixed:
  - --keep-entities mode after some libxml2 changes.
  - UTF-8 handling for translated attributes.
  + Don't error out (except under -s) for mismatched placeholders.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508846400">- Update to version 2.0.4:
  + Fixed a massive performance issue.
- Add itstool-2.0.4-no-freedoc.patch: Do not free xmlDocs, avoid
  crashes (gh#itstool/itstool#17).</changelog>
  <changelog author="dimstar@opensuse.org" date="1508846401">- Switch to python3 version:
  + Add python3-base BuildRequires: unlike python2, py3 is not
    implicit in the buildroot yet.
  + Export PYTHON=python3 before configure.
  + Replace libxml2-python (Build)?Requires with
    python3-libxml2-python.
- Replace itstool-2.0.4-no-freedoc.patch with
  itstool-2.0.4-memory-management.patch: use upstream provided
  solution for the crshes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1518523200">- Introduce _python_ver variable, currently set to '2': allow for
  an easy way to toggle between python3 and python2 based itstool.
  Currently using python2, as python3-based itstool still has
  issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="mcepl@suse.com" date="1529496000">- Add patch itstool-2.0.4-serialize_to_str.patch
  to fix upstream big #19 (fix str/bytes issue)
- Be consistent in using python%{_python_ver}</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Switch directly to py3 istool, as it seems it does not break there
  should be no real requirement to use the python2 variant (even on
  old products it should be ok to use py3 one) (bsc#1111019)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545220800">- Update to version 2.0.5:
  + Allow preserveSpace on XML attributes.
  + Fixed issue with writing files under macOS.
  + Fixed various differences between Python 2 and 3.
  + Fixed issues with libxml2 memory management.
- Add itstool-Apply-ITS-files.patch: Apply ITS files passed with -i
  in --join mode.
- Drop patch itstool-2.0.4-serialize_to_str.patch and
  itstool-2.0.4-memory-management.patch: fixed upstream.</changelog>
</package>
<package pkgid="3861f4cd920fedb6fc4ed7aa63cd08dcd47430b8393579c8c3075ad6d19ff435" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="16.9" rel="lp150.4.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1504180800">- Update to v15-rc3-52-gd3ca56f1
  * Fix rdma-sriov.service dependencies and remove install section
  * 50-libmlx4.conf is not a config file</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505736000">- Update to rdma-core v15
  * Remove dracut requirement (bsc#1058504)
  * Includes Broadcom patches (bsc#1060413)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1508328000">- Backport patches from upstream:
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
    Fixes a byte order issue which causes ibacm to fail to join a multicast
    group on recent on recent kernels. (bsc#1063639, bsc#1063697)
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
    Fixes a sefgault of ibacm when a provider other than default
    is set (bsc#1063642, bsc#1063698)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1509624000">- Backport patch from upstream:
  * libqedr-fix-inline-data-copy.patch
    Fix data integrity issue while sending inline data (bsc#1050543, fate#322894)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510142400">- Add libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * Fix issue with umad when QSFP is not plugged in (bnc#1058539)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1510228800">- Backport upstream patches
  * bnxt_re-lib-fix-the-memory-barrier-call-during-poll-cq.patch
    Fix memory ordering issue
  * bnxt_re-lib-increment-psn-in-case-of-0-length-packets.patch
    Fix PSN getting out of sync when sending 0 length packet
  * verbs-Do-not-block-QP-attr_masks-used-by-older-kernels.patch
    Fix bits detection to allow RDMA CM to work on older kernsl
- Refresh older patches to include commit logs:
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
  * libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * libqedr-fix-inline-data-copy.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511870400">- Update to rdma-core v15.1
  * Backport CI checks on centos/SUSE from master
  * Stable ABI auto checks
  * Backport fixes:
  * verbs: Do not block QP attr_masks used by older kernels
  * libibumad/umad.c: In get_port, ignore sysfs rate file errors
  * bnxt_re/lib: fix the memory barrier call during poll-cq
  * bnxt_re/lib: increment psn in case of 0 length packets
  * libqedr: fix inline data copy
  * verbs: Fix declaration of C++ include file in C-block
  * verbs: Fix C++ compilation break
  * verbs: fix compilation error with ICC
  * hns: Fix create QP structure layout
  * ibacm: Incorrect list used for subnet list causes a segfault
  * ibacm: Incorrect usage of BE byte order of MLID attach/detach_mcast()
- Remove patches that were merged to v15.1:
  * bnxt_re-lib-fix-the-memory-barrier-call-during-poll-cq.patch
  * bnxt_re-lib-increment-psn-in-case-of-0-length-packets.patch
  * ibacm-Incorrect-list-used-for-subnet-list-causes-a-segfault.patch
  * ibacm-Incorrect-usage-of-BE-byte-order-of-MLID-attach-detach_mcast.patch
  * libibumad-umad.c-In-get_port-ignore-sysfs-rate-file-errors.patch
  * libqedr-fix-inline-data-copy.patch
  * verbs-Do-not-block-QP-attr_masks-used-by-older-kernels.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512388800">- Add bcond to use curl-mini by default for building</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512561600">- Update to rdma-core v16
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1513339200">- Add srp_daemon-handle-SM-lid-change.patch and
  srp_daemon-fix-CQ-handling.patch to fix issue
  with SRP daemon not handling SM changes (bsc#1072884, bsc#1049515)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1514980800">- Add srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch
  to fix bad exit code of ibsrpdm (bsc#1074390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515067200">- Update to rdma-core v16.1:
  * Backport fixes:
  * srp_daemon: Don't create async_ev_thread if only run once
  * srp_daemon: handle SM lid change
  * srp_daemon: fix CQ handling
- Drop srp_daemon-Don-t-create-async_ev_thread-if-only-run-once.patch,
  srp_daemon-fix-CQ-handling.patch, and
  srp_daemon-handle-SM-lid-change.patch as they were merged upstream.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516363200">- Add Remove-the-obsolete-libibcm-library.patch to drop obsolete libibcm.
  * Official upstream drop will be in v17
  * Drop now to avoid submitting libibcm to SLE15</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1517486400">- Update to rdma-core v16.2 (bsc#1078819):
  * Backport fixes:
  * iwpmd: fix double mutex unlock
  * libbnxt_re: Fix lat test failure in event mode
  * libbnxt_re: Update and sort device pci-id table
  * cbuild: Support distros that only ship python3
  * libbnxt_re: Display FW version using ibv_devinfo</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519214400">- Update to rdma-core v16.3:
  * Backport fixes:
  * vmw_pvrdma: Drop the extraneous align_next_power2 for sges
  * vmw_pvrdma: Fix SRQN returned to library
  * mlx5: Add missing include file in mlx5dv.h</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1520942400">- Update to rdma-core v16.4 (bsc#1084456)
  * Backport fixes:
  * cxgb4: add new device pci ids.
  * mlx5: Fix referencing uninitialized var in create_qp error flow
  * Ensure all public headers compile in C++ mode
  * providers/i40iw: Skip CQEs for destroyed QP
  * ibacm: Support FDR and EDR rates</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521633600">- Add Provide/Obsolete for librdmacm in librdmacm1 (bsc#1086173)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1524744000">- Add umad-Do-not-check-for-umad-sysfs-files-in-umad_init.patch to fix
  umad/ibstat support on RoCE hardware (bsc#1088441).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1528804800">- Update to rdma-core v16.5
  * Backport fixes:
  * buildilb: Fix -msse breakage on ARM builds
  * buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910)
  * suse: do not call %service rules on a template file (bsc#1093170)
  * mlx5: Convert ah_attr static rate to mlx5 static rate
  * ccan: Add array_size.h file
  * iwpmd: Initialize address of sockaddr
  * mlx5: Fix need_uuar_lock when there are no medium bfregs
  * verbs: Fix wrong clean up flow in ibv_rc_pingpong
  * Match kernel ABI to for 4.17 for 32 bit
  * librdmacm: Set errno correctly if status is positive
  * verbs: Remove bogus cq_fd
  * verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val'</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1559563200">- Update to rdma-core v16.9 (bsc#996146)
  - rdma-core-16.9:
  - suse: fix dracut support
  - rdma-core-16.8:
  - mlx5: Fix masking service level in mlx5_create_ah
  - cmake: Explicitly convert build type to be STRING
  - libhns: Bugfix for filtering zero length sge
  - buildlib: Ensure stanza is properly sorted
  - mlx4: Allow loopback when using raw Ethernet QP
  - travis: Change SuSE package target due to Travis CI failures
  - cbuild: fix tumbleweed docker image
  - libhns: Bugfix for using buffer length
  - mlx5: Fix incorrect error handling when SQ wqe count is 0
  - rdma-core-16.7:
  - mlx5: Fix SL to Ethernet priority conversion
  - rdma-core-16.6:
  - travis: Fix travis failures
  - verbs: If the uverbs module is not loaded allow get_devices to retry init
  - mlx5: Fix flow tag mask
  - rxe: fix rxe compilation with newer kernels
  - Revert "buildlib: pick leap over tumbleweed"
  - buildlib: pick leap over tumbleweed
  - mlx5: Fix compilation on 32 bit systems when sse3 is on
  - mlx5: Allocate huge page chunks only when needed
  - rxe: Do not use _sockaddr in struct rxe_av
  - rxe: Remove duplicate include</changelog>
</package>
<package pkgid="3c355733fbd7eb0529865a05dfe0d5f384fe2b1bdaf9622cce4bedc22457c8a7" name="jakarta-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382011200">- fix bnc#846174/CVE-2013-2186: null byte injection flaw
  http://svn.apache.org/viewvc?view=revision&amp;revision=1507048
  * jakarta-commons-fileupload-CVE-2013-2186.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1382097600">- remove gcj part and deprecated macros</changelog>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552651200">- Security fix: [CVE-2016-1000031, bsc#1128963, bsc#1128829]
  * Apache Commons FileUpload DiskFileItem File Manipulation Remote
    Code Execution
  * Added jakarta-commons-fileupload-CVE-2016-1000031.patch</changelog>
</package>
<package pkgid="8d0583aba62bb150d628a6a6cdda4266ba86aad3f8ea3528795077f25ec88677" name="jakarta-commons-fileupload" arch="src">
  <version epoch="0" ver="1.1.1" rel="lp150.2.3.1"/>
  <changelog author="skh@suse.de" date="1094385600">- Initial package created with version 1.0 (JPackage 1.5)</changelog>
  <changelog author="skh@suse.de" date="1095336000">- Fix prerequires of javadoc subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
  <changelog author="jsmeix@suse.de" date="1129636800">- Current version 1.0 from JPackage.org</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1158926400">- don't use icecream
- use target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.1.1</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382011200">- fix bnc#846174/CVE-2013-2186: null byte injection flaw
  http://svn.apache.org/viewvc?view=revision&amp;revision=1507048
  * jakarta-commons-fileupload-CVE-2013-2186.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1382097600">- remove gcj part and deprecated macros</changelog>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552651200">- Security fix: [CVE-2016-1000031, bsc#1128963, bsc#1128829]
  * Apache Commons FileUpload DiskFileItem File Manipulation Remote
    Code Execution
  * Added jakarta-commons-fileupload-CVE-2016-1000031.patch</changelog>
</package>
<package pkgid="3fe5781dcba8b2b8cec708bb1aa6a047e1cb0dcc02bb2dd5b2ac84f595917d76" name="jakarta-commons-fileupload-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382011200">- fix bnc#846174/CVE-2013-2186: null byte injection flaw
  http://svn.apache.org/viewvc?view=revision&amp;revision=1507048
  * jakarta-commons-fileupload-CVE-2013-2186.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1382097600">- remove gcj part and deprecated macros</changelog>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552651200">- Security fix: [CVE-2016-1000031, bsc#1128963, bsc#1128829]
  * Apache Commons FileUpload DiskFileItem File Manipulation Remote
    Code Execution
  * Added jakarta-commons-fileupload-CVE-2016-1000031.patch</changelog>
</package>
<package pkgid="bee4f0fd0f9e0256d755eee2a1000cc1fff681b73bfa6dcc44b74270134d8bcb" name="jasper" arch="src">
  <version epoch="0" ver="2.0.14" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
  <changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
</package>
<package pkgid="9b893f058ac24056dd1ccb760096198d928085ddf3482440510eb8bfe33950be" name="jasper" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1452772800">- Add jasper-CVE-2016-1867.patch
  * CVE-2016-1867: Out-of-bounds Read in the JasPer's
    jpc_pi_nextcprl() function (bsc#961886)</changelog>
  <changelog author="fstrba@suse.com" date="1453982400">- Add jasper-CVE-2016-2089.patch
  * CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip()
    function (bsc#963983)</changelog>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
</package>
<package pkgid="12de3069617be943c883f68bcbecdc90cff46bae9628291c98cecd3f1a2e7e01" name="jasper" arch="src">
  <version epoch="0" ver="2.0.14" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="8a62d3a4fe8b830d909e543968607d19dd0c640a3de2a5156622bfb74b5b8673" name="jasper" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1454414400">- Modified patch
  * jasper-CVE-2016-2089.patch
    + Use the new version of patch from
    https://bugzilla.redhat.com/show_bug.cgi?id=1302636
    with more targetted checks.
- Version the Obsoletes/Provides so that the package does not
  obsolete itself</changelog>
  <changelog author="fstrba@suse.com" date="1477310400">- Updated to bugfix release 1.900.13
  * Changes
    + Fixed another problem with incorrect cleanup of JP2 box data
    upon error. (Michael Adams)
    + Fixed another integer overflow problem. (Michael Adams)
    + Replaced the remaining left and right shifts in the QMFB/MCT
    code that can result in undefined behavior (due to shifting
    negative values) with call to inline functions.
    These functions collect all of the undefined behavior in one
    place and also allow code sanitizers to ignore this ugliness
    (via function attributes). (Michael Adams)
    + Fixed a bug in the row/column split operations for QMFBs.
    (Michael Adams)
    + Made the PNM decoder more gracefully handle the not-fully-
    supported feature of signed sample data. (Michael Adams)
    + The PNM decoder did not gracefully handle an invalid magic
    number in the PNM header. (Michael Adams)
    + Fixed a MIF decoder bug. (Michael Adams)
    + The imginfo command did not correctly handle an image with
    zero components. (Michael Adams)
    + Fixed an integer overflow problem. (Michael Adams)
    + A new experimental memory allocator has been introduced. The
    allocator is experimental in the sense that its API is not
    considered stable and the allocator may change or disappear
    entirely in future versions of the code. This new allocator
    tracks how much memory is being used by jas_malloc and friends.
    A maximum upper bound on the memory usage can be set via the
    experimental API provided and a default value can be set at
    build time as well. Such functionality may be useful in
    run-time environments where the user wants to be able to limit
    the amount of memory used by JasPer. This allocator is not
    used by default. (Michael Adams)
    + Changed the configure setup so that if GCC is used warnings
    and pedantic errors are enabled. (Michael Adams)
    + Fixed a bug that resulted in the destruction of JP2 box data
    that had never been constructed in the first place. (Michael
    Adams)
    + The memory stream interface allows for a buffer size of zero.
    The case of a zero-sized buffer was not handled correctly, as
    it could lead to a double free (bsc#1005242, CVE-2016-8693).
    (Michael Adams)
    + Fixed a small memory leak for CRG marker segments. (Michael
    Adams)
    + Fixed a problem with a null pointer dereference in the BMP
    decoder. (Michael Adams)
    + Introduced jas_fast32_asl, jas_fast32_asr, and friends in
    order to pull all undefined behavior for left and right shift
    of (negative) integers into a small number of places and
    provide a means to have UBSAN ignore this ugliness. (Michael
    Adams)
    + Fixed an integral type promotion problem by adding a JAS_CAST.
    Modified the jpc_tsfb_synthesize function so that it will be a
    noop for an empty sequence (in order to avoid dereferencing a
    null pointer). (Michael Adams)
    + Added some extra debugging log messages for memory
    allocation/deallocation. (Michael Adams)
    + The RCT and ICT require at least three components. Previously,
    this was enforced with an assertion. Now, the assertion has
    been replaced with a proper error check. (Michael Adams)
    + The member (pi) in tiles was not properly initialized. This is
    now corrected. Also, each tile is now only cleaned up once.
    (Michael Adams)
    + Initialize uninitialized variable. (Michael Adams)
    + Added some options to configure for enabling various code
    sanitizers. (Michael Adams)
    + Added some range checks on parameters in some JPC marker
    segments. (Michael Adams)
    + Fixed potential integer overflow problem. (Michael Adams)
    + Added some functions for safe integer arithmetic (for size_t)
    in jas_math.h. (Michael Adams)
    + Fixed some indentation issues. (Michael Adams)
    + Converted a few raw mallocs to use jas_alloc2. Added code in
    the jas_* memory allocation/deallocation functions to generate
    debugging log messages. Only disable JAS_DBGLOG message if
    NDEBUG is defined. (Michael Adams)
    + Added more error/log messages for debugging in the JPEG
    decoder. (Michael Adams)
    + Added some extra log messages for debugging. Added check of
    value returned by jas_matrix_create. (Michael Adams)
    + Applied fix for VPATH builds (Michael Adams)
    + Did some configure.ac cleanup (Michael Adams)
    + Fixed 'inline' for older version of Visual Studio. (dirk)
    + Fix a potential double fclose of a FILE* in the JPEG decoder.
    (Michael Adams)
    + Changed jas_types.h to assume that header files required by
    the C99 standard are present. (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-libjasper-stepsizes-overflow.patch (Michael
    Adams)
    + Incorporated changes from patch
    jasper-1.900.3-CVE-2011-4516-CVE-2011-4517-CERT-VU-887409.patch
    (Michael Adams)
    + Incorporated changes from patch
    jasper-1.900.3-Coverity-RESOURCE_LEAK.patch (Michael Adams)
    + Incorporated patch jasper-1.900.3-Coverity-NULL_RETURNS.patch
    (Michael Adams)
    + Fixed memory leak in jiv. (Michael Adams)
    + Fixed a sanitizer failure in the BMP codec (bsc#1005084,
    CVE-2016-8690). Also, added a --debug-level command line
    option to the imginfo command for debugging purposes.
    (Michael Adams)
    + Added some missing type casts to ensure promotion to the
    correct unsigned type to avoid undefined behavior (and stop
    warnings from USAN). (Michael Adams)
    + Fixed a linking problem with newer versions of GCC. (Michael
    Adams)
    + Changed --enable-debug configure option to enable some GCC
    sanitizers. (Michael Adams)
    + Added range check on XRsiz and YRsiz fields of SIZ marker
    segment (bsc#1005090, CVE-2016-8691, CVE-2016-8692). (Michael
    Adams)
    + At many places in the code, jas_malloc or jas_recalloc was
    being invoked with the size argument being computed in a
    manner that would not allow integer overflow to be detected.
    Now, these places in the code have been modified to use
    special-purpose memory allocation functions (e.g., jas_alloc2,
    jas_alloc3, jas_realloc2) that check for overflow.
    (Michael Adams)
    + Add fixes for CVE-2014-8137. (Michael Adams)
    + Added fix for CVE-2016-2089. (Michael Adams)
    + Moved abort into default case of switch statement. (Michael
    Adams)
    + Remove auto-generated file aclocal.m4 from repository.
    (Michael Adams)
    + Removed HAVE_VLA stuff from various configuration and build
    files. Also, changed a few INCLUDES to AM_CPPFLAGS in automake
    files (since INCLUDES is deprecated). (Michael Adams)
    + 1.701.0-GL (Richard Hughes)
    + pkgconfig (Richard Hughes)
    + Coverity-UNREACHABLE (Richard Hughes)
    + CVE-2016-1867 (Richard Hughes)
    + CVE-2014-9029 (Richard Hughes)
    + CVE-2014-8158 (Richard Hughes)
    + CVE-2014-8157 (Richard Hughes)
    + CVE-2014-8138 (Richard Hughes)
    + CVE-2015-5221 (Richard Hughes)
    + CVE-2016-2116 (Richard Hughes)
    + Coverity-FORWARD_NULL (Richard Hughes)
    + jpc_dec.c (Richard Hughes)
    + Coverity-CHECKED_RETURN (Richard Hughes)
    + CVE-2016-1577 (Richard Hughes)
    + Coverity-UNUSED_VALUE (Richard Hughes)
    + Coverity-BAD_SIZEOF (Richard Hughes)
    + CVE-2008-3522 (Richard Hughes)
- Removed patches:
  * jasper-1.900.1-bug258253.patch
  * jasper-1.900.1-bug392410.patch
  * jasper-1.900.1-no-undef-true-false.patch
  * jasper-1.900.1-bug725758.patch
  * jasper-overflow-bnc906364.patch
  * jasper-CVE-2014-8137.patch
  * jasper-CVE-2014-8138.patch
  * jasper-CVE-2014-8157.patch
  * jasper-CVE-2014-8158.patch
  * jasper-jpc_dec.patch
  * jasper-CVE-2016-1867.patch
  * jasper-CVE-2016-2089.patch
    + Fixed upstream
- Force -std=c99, since the upstream sources assume C99</changelog>
  <changelog author="fstrba@suse.com" date="1477483200">- Updated to bugfix release 1.900.14
  * Security fixes
    + bsc#941919, CVE-2015-5203
    + bsc#1006591, CVE-2016-8880
    + bsc#1006593, CVE-2016-8881
    + bsc#1006597, CVE-2016-8882
    + bsc#1006598, CVE-2016-8883
    + bsc#1007009, CVE-2016-8884, CVE-2016-8885
    + bsc#1006599, CVE-2016-8886
    + bsc#1006836, bsc#1006839, CVE-2016-8887
  * Changes
    + Add another data file for testing (Michael Adams)
    + Ensure that not all tiles lie outside the image area (Michael
    Adams)
    + Added a note on sanitizer options (Michael Adams)
    + Added a simple test script (Michael Adams)
    + Added an --enable-memory-limit configure option (Michael
    Adams)
    + Manually merged and edited a few changes from Bob Friesenhahn
    (GraphicsMagick Maintainer) for Windows (Michael Adams)
    + Added some new mostly small image files (many of which are
    corrupt/invalid) that are useful for testing purposes
    (Michael Adams)
    + The debugging function jpc_dec_dump did not consider the case
    that a band can have a null data pointer (when a band
    contains no samples). This caused a null pointer to be
    dereferenced (Michael Adams)
    + Changed the JPC bitstream code to more gracefully handle a
    request for a larger sized integer than what can be handled
    (i.e., return with an error instead of failing an assert).
    (Michael Adams)
    + The component domains must be the same for the ICT/RCT in the
    JPC codec. This was previously enforced with an assertion.
    Now, it is handled in a more graceful manner (Michael Adams)
    + Fixed a few bugs in the RAS encoder and decoder where errors
    were tested with assertions instead of being gracefully
    handled (Michael Adams)</changelog>
  <changelog author="jengelh@inai.de" date="1477656000">- Update summaries. Use %_smp_mflags for parallel build.</changelog>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
</package>
<package pkgid="4820c5f6606e93fd7945ee6804793a7661313063229764e630ae659d62ad820a" name="java-10-openjdk" arch="src">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="45a5edb1e30b131198ad93f0ddc8a2adc1c72f371eedab1ec04e42d83fd0f8c2" name="java-10-openjdk" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="9a0c55b98de0ec9717a8dfabfa0e0e01942c7c990f270d46e23c5d4b197e0a72" name="java-10-openjdk" arch="src">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="de4d2fc1456df93043b892da9c4b404168e058dc8dbfc1c6e242a1c5f3c2edde" name="java-10-openjdk" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="74b3f95ac163c5848303c6fd73299b92761719663538f838701749a7dde3c394" name="java-10-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="9441cf90ecd12dfe413b99d3b31e4a36eed93e39f6340323da5f63742b054076" name="java-10-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="be9993f9c6f1cd2f38d17c9975ddac5fcf768da0a7847bd4bf7c0515f79e5e47" name="java-10-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="f86b46e31421543a942728d66f73c138d614dbf3cfcaf615c7fc40e0fe1c2858" name="java-10-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="d53cf714273619a11da99d7e29fd91e3ca3972c5b4e8240786681cf263d78f15" name="java-10-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="d01e2fcc484db077af68ab10ab9be85aec911fcda5b9bf389ec0d9b93b16eb9c" name="java-10-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="352328aea381e12e6e8660899a9bde5221cfaffb44de02cda51f07dadd2bfd32" name="java-10-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="6fc8db82d7554462686782030a8dfe3314dc9bbc7619fb126bcb9d399bd4b4a2" name="java-10-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="c9ebbe079a6881003874cf7e27ff4a3c164fed310bad94ca6885bbf2163cebde" name="java-10-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="ffd1da34bf6230012b04efbbb68dda901bb7ef0ec78734f951ef35ed2e98145e" name="java-10-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="d4d40767d5d2a630b3f0bcd8c11b09cf6f77ae6be38e655681f7284ada9cfec9" name="java-10-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="f4d73b1d98c05f4ead0860ba271a3d41b8ff6ed0ee3a283df6b1b4b524df8ac9" name="java-10-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="642aca930e3c492d2a961f8f9002b39ac5f2f1c68b84f4cbd23db0d88c22d612" name="java-10-openjdk-src" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="f3fdc760aea19981b109233163807aafd73d744bc8ccef1f019d3ee1751dfd5c" name="java-10-openjdk-src" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.7.1"/>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)</changelog>
</package>
<package pkgid="3d16c094965ddffbd8b602ac4525cd38452b69fba9cf2a89f95c4b8a8cf1de11" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="4eb79e536ab343c017817e4c585084cca09f3b8af8401b59fa39cd26ce53f4f4" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="a16a375d8efbaf2af6eb7c5957b821d6c2d054bfe3f95d72f0cbba9e58321ebe" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="1e74f9205509d696b48cfb3bb91c5fceca8ed96f98ad579f4074c2dafad6592d" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="f8bcf99308c45204306236923eb094f77e4c6c8832c8a77e66bd4a3a289cc82a" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="ea2d89223ecc54c8bf8ed1b17cd308d9282408a67e379cd24960ba540788ced4" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="c3859c98f05d138a964e3981c04a44a3bb2ac31e9553d94c6330e69442d1996d" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="c045eceae1e2943f74987cb35f46b295283a1176388920eacc8405fac3421df8" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="e2880f646f4f83b267308e1659b42bda67b5d98096c89485a0fc69aebe9a68f7" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="97954c824c7fda9b503ae92528469938dec44f793104cc30499cc83457a33e6c" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="81c27822b41f41c7c92ff5d61b4efc8f0daeef307873ee6584409905a2d25fa1" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="e818215fc7246c2738ed423aefcc7a8e2b96fc629636e95ac22d43b04c9264bf" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="7168159106ce2d76d9d74b8fa492ee5b9b11e4c21e184c7d65234d0a54f226c6" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="a47b9445fc97b473682dff07d5957b7ae585d71b8d51c7857e3a9c9b615aa500" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="a04c5222c18e496eaead86b73e140882f642ae9830629db86e280dba9e824a75" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="4c09eb1c71d038a9aee8f9e9f1a5284efda835d9b52fda81d0c16fdb54d3ab46" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="e9b8dc97bae30e147da730808d8ab59ec6a879d72cde76c2afbeb19ece709b83" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="3c8d555b6b8067158ff45ca8c5f2eccf7537961af7c029a794ccd9c7af1f2c58" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="a4e868854db1d95fad90758a1600e84e5f8624af4bf0d01a77f5f42060fd8b84" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="d69ef93c0318bcd1b80c494afe9dec567df0e0d8de832713e44d971d86aaa501" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="aa5b8b842bf256d8caa68a3702d4fdae9ecc57fb05f4fd86f20bf784590257cb" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="41d49e215c083dc9436393622024c9b45ac07add53175bdf14e3c8333a010a11" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="2dc6b0bebc709bdd95f5a6a61476c849eb0c9bd71cbcd6d099ee3f98861ce2ae" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="4236add091692db8b32899b1c531670ea49cffdf4564910fdaac55039553444b" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="0f1a778397cd7ec0c207fc916950a0b53ef60d96faf7378d1201335351cc0f7d" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="4dfe82e96afed941da531ddccab3c961d0243137b5dacd91586d95c1ead65bc4" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="37d151d3d770aa2c003625e4b9c8c28aaddcd9dbd1e1c08fa653588e64c035bf" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="920ee0f30960813da25df409b973f3ca673ddc859ee4abf267dbe018e14a74ed" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="affd2563b0b4dee5d4a95081be9b17bca72b2d650e093ddc64cce776f2632782" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="3e67c54991ca256a0cd33f3cddc8c5a52f9c99d968ee1e8a6941f06ccb0fe643" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="8736eee7044bb7b2ae409ff470329be0ae86bf33f1ded9e900692e88e896622a" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="d1b4da51e83c05534a7824a6231fa838f3abb3b159005ba16ad79131292a0943" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="e6336b09638b9820fe87f3398e0ea2fe77416fe2a628d41193e2fe7102c3f7c8" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="3763eaaaf64b62d5114781e125819edd91b7dadb843e6de3250229b3bfb8918c" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="20fc416072d74d32d40c4196c58823b8adf9f1b83e30f61f528a7fc6f5dd79c9" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="47f763d022bad492530e2d0a3ecd2f5647150cb6974208cd10e90604e9c39c7f" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="f0e8704175f7efe9a159df8a1e72c66bdd905405328e1134e59e061794a4ed31" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="a42ac8521df411acab2f2a71b41d4196922a4cabd194edf737885326134e4efa" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="f9cbd30877d66dc9e330030db18d7e8263931800d10ad70ba5d46475a2b3d555" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="87b9dd22d606b9277c1ecb9d66ab5bf669596c969db7908f6a56d307f2a33b6f" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="25e59dac9a09b9b0bc17e7ebc4d8e59b2abdc7d7d3e4637b532b539024cf414e" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="537625f8f58b9e8c4b7a332fa514843cfeb3fcd0db9331d85f70e7a67e2abd58" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="667519bb72fd89cc0452214e06eba2d7738ad7a26e9ffe8b5346e077abf4c018" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="8b1ff58815b23518402861107426ca2e452bcda075337dbc9e65848a2d26ee8c" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="a2d4f6b031faca3237a823e3e969f0755a3fa4b7de75445da2d058fdf0cf35ea" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="090bbdd5814eda7561a9d3a989b35972278bdf43e12a56106e82958ce1c4e920" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="800976b389e9e2aea59397ce2b6defa96b9d1d61be1f34ee5dc8664103cf231f" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="7e3a01101189e595cf25bd4546252750093230191dec75d4048a4c5d0c9c1e51" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="066c634ad753ef807a144041f763fcf17a6dd3c5d48da0e8376b7d20fb5bde7a" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="49495a968e4a9efb6bd2f027526a18f31e28f675fee5ca62d9ff5f848c4bc890" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="d705bd5a0332e61c0a18dc7e77798b42d6cf0e8b09229f8f47ae2e5ea8942710" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="e6c9fac87d237736ae3d2890602851c461b473d236a1d249c3c1646027a88f50" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="84de7d4732b01f32800d62113cb8167a32d8a29dc8c74ef749f3fbbfa5aab695" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="4d7ac3334b132534b38d69b54ab0f53bde9e2e512ab3ddce2f7848fd8d5d5e64" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="71733392d24c3c24c064205d83eb98a70c3d496ac019c401f2df26a501d748da" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="7b1eae8f9f9d35c48ee298bd5b24aad04bdda7b5b2215a76b61e9f89b2c2027c" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="92e3c169906615251f833b1acdb3de03f07d1169bc3bc80050878ade1ccd8a92" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="651cdbd2c6c57e0699f0e57bf70f18b0c49efed952d106f6232c0c8453dbdefb" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="477d4d1c02b62ec24a9dd7e41676c42eee0bde3c7810b36cdb359dfa0fb494e4" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="5e22bcd9cf4a05d9d2118ccbbebe6c509f4bc61a7590f42e4f56d9ae056b1686" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="da2a4753e621bfeb70f75d77670c305fbb701a604815002a85e409e12fb61b1e" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="b12a79ad70187b125febd29738ded5dc57ade94de457b1f29dcda5c26783ed4a" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1528200000">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
</package>
<package pkgid="dfc46d8e58cf39abd0404261895b1fbc2b6a719b57708dba6f32dcda789c2f5d" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.1.0" rel="lp150.2.9.1"/>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
</package>
<package pkgid="3cd36ed88f2dd109f63e4afcb6a126cbcd3a1aa60b89cafe9903db7e01ec942b" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.2.0" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
</package>
<package pkgid="1b8cb2afe01000919efedaefd477febb84b603220761f547651d7d4861a9e4bd" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
</package>
<package pkgid="8ec25d92a48a901af1ffa8df6fb30421f24f414b185730d64986c0bcaf901bab" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.19.1"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
</package>
<package pkgid="c8728ad09e562a5433455b9d3095e4a58b779e5fcfedab56c98c25a23abf568a" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.3.0" rel="lp150.2.22.1"/>
  <changelog author="fstrba@suse.com" date="1531396800">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
</package>
<package pkgid="238df6c3830a91f7694ced4870e0c3e473f3af2bf9372335acd8c660e4f63450" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.4.0" rel="lp150.2.25.1"/>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
  <changelog author="fstrba@suse.com" date="1534766400">- Update to upstream tag jdk-11+27
  * Fixes:
    + S8031761: [TESTBUG] Add a regression test for JDK-8026328
    + S8151259: [TESTBUG] nsk/jvmti/RedefineClasses/redefclass030
    fails with "unexpected values of outer fields of the class"
    when running with -Xcomp
    + S8164639: Configure PKCS11 tests to use user-supplied NSS
    libraries
    + S8189667: Desktop#moveToTrash expects incorrect "&lt;&lt;ALL
    FILES&gt;&gt;" FilePermission
    + S8194949: [Graal] gc/TestNUMAPageSize.java fail with OOM in
  - Xcomp
    + S8195156: [Graal] serviceability/jvmti/GetModulesInfo/
    /JvmtiGetAllModulesTest.java fails with Graal in Xcomp mode
    + S8199081: [Testbug] compiler/linkage/LinkageErrors.java fails
    if run twice
    + S8201394: Update java.se module summary to reflect removal of
    java.se.ee module
    + S8204931: Colors with alpha are painted incorrectly on Linux
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205608: Fix 'frames()' in ThreadReferenceImpl.c to prevent
    quadratic runtime behavior
    + S8205687: TimeoutHandler generates huge core files
    + S8206176: Remove the temporary tls13VN field
    + S8206258: [Test Error] sun/security/pkcs11 tests fail if NSS
    libs not found
    + S8206965: java/util/TimeZone/Bug8149452.java failed on de_DE
    and ja_JP locale.
    + S8207009: TLS 1.3 half-close and synchronization issues
    + S8207046: arm32 vm crash: C1 arm32 platform functions
    parameters type mismatch
    + S8207139: NMT is not enabled on Windows 2016/10
    + S8207237: SSLSocket#setEnabledCipherSuites is accepting empty
    string
    + S8207355: C1 compilation hangs in
    ComputeLinearScanOrder::compute_dominator
    + S8207746: C2: Lucene crashes on AVX512 instruction
    + S8207765: HeapMonitorTest.java intermittent failure
    + S8207944: java.lang.ClassFormatError: Extra bytes at the end
    of class file test" possibly violation of JVMS 4.7.1
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8207966: HttpClient response without content-length does not
    return body
    + S8208125: Cannot input text into JOptionPane Text Input Dialog
    + S8208164: (str) improve specification of String::lines
    + S8208166: Still unable to use custom SSLEngine with default
    TrustManagerFactory after JDK-8207029
    + S8208189: ProblemList compiler/graalunit/JttThreadsTest.java
    + S8208205: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!'
    + S8208226: ProblemList com/sun/jdi/BasicJDWPConnectionTest.java
    + S8208251: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorGCCMSTest.java fails intermittently on Linux-X64
    + S8208305: ProblemList
    compiler/jvmci/compilerToVM/GetFlagValueTest.java
    + S8208347: ProblemList
    compiler/cpuflags/TestAESIntrinsicsOnSupportedConfig.java
    + S8208353: Upgrade JDK 11 to libpng 1.6.35
    + S8208358: update bug ids mentioned in tests
    + S8208370: fix typo in ReservedStack tests' @requires
    + S8208391: Differentiate response and connect timeouts in HTTP
    Client API
    + S8208466: Fix potential memory leak in harfbuzz shaping.
    + S8208496: New Test to verify concurrent behavior of TLS.
    + S8208521: ProblemList more tests that fail due to 'Error
    attaching to process: Can't create thread_db agent!'
    + S8208640: [a11y] [macos] Unable to navigate between
    Radiobuttons in Radio group using keyboard.
    + S8208663: JDK 11 L10n resource file update msg drop 20
    + S8208676: Missing NULL check and resource leak in
    NetworkPerformanceInterface::NetworkPerformance::network_utilization
    + S8208691: Tighten up jdk.includeInExceptions security property
    + S8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/
    /TestNssDbSqlite.java fails in aarch64 platforms
    + S8209029: ProblemList tests that fail due to 'Error attaching
    to process: Can't create thread_db agent!' in jdk-11+25
    testing
    + S8209149: [TESTBUG] runtime/RedefineTests/
    /RedefineRunningMethods.java needs a longer timeout
    + S8209451: Please change jdk 11 milestone to FCS
    + S8209452: VerifyCACerts.java failed with "At least one cacert
    test failed"
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8209537: Two security tests failed after JDK-8164639 due to
    dependency was missed</changelog>
  <changelog author="fstrba@suse.com" date="1534852800">- Added patch:
  * jaw-nogtk.patch
    + Don't build against gdk making the accessibility depend on a
    particular version of gtk.</changelog>
  <changelog author="fstrba@suse.com" date="1535025600">- Update to upstream tag jdk-11+28 (OpenJDK 11 rc1)
  * Fixes:
    + S8207317: SSLEngine negotiation fail exception behavior
    changed from fail-fast to fail-lazy
    + S8207838: AArch64: Float registers incorrectly restored in
    JNI call
    + S8209637: [s390x] Interpreter doesn't call result handler
    after native calls
    + S8209670: CompilerThread releasing code buffer in destructor
    is unsafe
    + S8209735: Disable avx512 by default
    + S8209806: API docs should be updated to refer to javase11
- Report version without the "-internal" postfix</changelog>
  <changelog author="Mark Hammons &lt;markehammons@gmail.com&gt;" date="1536580800">- Update configuration flags to enable ZGC on x86_64 platforms</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1536667200">- Update jax-ws-spec and jaxb-spec tarball to the latest versions
- Modified patch:
  * annotation-module.patch
    + module name change from java.xml.ws.annotation to
    java.annotation</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537876800">- Official OpenJDK 11 release (fate#324453, fate#323970, bsc#1111162)
  * Pull the sources from the jdk-updates/jdk11u repository from
    now on.
  * Remove the buildver from the rpm version string</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1538568000">- Add patches to workaround aarch64 critical bugs:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1539777600">- Update to upstream tag jdk-11.0.1+13 (Oracle October 2018 CPU)
  * Security fixes:
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8208209, CVE-2018-3180, bsc#1112147: Improve TLS connection
    stability again
    + S8199172, CVE-2018-3150, bsc#1112145: Improve jar attribute
    checks
    + S8200648, CVE-2018-3157, bsc#1112149: Make midi code more
    sound
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8208754, CVE-2018-3136, bsc#1112142: The fix for JDK-8194534
    needs updates
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
  * Security-In-Depth fixes:
    + S8194546: Choosier FileManagers
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8197881: Better StringBuilder support
    + S8201756: Improve cipher inputs
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8200666: Improve LDAP support
    + S8199110: Address Internet Addresses
  * Fixes
    + S7017058: Malayalam glyph substitution is failing for
    Malayalam with Windows Kartika font.
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182362: Update CipherOutputStream Usage
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8183032: Upgrade to LittleCMS 2.9
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189123: More consistent classloading
    + S8189284: More refactoring for deserialization cases
    + S8189969: Manifest better manifest entries
    + S8189977: Improve permission portability
    + S8189981: Improve queuing portability
    + S8189985: Improve tabular data portability
    + S8189989: Improve container portability
    + S8189993: Improve document portability
    + S8189997: Enhance keystore mechanisms
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190478: Improved interface method selection
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8190877: Better handling of abstract classes
    + S8191130: Sinhala text rendering problem with
    C+VIRAMA+ZWJ+RA/YA+V
    + S8191142: More refactoring for naming deserialization cases
    + S8191178: [macos] Problem with input of yen symbol
    + S8191239: Improve desktop file usage
    + S8191358: Restore TSA certificate expiration check
    + S8191696: Better mouse positioning
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192025: Less referential references
    + S8192030: Better MTSchema support
    + S8192757: Improve stub classes implementation
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193419: Better Internet address support
    + S8194233: Improve support for array handles
    + S8194238: Trying exceptions in MethodHandles
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8195662: Add T6587786.java to problem list before
    JDK-8195589 is resolved
    + S8195836: opentype:Bengali: "Khanda Ta" shaping issue with
    U+09A4 TA, U+09CD virama, U+200D ZWJ
    + S8196224: Even better Internet address support
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8197925: Better stack walking
    + S8199547: Exception to Pattern Syntax
    + S8200332: Improve GCM counting
    + S8204667: Resources not freed on exception
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205491: adjust reflective access checks
    + S8206389: JarEntry.setCreation/LastAccessTime without
    setLastModifiedTime causes Invalid CEN header
    + S8206392: [macosx] Cycling through windows (JFrames) does not
    work with keyboard shortcut
    + S8206473: Revert changes of JDK-8202613 in jdk-cpu and
    jdk11u-cpu
    + S8206884: Bump update version for jdk11.0.1 cpu forest
    + S8207057: No debug info for assembler files
    + S8207153: Some intrinsic tests take long time to run
    + S8207745: serviceability/sa/TestJmapCore.java times out
    parsing a 4GB hprof file
    + S8207775: Better management of CipherCore buffers
    + S8207941: javax/swing/plaf/basic/BasicGraphicsUtils/8132119/
    /bug8132119.java fails on machines without Arial font
    [testbug]
    + S8207948: JDK 11 L10n resource file update msg drop 10
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208268: 11.0.1 b03 java.net bundles - Release Date is wrong
    + S8208350: Disable all DES cipher suites
    + S8208583: Better management of internal KeyStore buffers
    + S8208595: [parfait] Better X11 font support
    + S8208654: Please change jdk 11.0.1 milestone to FCS
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208746: ISO 4217 Amendment #168 update
    + S8209129: Further improvements to cipher buffer management
    + S8209639: assert failure in coalesce.cpp: attempted to spill
    a non-spillable item
    + S8209775: ISO 4217 Amendment #169 update
    + S8209786: JDK12 fails to build on s390x with gcc 7.3
    + S8209862: CipherCore performance improvement
    + S8209889: RedefineStress tests crash
    + S8209916: NPE in SupportedGroupsExtension
    + S8209942: [epsilon] range function for EpsilonTLABElasticity
    causes compiler warning
    + S8209996: [PPC64] Fix JFR profiling
    + S8210153: localized currency symbol of VES
    + S8210259: [testbug] IncompatibleOptions.java fails if VM
    configured without ZGC
    + S8210335: Clipping problems with complex affine transforms:
    negative scaling factors or small scaling factors
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210432: Add additional TeliaSonera root certificate
    + S8210497: [PPC64] Vector registers not saved across safepoint
    + S8210502: jdeps does not handle properly on analyzing a
    mixture of MR JARs and non-MR JARs
    + S8210647: libsaproc is being compiled without optimization.
    + S8210703: vmStructs.cpp compiled with -O0
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow
    on linux
    + S8210761: libjsig is being compiled without optimization
    + S8210775: JVM TI Spec missing copyright
    + S8210810: Escaped character at specific position in argument
    file is not handled properly
    + S8210836: Build fails with warn_unused_result in
    openjdk/src/jdk.hotspot.agent/linux/native/libsaproc/ps_core.c
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8211065: Private method check in linkResolver is incorrect
    + S8211105: AArch64: Disable cos/sin and log intrinsics in
    jdk11u pending fix
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211165: License header is absent in a few J2Ddemo source
    code files
    + S8211208: make AllocateHeapAt an unsupported option on AIX
    + S8211387: [Zero] atomic_copy64: Use ldrexd for atomic reads
    on ARMv7
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211768: [s390] Implement JFR profiling
    + S8211856: [ppc, s390] ProblemList some failing tests.
    + S8211916: Javadoc -link makes broken links if module name
    matches package name
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212204: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /base64/TestBase64.java fails
- Removed patches:
  * RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
  * RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
</package>
<package pkgid="61725efff887a8454654b728cb2133791bb86688f24372dfeca92f42f3138567" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="ccf3276bb8f56d189cd6ab7e401c289038868e685a1108d2acf4e29a8e079344" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="6be82d91be0b8758e8e74dd970458c2f3a5263b9edadf52ecb8400adedd621c0" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="17ca5d946506c1a6262a868eb6a2e1d6729fd58b5ffb81867d274f95ae6402d2" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="fa40f5eaebede5ed6de9e20d1c069a99edce6137fcd8c60bc7d06fc8e6a1d228" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.191" rel="lp150.2.9.2"/>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
</package>
<package pkgid="78d7a955ffde376b52d7e9b59fcafdbfae7a4252cf0cde41be4308f2cb54792f" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.191" rel="lp150.2.9.2"/>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
</package>
<package pkgid="97a0e7f63c52f27f1d115d59b137e71f2b3f2c3ffcb735c99d9147dfbba9f6ea" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.201" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
</package>
<package pkgid="7e1379dbf8ca889be0acf34da582bedaf43d4a95b87a5c2e056c277472dd3ec3" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.201" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
</package>
<package pkgid="0e1344c62c82d79b53971fd1913aaffb7fff12bfdb8ed579d77aa8e0d7f74d87" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.212" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="84110c1194fce0b95312b9a6e423e93eb9e5c514934a15c50412e4d806d0a668" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.212" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="cd36b7ed117c78ef558d8dcfe32830d5bf5554a660a29bce96bf2e9b19fc8dde" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.222" rel="lp150.2.19.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="ac4450b55e7c87bfd2d29a5060a109d163f233f7a4b8e9bd6acfaaacb1812adc" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.222" rel="lp150.2.19.1"/>
  <changelog author="fstrba@suse.com" date="1505995200">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
</package>
<package pkgid="2538899cf4948fb5777196d8e45bebb5e8fe896a4ec825b578b07e9228846de1" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="b4460c1c95847699d306cdfd6f68f6b4a838f869cec42b65ddb9970a69925043" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.181" rel="lp150.2.6.1"/>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
</package>
<package pkgid="ee76962eab8f2f581efe86685602bfca1ce53f5c630f602f9c00ebd6b511f133" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.191" rel="lp150.2.9.2"/>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
  + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
</package>
<package pkgid="ebfe00408e7d8f101f106fbdff62a0324b05e8ab82b19820567e90a10c7839b3" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.201" rel="lp150.2.12.1"/>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
</package>
<package pkgid="89739d64f3787e68ec21b853654bb6b6dc4862f9cd3a1353f2739ce033161f2f" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.212" rel="lp150.2.16.1"/>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
    in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
    AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
    owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
    might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
    which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
    when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
    intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
    li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
    lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
    bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
    instruction
    + S8187224, PR3488: aarch64: some inconsistency between
    aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
    HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
    cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
    before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
    all enums
    + [backport] Fix build error: verifier liveness should not be
    implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
    region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
    Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
    memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
    shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
    immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
    humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
    divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
    tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
    should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
    garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
    clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
    walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
    consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
    write barrier on constant oop fix
    + Missing UseShenandoahGC check in
    LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537358400">- Backport Oracle July 2018 CPU
- Added security fixes:
  * 8197871.patch
    + S8197871: Support Derby connections (CVE-2018-2938,
    bsc#1101644)
  * 8197925.patch
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
  * 8199547.patch
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
  * 8200666.patch
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
- Added security-in-depth fixes:
  * 8191239.patch
    + S8191239: Improve desktop file usage
  * 8193419.patch
    + S8193419: Better Internet address support
- Added patches:
  * 8038636.patch
    + S8038636: speculative traps break when classes are redefined
  * 8051972.patch
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
  * 8055008.patch
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
  * 8074373.patch
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
  * 8076117.patch
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
  * 8157898.patch
    + S8157898: SupportedDSAParamGen.java failed with timeout
  * 8169201.patch
    + S8169201: Montgomery multiply intrinsic should use correct
    name
  * 8170035.patch
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
  * 8176183.patch
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
  * 8187635.patch
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
  * 8188223.patch
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
  * 8196224.patch
    + S8196224: Even better Internet address support
  * 8196491.patch
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
  * 8196854.patch
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
  * 8197943.patch
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
  * 8198794.patch
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
  * 8199406.patch
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
  * 8200359.patch
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
  * 8201433.patch
    + S8201433: Fix potential crash in BufImg_SetupICM
  * 8202585.patch
    + S8202585: JDK 8u181 l10n resource file update
  * 8202996.patch
    + S8202996: Remove debug print statements from RMI fix
  * 8203233.patch
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
  * 8203368.patch
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
  * 8205491.patch
    + S8205491: adjust reflective access checks</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537704000">- Added patch:
  * icedtea-3.8.0-s390.patch
    + Fix out-of-memory problem with bootstrap javac on s390
    + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1537963200">- Removed patch:
  * s390-java-opts.patch
  - Not needed any more</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto 